Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B61CFC087D8F11F18407DCCFCE1D38B0.roa
File: B61CFC087D8F11F18407DCCFCE1D38B0.roa (raw, json)
Hash identifier: 4OYDXjykavltB1H3pPp8u0laH6Chv4yeaEWR4cnSiWc=
Subject key identifier: 5E:00:E9:96:74:E6:D8:75:E7:CD:6E:FD:95:4B:BA:BE:0F:9E:3A:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D861
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B61CFC087D8F11F18407DCCFCE1D38B0.roa
Signing time: Sun 12 Jul 2026 01:19:22 +0000
ROA not before: Sun 12 Jul 2026 01:19:17 +0000
ROA not after: Tue 10 Jul 2029 01:19:17 +0000
asID: 17561
IP address blocks: 154.198.238.0/24 maxlen: 24
154.198.239.0/24 maxlen: 24
154.198.240.0/24 maxlen: 24
154.198.241.0/24 maxlen: 24
154.198.242.0/24 maxlen: 24
154.198.243.0/24 maxlen: 24
154.198.244.0/24 maxlen: 24
154.198.245.0/24 maxlen: 24
154.198.246.0/24 maxlen: 24
154.198.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120929 (0x1d861)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 12 01:19:17 2026 GMT
Not After : Jul 10 01:19:17 2029 GMT
Subject: CN=6a52eb9a-eae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fd:02:07:19:13:6d:ce:90:3a:d3:74:bc:0e:
b2:41:5c:19:e5:d3:b4:da:15:8b:ae:1a:2c:f8:ef:
ed:f0:88:d4:86:7a:77:1a:e9:ae:92:91:bd:92:5a:
0d:24:fb:aa:c9:c9:ca:b5:d4:9a:49:8a:74:99:eb:
94:05:b7:6c:db:0e:00:84:d6:ba:3a:67:ee:33:3f:
31:ff:b0:a7:9d:f6:c1:6a:03:39:4e:6e:83:f1:82:
47:3d:b4:2a:08:90:fc:0d:fa:48:ce:ff:d1:34:2b:
c9:d3:38:c2:1b:bb:dc:10:0a:0d:51:87:f7:9b:fb:
2a:08:87:cd:b6:a1:1f:de:14:db:d5:15:df:b1:fc:
80:51:30:8c:fa:66:03:a5:6c:c8:02:56:64:64:43:
85:ce:0a:68:55:d6:7b:4b:17:15:00:3c:60:1e:05:
8f:52:e5:7f:a8:de:43:88:c6:11:af:c4:01:94:54:
d4:6e:4e:1e:b2:dd:17:1b:5c:c0:2b:8b:51:37:1e:
8d:a2:37:e4:2f:fb:45:8b:fb:83:aa:76:0b:03:b5:
d5:ac:88:0c:94:ca:9a:97:e8:01:30:eb:aa:22:48:
7f:2b:cf:13:ce:4f:7c:c1:53:86:a4:ea:8e:f9:82:
cd:1f:f1:aa:af:90:d9:27:96:fa:e6:09:bb:23:8d:
d6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:00:E9:96:74:E6:D8:75:E7:CD:6E:FD:95:4B:BA:BE:0F:9E:3A:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B61CFC087D8F11F18407DCCFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.238.0-154.198.247.255
Signature Algorithm: sha256WithRSAEncryption
43:a4:87:85:fa:cd:4c:cb:88:e6:8b:fa:79:8a:47:fc:2f:7c:
48:11:85:d7:8c:9b:82:c7:f1:90:1c:7d:36:a9:2e:b9:17:e2:
97:84:61:8c:14:86:54:8a:f1:63:2e:87:90:77:a9:3a:63:a5:
2f:b1:f9:e6:dd:4a:62:a3:28:85:cf:2f:fb:14:c7:04:fa:7c:
e9:58:2f:1e:c9:78:d8:cc:6a:99:01:00:12:76:08:54:9a:2b:
40:5a:fd:44:90:05:fc:91:52:17:bf:ee:cd:c9:38:b9:9c:07:
cb:c0:4c:aa:fd:4e:13:5c:5e:f9:a0:be:c9:37:da:96:a8:69:
3b:2c:cf:22:df:fd:4e:42:9f:10:ed:0b:87:fe:af:9d:63:1d:
6b:8c:8c:4d:09:5e:d8:10:db:b1:ed:08:4a:13:e2:b8:21:c9:
4a:38:49:0e:93:ff:bb:40:47:f1:d4:cd:39:e4:cb:68:da:3b:
10:aa:81:fe:1c:61:01:e8:9c:e0:c2:49:88:29:5e:b6:8f:82:
64:e8:04:a1:9e:e5:f5:f0:4c:ca:ef:20:61:6e:31:80:42:3b:
f1:b1:71:e8:87:47:d0:2c:49:cd:12:f4:1f:31:9c:91:fc:40:
8b:5a:9a:9a:d6:a1:46:7e:06:d4:34:3d:91:fa:fc:9c:b5:79:
27:34:33:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:25 2026 by rpki-client