Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CF2CC8881BE11F1ACD1661DCF1D38B0.roa
File: 5CF2CC8881BE11F1ACD1661DCF1D38B0.roa (raw, json)
Hash identifier: bPlg9lvxmzFdf1lKdOTLzJlxrVXwyOG+oF1lAZkshzg=
Subject key identifier: 39:22:3C:18:AC:4E:DD:85:00:50:A7:13:DA:1D:1F:04:3B:F4:EC:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D963
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CF2CC8881BE11F1ACD1661DCF1D38B0.roa
Signing time: Fri 17 Jul 2026 09:03:23 +0000
ROA not before: Fri 17 Jul 2026 09:03:19 +0000
ROA not after: Mon 24 Aug 2026 09:03:19 +0000
asID: 9304
IP address blocks: 154.92.192.0/24 maxlen: 24
154.92.193.0/24 maxlen: 24
154.92.194.0/24 maxlen: 24
154.92.195.0/24 maxlen: 24
154.92.196.0/24 maxlen: 24
154.92.197.0/24 maxlen: 24
154.92.198.0/24 maxlen: 24
154.92.200.0/24 maxlen: 24
154.92.201.0/24 maxlen: 24
154.92.202.0/24 maxlen: 24
154.92.203.0/24 maxlen: 24
154.92.204.0/24 maxlen: 24
154.92.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121187 (0x1d963)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 09:03:19 2026 GMT
Not After : Aug 24 09:03:19 2026 GMT
Subject: CN=6a59efdb-0d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:48:fe:68:06:0b:4b:f4:51:0a:2a:54:0e:41:
71:e7:d8:ab:de:11:a4:5e:63:fc:80:1c:11:fc:b5:
24:a0:ea:d6:13:5b:19:a8:cd:62:6e:21:55:eb:dd:
16:2e:0b:3f:75:4f:91:38:92:2b:03:49:69:02:16:
67:1c:46:50:4f:e2:fd:02:38:5a:99:27:19:0f:18:
a8:d2:64:8a:5d:8b:01:2b:46:ef:bf:ec:1d:ff:2d:
54:46:50:bc:53:d8:81:8d:58:86:3f:38:a2:bc:8a:
de:cb:31:e4:21:a0:cc:18:8c:ce:e2:14:ec:77:f6:
02:c8:54:b8:b4:f6:e9:a3:a8:2c:f3:ab:60:74:23:
53:e9:a2:3d:dd:d0:0b:da:84:8c:f3:00:69:d3:48:
4c:5f:c4:32:cd:29:da:47:88:9a:fb:b5:c0:94:0d:
bb:87:f7:c4:34:1e:ae:e1:30:74:54:d0:b2:cf:aa:
f2:a7:68:a4:9e:d5:36:b9:65:1d:73:37:58:02:19:
7b:b0:61:00:28:3f:a9:f4:20:cf:0d:23:b7:26:a3:
ce:56:ec:76:58:19:52:98:a0:e6:7a:18:22:9e:3e:
b4:30:4d:9e:69:66:8b:72:5e:a8:3b:b9:5c:90:a9:
a4:f2:69:7a:61:37:d1:a3:3d:0c:ac:ba:37:79:e1:
74:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:22:3C:18:AC:4E:DD:85:00:50:A7:13:DA:1D:1F:04:3B:F4:EC:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CF2CC8881BE11F1ACD1661DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.192.0-154.92.198.255
154.92.200.0-154.92.204.255
154.92.215.0/24
Signature Algorithm: sha256WithRSAEncryption
77:68:f0:a6:cc:5a:da:9e:08:3d:9d:ef:5d:8c:8e:0d:31:8f:
a7:70:d4:57:b5:27:8d:69:2e:20:6f:96:74:03:a3:3d:74:b1:
53:38:64:82:36:8b:22:23:a4:4f:c5:cc:e5:a3:1f:0f:d4:f0:
0f:64:72:88:af:9c:24:97:d6:83:41:4d:38:de:42:84:e8:5b:
92:cc:ef:e5:6a:e2:a7:0b:97:62:41:73:7c:e3:f2:17:c0:6d:
05:81:80:51:71:2c:40:a5:ea:d8:dd:37:f8:5a:7d:00:67:27:
7b:26:cd:be:35:2c:0e:e3:d1:ea:db:f3:68:2b:b1:4c:83:ea:
04:e4:d7:30:4e:2d:e0:8a:df:1d:3a:0c:cd:06:67:64:70:01:
8e:72:5f:05:71:81:b8:79:58:b2:a3:84:0b:f3:d6:dd:9a:2f:
ed:47:ad:22:97:70:f7:ef:17:3d:e3:a6:15:19:4e:74:46:c3:
5e:7f:a3:25:0b:a9:f6:12:ea:84:ec:45:27:d3:33:51:b0:57:
27:30:65:5b:8f:bb:fc:60:b6:03:eb:34:e1:4a:fd:fc:1a:60:
44:03:c8:4d:df:f4:2b:02:78:11:ad:b0:36:cf:a0:c4:62:ee:
4d:d0:cf:1d:21:85:96:3c:0f:7d:78:38:bb:67:1f:70:ad:87:
5e:0d:ea:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:31 2026 by rpki-client