Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3358B96778F11F1A51B2CB0CE1D38B0.roa
File: B3358B96778F11F1A51B2CB0CE1D38B0.roa (raw, json)
Hash identifier: koKAcvWp0wC+BvqnPGPqUTzlt3G0rp53A3ER8LlLaW4=
Subject key identifier: D4:9F:AB:A8:48:3A:14:93:39:B9:B3:35:60:F0:D4:39:8F:06:06:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D6F5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3358B96778F11F1A51B2CB0CE1D38B0.roa
Signing time: Sat 04 Jul 2026 10:04:10 +0000
ROA not before: Sat 04 Jul 2026 10:04:05 +0000
ROA not after: Mon 10 Aug 2026 10:04:05 +0000
asID: 63139
IP address blocks: 154.223.22.0/24 maxlen: 24
154.223.25.0/24 maxlen: 24
154.223.27.0/24 maxlen: 24
154.223.30.0/24 maxlen: 24
154.223.31.0/24 maxlen: 24
154.223.36.0/24 maxlen: 24
154.223.38.0/24 maxlen: 24
154.223.39.0/24 maxlen: 24
154.223.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120565 (0x1d6f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 10:04:05 2026 GMT
Not After : Aug 10 10:04:05 2026 GMT
Subject: CN=6a48da9a-ceea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:aa:aa:45:a1:a2:95:86:ee:06:c5:f2:cf:06:
71:ab:16:37:75:b5:e9:21:7e:61:20:16:e6:91:21:
ce:0f:32:60:d8:5f:22:d2:f6:b7:17:fa:60:e3:e1:
74:29:b8:c4:f1:d8:e2:b6:28:94:8f:ac:37:98:b1:
72:9d:51:03:4e:01:4f:b9:9d:22:ba:2f:be:ee:40:
7d:aa:70:dc:41:73:20:d9:a9:66:e2:65:16:16:7f:
58:11:91:af:be:26:8d:f5:75:d9:99:dc:f9:4c:37:
08:13:dd:dd:76:3f:3e:51:33:0f:6e:6a:0a:1f:8e:
1c:f5:5b:73:f7:85:a3:c4:aa:e9:f3:85:db:df:7d:
67:08:63:ec:3a:d6:67:1c:2f:fb:07:74:f8:33:2f:
bb:27:8d:c9:ed:d1:07:57:6f:6a:cd:24:7a:6c:0d:
c7:11:c6:58:bb:1d:5a:a2:b2:2a:49:79:fe:2b:ef:
81:cd:ab:3b:26:f2:ad:c3:95:7a:44:9d:6f:90:e0:
b2:5e:c4:40:c8:02:17:07:cf:6b:dc:90:ed:b3:37:
f8:80:fe:cc:37:32:78:d6:7c:e0:07:e1:43:aa:e9:
a7:1e:32:a8:f2:bb:37:0a:fe:17:b4:9b:73:a3:1e:
d3:31:0e:65:0a:a9:3c:61:be:aa:bc:24:1a:30:89:
1f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9F:AB:A8:48:3A:14:93:39:B9:B3:35:60:F0:D4:39:8F:06:06:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3358B96778F11F1A51B2CB0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.22.0/24
154.223.25.0/24
154.223.27.0/24
154.223.30.0/23
154.223.36.0/24
154.223.38.0/23
154.223.50.0/24
Signature Algorithm: sha256WithRSAEncryption
11:a3:58:c4:e1:24:c9:19:06:7c:1c:0b:7a:35:a2:c4:c4:0c:
0e:41:21:c8:22:2e:04:62:9c:df:8b:9f:f3:ca:3c:8b:30:bc:
6d:e4:09:01:b9:9b:e1:fc:08:c2:f2:2a:3b:6b:e7:62:e3:2b:
4e:4d:f6:d8:f1:5d:33:e6:ea:9d:4f:78:d4:b2:52:18:10:d6:
e4:33:eb:5d:8e:cb:f8:e7:13:1c:39:0f:f0:db:e0:55:62:38:
4d:e7:f7:c5:91:e4:13:e3:7b:82:63:ef:4c:5b:68:a9:ee:99:
bb:81:db:83:fb:a7:7b:8d:3d:6a:71:dc:bf:11:9d:75:53:35:
39:cf:03:ae:16:55:26:5a:6c:ad:31:eb:a1:6f:68:89:da:8c:
7d:22:22:ba:0e:3a:3f:da:0b:dc:83:79:9c:38:ba:59:9c:28:
81:f9:6c:6d:43:3e:ea:8e:ba:2c:78:51:bd:20:23:42:e8:37:
10:f8:e1:00:f4:da:00:67:f0:66:ee:54:6f:33:d7:9f:bd:7e:
ed:3b:7b:c6:a3:b5:da:2f:db:4b:f2:42:62:a6:dd:a0:97:bb:
50:c6:70:a5:d2:9a:b3:cd:14:28:f4:27:ea:01:39:fc:3b:4a:
38:d9:5b:1a:0c:87:81:e3:d4:e8:fc:bf:d3:f3:06:30:fd:e8:
ec:d6:96:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:18 2026 by rpki-client