Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD151FB2922A11F19E36CBACCE1D38B0.roa
File: CD151FB2922A11F19E36CBACCE1D38B0.roa (raw, json)
Hash identifier: kgUS9ldevLJO7hBSz018lKqZQE+glY2jMN3hDWDDWFU=
Subject key identifier: 91:B6:2D:02:2E:9E:58:F2:64:0C:9A:75:A5:08:21:EB:0F:99:C5:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DD21
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD151FB2922A11F19E36CBACCE1D38B0.roa
Signing time: Fri 07 Aug 2026 06:39:56 +0000
ROA not before: Fri 07 Aug 2026 06:39:51 +0000
ROA not after: Wed 02 Sep 2026 06:39:51 +0000
asID: 198486
IP address blocks: 154.83.182.0/24 maxlen: 24
154.83.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122145 (0x1dd21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 7 06:39:51 2026 GMT
Not After : Sep 2 06:39:51 2026 GMT
Subject: CN=6a757dbb-9524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:51:56:fa:63:2d:c1:4b:1c:17:70:42:39:
e5:52:b6:c7:3e:c8:5a:5a:9f:61:d5:88:73:d3:0c:
36:40:a6:cb:bd:e9:86:74:ec:d7:be:4d:c1:63:54:
80:b6:ff:e7:b1:12:0e:a0:3d:76:46:8f:fb:1f:73:
8e:25:2f:78:c4:fb:7e:0a:66:ec:eb:84:22:7a:3e:
51:0f:f5:39:52:02:b8:20:3c:8e:6f:5b:4c:e4:fc:
62:80:d0:1b:22:e8:47:4d:ee:fe:42:7a:aa:a3:c6:
f3:81:a5:f9:93:7b:ed:2f:18:0b:7b:e1:62:eb:a1:
0b:35:54:cc:d5:58:85:37:5f:8a:ca:a5:12:76:83:
d9:9a:ec:de:4f:5c:a2:97:cb:b4:f5:69:35:3b:7b:
8c:80:1a:4e:50:1b:fb:7c:25:49:e0:46:ea:e9:fc:
e9:c7:a6:37:11:62:6f:44:4f:c6:e3:ca:0a:4e:3f:
ce:a0:75:af:30:cf:26:66:8e:56:b2:48:6f:5d:a9:
54:0f:db:68:6a:60:35:d0:0b:58:51:d3:09:5f:8c:
73:10:82:9e:47:9b:cf:bc:c5:ba:12:2c:20:44:5a:
04:9d:1f:81:59:f0:38:5c:9b:91:7c:a1:0c:e0:1e:
0e:63:bc:c5:1e:f6:35:75:8a:af:af:98:b0:c0:82:
9f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B6:2D:02:2E:9E:58:F2:64:0C:9A:75:A5:08:21:EB:0F:99:C5:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD151FB2922A11F19E36CBACCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.182.0/23
Signature Algorithm: sha256WithRSAEncryption
29:46:39:07:08:59:a9:20:3d:18:f9:2a:a4:c5:2f:b9:ab:a9:
07:3f:63:37:ef:64:ba:a5:01:80:9e:10:05:a3:af:17:05:dd:
21:8a:0c:03:e4:d2:44:fe:51:d6:eb:49:de:cf:98:8b:57:dc:
35:c4:56:84:1b:8b:07:7d:a2:9d:4e:9f:7b:02:cc:f0:91:89:
5f:a6:af:f2:92:09:2f:1c:99:00:56:05:23:ae:4e:5c:a2:a0:
7a:14:13:69:1e:1c:55:42:bb:c8:0f:28:04:ef:9c:e0:f0:ca:
0d:1a:57:39:fb:e5:05:18:24:a5:c3:8d:a5:70:be:0b:bf:55:
58:8f:b7:cf:75:4c:54:8d:87:0b:09:61:97:9e:9c:5f:e5:7f:
0e:af:47:c0:ef:4c:53:27:fe:48:2c:83:76:68:48:8b:8f:33:
e3:4e:2e:d9:67:28:3f:62:4d:bd:ae:05:76:21:b8:14:94:b4:
49:f8:e1:ed:91:a6:e0:97:af:77:7e:1c:2a:81:de:83:90:76:
2d:18:34:5e:4a:64:a0:09:8e:0b:ab:22:2b:bf:51:e3:7f:dc:
f0:a5:b6:96:80:25:50:37:02:e2:24:59:4e:d8:c7:eb:27:42:
21:57:83:3f:a6:bb:f6:e7:0b:11:c1:08:3a:d4:65:3a:53:97:
fc:17:0d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:06:21 2026 by rpki-client