Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55B5357A7F6411F1A6DC9202CF1D38B0.roa
File: 55B5357A7F6411F1A6DC9202CF1D38B0.roa (raw, json)
Hash identifier: 57j5/gOHCZUJG26xRbRbL7VXU0qTEQw6i4tZqE9c3Qo=
Subject key identifier: DE:A3:AB:9B:1F:65:6E:16:40:FF:E0:5C:DA:53:43:0E:5F:C3:B7:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D8D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55B5357A7F6411F1A6DC9202CF1D38B0.roa
Signing time: Tue 14 Jul 2026 09:13:54 +0000
ROA not before: Tue 14 Jul 2026 09:13:49 +0000
ROA not after: Fri 21 Aug 2026 09:13:49 +0000
asID: 25198
IP address blocks: 154.208.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Jul 2026 17:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121046 (0x1d8d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 09:13:49 2026 GMT
Not After : Aug 21 09:13:49 2026 GMT
Subject: CN=6a55fdd2-be22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:48:31:46:21:f7:40:17:ab:6f:2f:15:25:a8:
ae:21:4b:b4:d3:48:a2:3b:1a:03:80:5f:e4:bc:27:
27:42:11:8c:ff:ef:da:17:e2:1b:66:57:5d:e8:05:
bc:c4:01:be:16:27:c3:f8:2a:b4:84:4e:31:2f:bb:
39:25:81:77:2d:02:f3:1d:63:c6:8b:80:b2:b7:1b:
43:bf:48:20:f5:71:b9:6e:9a:17:6b:a6:d8:c8:0f:
c1:67:9c:53:bb:af:8a:c9:17:d0:9d:12:22:2a:6f:
ec:1b:48:40:05:d5:0c:68:47:ae:f6:84:e4:f9:89:
3d:60:b2:b6:0a:8d:37:a8:3c:49:ef:29:99:60:d7:
32:e0:e1:42:ba:9c:f4:fb:7c:26:30:e3:7f:98:31:
02:56:9d:f5:b9:a1:c8:8e:8d:63:6d:d5:c9:5f:c6:
3c:7c:c7:15:54:d6:80:33:ae:f3:6b:b4:8c:e1:fb:
92:e6:76:d2:f8:99:28:7c:1a:dd:f6:6c:95:41:e7:
03:0e:73:e0:37:ec:f7:0b:bd:07:47:57:3e:8d:b1:
0d:4b:60:1f:e8:cf:9a:c2:70:a8:c4:c2:8f:84:ad:
97:98:db:1d:06:0b:02:84:c7:bd:c1:8b:7a:6c:28:
46:f6:b8:95:7d:51:c1:ab:51:4a:99:01:4d:4e:f9:
75:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A3:AB:9B:1F:65:6E:16:40:FF:E0:5C:DA:53:43:0E:5F:C3:B7:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55B5357A7F6411F1A6DC9202CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.67.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:ba:cd:b5:68:a7:23:66:b8:88:93:86:6a:78:c5:08:d1:d7:
a2:41:c0:5a:31:4b:0a:6b:39:ab:a5:da:c7:cf:f6:c1:3b:32:
38:94:69:14:45:26:82:ca:13:cf:08:91:50:b4:d2:3c:9b:39:
ab:57:d0:5b:f1:8f:0d:2c:ed:9b:0b:65:24:e4:61:9f:5b:b5:
45:99:35:f0:57:90:f8:50:47:aa:5d:ab:8e:85:b5:69:59:ff:
ab:22:d4:d1:a6:a8:75:ba:47:66:4c:ba:bc:6a:2e:84:20:bd:
a7:ba:6e:d1:a4:4d:26:57:6d:49:f4:0a:31:60:4f:7d:b7:51:
f6:71:48:e4:97:c5:3f:d8:a1:11:3f:f2:d8:b1:bc:3a:59:0a:
a0:52:a4:f1:b9:3b:c3:81:a3:f6:cf:6d:9a:d6:97:bd:f8:ea:
0b:9c:4b:a3:db:f3:39:7f:d7:da:d7:1f:35:3b:6b:87:d4:81:
54:a4:86:d6:5a:81:fe:08:d5:93:07:0e:e8:d1:f0:9b:28:2b:
d7:a5:19:80:85:7e:cd:f3:83:70:6e:25:8d:e0:45:83:82:0a:
7b:6c:d1:46:75:13:83:a0:1b:78:56:bb:98:9e:84:0e:44:bc:
68:8a:4c:7c:6d:29:20:8d:8b:cd:2b:3e:5b:13:25:c0:7c:e8:
6d:93:7c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:24 2026 by rpki-client