Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB7A9338694611F180021612CF1D38B0.roa
File: CB7A9338694611F180021612CF1D38B0.roa (raw, json)
Hash identifier: 7fRPCuLY7X/9LFwwNTQkhQ4PrSxR+1Q5yMdYEvWfOvI=
Subject key identifier: A0:52:43:25:18:AB:F3:69:D6:FF:2E:0B:34:85:4F:14:03:86:CC:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D314
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB7A9338694611F180021612CF1D38B0.roa
Signing time: Tue 16 Jun 2026 05:47:01 +0000
ROA not before: Tue 16 Jun 2026 05:46:57 +0000
ROA not after: Thu 16 Jul 2026 05:46:57 +0000
asID: 142032
IP address blocks: 154.222.16.0/20 maxlen: 24
154.222.16.0/21 maxlen: 24
154.222.16.0/22 maxlen: 24
154.222.20.0/22 maxlen: 24
154.222.24.0/21 maxlen: 24
154.222.24.0/22 maxlen: 24
154.222.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 22 Jun 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119572 (0x1d314)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 05:46:57 2026 GMT
Not After : Jul 16 05:46:57 2026 GMT
Subject: CN=6a30e355-43ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f9:cf:d1:55:3b:5b:31:bb:92:a7:4b:c6:3a:
ce:1e:35:82:e2:42:64:55:74:23:de:c7:82:4e:17:
9a:79:d5:2e:3c:eb:a1:4e:18:c6:06:91:5d:69:dd:
33:66:5a:76:f7:0d:d6:c2:5a:16:c9:ef:8b:4f:0f:
77:b5:aa:68:0d:92:15:03:96:f4:33:52:d4:65:35:
2c:96:7e:74:cc:32:41:37:6a:0c:71:b4:a3:e2:80:
b2:cc:eb:7f:41:19:ca:1b:d1:57:ea:c7:9d:0a:8b:
c4:45:38:b2:cb:e3:74:dd:63:78:a0:4f:67:94:2f:
bc:32:59:6b:3b:f4:b4:10:76:c7:2e:8b:eb:02:ee:
62:25:3c:72:b2:66:88:bc:8c:e5:a1:05:2c:d2:70:
00:9a:f6:d5:43:3a:b5:4a:ab:ec:5d:dd:04:1a:80:
4c:12:18:28:dd:ff:06:03:e5:42:fd:ed:88:ea:d4:
ce:a4:30:9a:62:57:d3:7a:92:3d:f9:3a:90:34:fe:
c8:ac:4f:84:04:89:f5:a8:17:16:61:85:23:71:3b:
89:3c:9a:ed:86:29:ec:80:d7:e8:a9:50:6f:c3:ff:
f0:8e:bf:d9:eb:b2:7b:4a:9b:5d:f0:c6:0f:a3:23:
90:94:7e:1e:d4:97:80:76:5c:2e:60:06:ac:3b:95:
77:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:52:43:25:18:AB:F3:69:D6:FF:2E:0B:34:85:4F:14:03:86:CC:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB7A9338694611F180021612CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
3c:de:8f:e5:c2:73:fc:cb:ab:db:26:73:a2:c3:7a:ec:e3:b1:
ce:bb:a0:86:6d:14:ca:b3:a5:c5:6f:b1:f6:65:30:29:7f:3d:
7a:fe:6d:47:5f:93:14:03:ad:d9:e4:6a:0e:4e:0b:0e:73:a9:
25:65:88:e0:b2:c3:4e:6b:8a:b4:ac:1a:38:00:fc:08:8e:a0:
c0:65:82:ec:19:cd:0b:70:8c:01:39:c7:c6:1e:6a:7b:3d:bb:
c9:11:f7:0f:81:5a:90:c1:2e:7b:af:69:2f:81:f5:08:d4:2e:
1f:aa:11:8e:2b:c2:26:b0:95:16:ac:89:31:ce:a6:ab:9f:e1:
3a:17:18:8d:76:ab:4b:6b:96:64:f9:32:70:76:89:d3:e2:69:
81:e9:33:40:9e:bf:49:10:54:68:b3:d2:ef:f3:4c:ce:ec:a1:
85:62:f5:d6:9e:df:43:16:4e:33:42:81:8c:a1:4c:8f:42:0d:
30:30:a8:68:59:e6:19:bb:8a:48:df:e6:ea:52:38:af:25:54:
9a:5e:47:6a:15:3c:bb:94:25:a5:d5:18:62:37:7a:5a:cb:59:
84:b7:f5:fa:db:4c:78:a4:26:c9:5b:ff:4b:e3:97:e5:52:93:
63:3b:c5:f3:68:92:19:de:87:ec:1c:bb:5a:8c:3e:20:24:5f:
c7:a7:91:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 10:42:24 2026 by rpki-client