Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B5FEB428D8D11F1B13329ABCE1D38B0.roa
File: 4B5FEB428D8D11F1B13329ABCE1D38B0.roa (raw, json)
Hash identifier: /e9C9XwgGh8Hsewkl9VSljLoQKd2ihAoQgu3rugOK9Y=
Subject key identifier: F9:1A:94:20:47:88:3F:D2:2F:D9:00:08:D3:B2:19:F8:A8:6E:AA:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC2E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B5FEB428D8D11F1B13329ABCE1D38B0.roa
Signing time: Sat 01 Aug 2026 09:42:22 +0000
ROA not before: Sat 01 Aug 2026 09:42:18 +0000
ROA not after: Sun 06 Sep 2026 09:42:18 +0000
asID: 48031
IP address blocks: 154.215.12.0/24 maxlen: 24
154.215.13.0/24 maxlen: 24
154.216.1.0/24 maxlen: 24
154.218.1.0/24 maxlen: 24
154.218.16.0/24 maxlen: 24
154.218.17.0/24 maxlen: 24
154.218.18.0/24 maxlen: 24
154.218.19.0/24 maxlen: 24
154.218.20.0/24 maxlen: 24
154.218.21.0/24 maxlen: 24
154.218.22.0/24 maxlen: 24
154.218.23.0/24 maxlen: 24
154.218.24.0/24 maxlen: 24
154.222.207.0/24 maxlen: 24
154.222.208.0/24 maxlen: 24
154.222.209.0/24 maxlen: 24
154.222.210.0/24 maxlen: 24
154.222.211.0/24 maxlen: 24
154.222.212.0/24 maxlen: 24
154.222.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121902 (0x1dc2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 1 09:42:18 2026 GMT
Not After : Sep 6 09:42:18 2026 GMT
Subject: CN=6a6dbf7e-7779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ba:62:fe:f2:0a:6f:56:d4:d0:0b:ab:b7:bd:
fe:41:bb:bf:be:39:12:9b:fb:15:c6:d5:14:56:e5:
96:00:77:ff:12:74:30:b7:3d:cc:ff:02:d1:74:b9:
5a:43:50:18:67:df:d8:bc:16:79:3e:fb:5d:3e:87:
14:7a:92:b1:fc:95:47:88:ff:7e:93:a5:76:c8:46:
8f:a9:10:d6:70:46:12:d9:fe:6a:97:01:03:ef:6e:
2c:35:ca:83:1c:f2:2d:40:2f:ca:c3:f0:3e:5c:9c:
29:d6:2e:c6:eb:82:8d:40:42:83:05:f0:e8:c1:dd:
13:6d:4c:95:30:53:d4:e5:5a:ac:e7:00:e5:6e:fb:
90:cc:da:3d:a7:ba:2c:8f:eb:e7:2f:c0:8f:c9:a0:
a3:d6:9d:18:d1:4f:af:14:4a:bb:4a:c3:37:9e:b1:
e9:e1:06:f7:c9:a8:d7:56:7c:03:48:4e:35:20:30:
b4:0d:36:49:79:99:47:0a:3f:98:5f:a6:5f:78:e1:
ab:46:b4:1c:26:a7:05:68:ce:26:dc:83:7c:95:3e:
0d:70:7d:17:93:08:25:ff:54:3c:bd:de:3f:6f:d9:
05:dd:47:6b:ea:73:11:52:d8:c5:37:e4:9d:9f:f5:
e5:7b:c3:91:ee:d2:88:7d:0f:f8:40:63:33:f6:70:
74:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1A:94:20:47:88:3F:D2:2F:D9:00:08:D3:B2:19:F8:A8:6E:AA:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B5FEB428D8D11F1B13329ABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.12.0/23
154.216.1.0/24
154.218.1.0/24
154.218.16.0-154.218.24.255
154.222.207.0-154.222.212.255
154.222.215.0/24
Signature Algorithm: sha256WithRSAEncryption
59:74:1f:91:35:9d:b7:1a:94:fb:18:47:55:b2:2a:a9:4a:09:
38:02:50:81:32:ed:c6:b3:e5:ae:95:54:75:e2:83:5e:17:8e:
ef:30:5b:28:70:33:db:f1:94:fe:5b:34:53:4f:51:75:55:25:
e9:99:85:a6:bd:ab:be:ea:8c:6c:47:59:dc:02:db:90:20:e7:
d7:90:30:79:87:34:32:5e:2c:4d:ff:a0:8d:20:a2:af:26:90:
94:16:b8:10:c3:6a:99:2b:c4:f7:e0:91:35:dc:41:2b:33:88:
a5:9a:61:19:07:db:72:21:2b:91:0c:1e:32:51:04:8b:c4:ce:
0e:f0:ed:4b:1b:ca:b1:fc:76:c7:99:06:04:57:e8:f9:ad:b6:
a6:43:cb:e7:12:8e:5c:85:41:61:eb:65:dc:5e:98:b0:d4:43:
f7:ee:a2:15:9f:11:86:a0:93:27:80:03:6a:6a:d7:2b:e7:84:
5f:fb:a8:72:fa:8d:16:17:68:6e:f2:88:2e:4b:2f:b0:8f:28:
85:a4:6f:c1:c8:5b:1d:aa:29:c0:d9:fd:28:1f:10:86:c8:fb:
f8:f8:3e:bb:43:bf:a1:f2:94:2e:cf:54:79:8a:df:e8:e7:c2:
24:a9:0b:8a:d6:e9:3a:e0:6a:d5:95:29:f9:b1:9c:10:0b:2a:
7e:b5:0e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:41 2026 by rpki-client