Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4B8D75A7E8411F1B47220B9CE1D38B0.roa
File: C4B8D75A7E8411F1B47220B9CE1D38B0.roa (raw, json)
Hash identifier: d5RxBI+RphYu6RJzsIRw+PnWrfFx+FKbmgFa4mBSFzM=
Subject key identifier: 27:6C:64:BE:6E:CB:53:1E:0C:09:8C:B9:1C:89:2E:B5:72:3F:C8:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D8AB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4B8D75A7E8411F1B47220B9CE1D38B0.roa
Signing time: Mon 13 Jul 2026 06:33:33 +0000
ROA not before: Mon 13 Jul 2026 06:33:28 +0000
ROA not after: Mon 17 Aug 2026 06:33:28 +0000
asID: 49581
IP address blocks: 154.83.149.0/24 maxlen: 24
154.86.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121003 (0x1d8ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 13 06:33:28 2026 GMT
Not After : Aug 17 06:33:28 2026 GMT
Subject: CN=6a5486bd-3084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3f:1b:1c:69:1a:91:d8:dc:de:9f:9d:93:90:
95:ac:89:1e:10:f1:ad:ed:dd:1f:8c:f6:b5:90:2d:
a6:0b:77:e4:c8:dd:1c:09:52:2a:0f:dd:89:44:12:
1f:ac:22:5f:72:f1:29:4b:37:1e:fa:08:1d:1f:16:
13:cd:aa:5f:7b:8e:5a:41:5a:09:ed:ca:94:83:19:
f6:b8:80:e2:97:85:04:0a:6e:04:59:35:e4:ec:e5:
69:d8:61:a4:b5:d3:9d:b1:87:e7:30:a8:eb:41:68:
d3:fb:4f:ae:02:dc:cd:b8:f9:eb:9e:d1:64:38:bd:
cf:1e:d6:7b:0a:c9:ad:90:d7:3e:b8:71:eb:44:a2:
97:26:fe:0b:7f:b7:83:3e:b8:c9:3d:34:0d:19:b6:
7c:c6:93:77:4a:03:ed:62:00:43:0b:0d:9d:01:fc:
e5:d6:7e:d4:46:cb:33:b5:8b:11:73:59:2f:5e:49:
6e:a4:54:a1:50:c5:2a:02:e9:c9:20:b4:2c:1e:31:
cb:82:1c:f6:b4:d1:88:91:39:20:49:7d:9d:56:02:
ec:be:a1:bb:ce:f0:a1:84:d9:e7:9d:02:04:18:3f:
e0:67:88:b4:eb:11:ef:2b:5b:5f:fa:75:c3:19:89:
08:e3:3f:f2:4c:a3:66:da:f6:17:3c:a0:dd:88:1e:
e8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6C:64:BE:6E:CB:53:1E:0C:09:8C:B9:1C:89:2E:B5:72:3F:C8:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4B8D75A7E8411F1B47220B9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.149.0/24
154.86.119.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:f1:f3:05:89:55:9c:42:69:c0:45:2a:49:3b:a2:aa:27:4a:
3e:3b:df:89:18:23:11:d8:1a:43:c6:9e:3b:55:dc:b0:f1:5c:
95:d9:ae:59:17:11:95:f5:75:45:50:b3:7c:19:43:44:0d:bd:
20:92:fc:62:a6:70:35:35:dc:1d:13:dc:43:65:6c:b1:e4:6b:
11:8f:77:8b:c2:ef:64:56:4d:3e:fd:e5:07:2e:9b:81:28:41:
30:72:4c:c8:79:48:e8:e2:62:e7:b5:7b:80:21:32:6a:3d:e6:
08:69:de:52:e4:25:ab:df:df:ac:37:4b:31:b6:92:57:67:9b:
09:03:dd:04:be:98:a2:55:a5:a4:05:77:25:3a:5c:05:78:dd:
8d:aa:0f:d5:99:63:1a:05:b3:19:2d:f2:f9:11:f0:cb:32:f2:
0a:37:aa:e8:3d:df:61:80:be:fa:a6:d0:ec:01:1b:c0:b2:d5:
54:30:3f:17:7b:9b:87:1f:f9:e0:30:3e:c7:44:02:c6:48:eb:
dd:14:55:47:b2:68:a3:e4:0f:1e:c9:92:68:8b:69:dd:b6:f8:
62:44:fa:4f:53:ee:6f:2d:a9:69:d7:63:d8:c1:7e:96:b7:ce:
8e:1c:87:61:f7:db:1d:d3:46:54:b3:24:c4:9b:5d:51:3e:0a:
a9:d0:d8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:55 2026 by rpki-client