Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2ED57C491DB11F1B34EADBBCE1D38B0.roa
File: C2ED57C491DB11F1B34EADBBCE1D38B0.roa (raw, json)
Hash identifier: NbC2/GU1/o8mCB3fxeyxmsylG1FHMnSm97uzbr5OBTg=
Subject key identifier: BE:FD:D4:DD:9E:C2:A2:58:DC:B9:D4:43:F3:E1:CB:55:75:73:EE:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DD09
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2ED57C491DB11F1B34EADBBCE1D38B0.roa
Signing time: Thu 06 Aug 2026 21:14:08 +0000
ROA not before: Thu 06 Aug 2026 21:14:04 +0000
ROA not after: Sun 20 Sep 2026 21:14:04 +0000
asID: 212238
IP address blocks: 154.193.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122121 (0x1dd09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 6 21:14:04 2026 GMT
Not After : Sep 20 21:14:04 2026 GMT
Subject: CN=6a74f920-8106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:47:ab:23:21:2c:59:13:cf:2d:fe:91:11:69:
74:3f:ea:8a:54:b0:5a:b5:43:2a:ac:2f:7f:91:f0:
53:ab:cd:71:8f:fb:f0:3a:da:52:e8:b8:ce:db:d4:
d8:40:e8:d8:6d:ba:15:9f:08:2a:dd:61:9b:c6:57:
c5:b0:00:49:45:44:db:b2:dc:3a:73:79:a4:a5:5d:
03:3b:b5:70:f1:36:6e:fb:35:6b:2d:de:67:65:25:
c3:89:31:d0:94:98:de:a3:5a:7c:43:82:09:4a:75:
bf:2f:f4:d4:7f:40:b3:c2:ce:43:ef:de:a4:f3:26:
4f:00:1d:aa:22:56:1f:ed:91:02:9d:f1:c6:ce:d5:
fc:80:b5:24:86:15:1d:5e:a9:4e:da:bd:a6:92:8d:
70:be:ca:b0:15:e7:0c:ff:e7:9b:7b:90:ad:ba:de:
71:f2:d1:61:6d:1a:29:2e:c3:fa:91:d4:8d:0b:e9:
1d:be:43:f3:f3:19:c1:41:bb:f5:4f:1b:58:f8:73:
79:d0:9c:6a:38:21:52:9d:44:fa:2f:fa:37:5f:7e:
0d:7a:aa:69:6e:be:6d:26:b0:e5:9e:11:6b:25:63:
34:12:d7:1c:2c:f6:a6:e5:df:06:90:fd:35:00:03:
7a:57:59:31:13:29:6e:b6:ca:28:a3:9f:2d:ee:f5:
2f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FD:D4:DD:9E:C2:A2:58:DC:B9:D4:43:F3:E1:CB:55:75:73:EE:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2ED57C491DB11F1B34EADBBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.1.0/24
Signature Algorithm: sha256WithRSAEncryption
25:9c:26:c0:f0:a5:0f:31:28:6f:8a:6e:27:48:3d:46:1a:0c:
6f:fe:a9:5b:68:d1:6e:6f:5c:90:3f:2e:c4:41:76:30:d2:87:
0d:b9:fd:f2:97:9f:b1:18:69:b8:58:df:20:bc:f0:2e:1a:cc:
0f:fd:c1:ba:a0:3d:ef:92:31:59:63:b2:d6:cc:65:b5:26:f0:
27:0e:b5:d6:0b:2f:49:31:10:32:32:61:f4:7c:da:d6:2a:19:
74:53:e1:99:39:1c:ae:26:c5:a4:a1:ce:38:2b:a6:cd:6d:35:
b4:cd:03:93:b7:f7:dc:1a:4b:f8:49:d8:18:d7:d4:60:c7:49:
45:7f:0c:3c:45:f9:00:87:df:fa:3e:e8:9e:9b:68:d9:3f:f8:
51:a2:1c:97:92:e8:d7:a3:ec:91:89:1b:f4:1c:2d:2f:9f:73:
21:07:32:e3:59:40:ed:e8:28:d0:2c:71:74:c6:5d:2d:87:59:
f8:9d:b0:05:de:bc:07:3b:a1:f1:1f:1c:88:f9:f4:9e:24:df:
5d:1a:be:a4:ad:f9:60:c2:2b:dd:72:f6:95:46:f6:10:28:da:
02:19:2a:3d:dc:91:72:b4:bc:84:75:45:4a:cf:8b:6e:8b:9a:
67:e4:9c:37:30:13:0b:a4:da:99:ec:80:d6:d4:eb:67:71:fb:
50:c2:c9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:05:59 2026 by rpki-client