Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D12E7996923311F1A49919E1CE1D38B0.roa
File: D12E7996923311F1A49919E1CE1D38B0.roa (raw, json)
Hash identifier: xit4M7BhmwPKFD8xIr4CJGJXrv0mTOW5g+KCawNrNU0=
Subject key identifier: 38:CA:85:D4:64:DB:12:3E:0C:FF:3C:9E:D6:0B:CB:43:B4:CC:B9:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DD3C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D12E7996923311F1A49919E1CE1D38B0.roa
Signing time: Fri 07 Aug 2026 07:44:28 +0000
ROA not before: Fri 07 Aug 2026 07:44:24 +0000
ROA not after: Sun 13 Sep 2026 07:44:24 +0000
asID: 4515
IP address blocks: 154.203.0.0/23 maxlen: 24
154.203.204.0/23 maxlen: 24
154.203.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122172 (0x1dd3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 7 07:44:24 2026 GMT
Not After : Sep 13 07:44:24 2026 GMT
Subject: CN=6a758cdc-ed17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:50:34:5d:1a:58:f8:0b:a6:a7:36:57:3e:06:
72:cf:f6:3b:ae:d5:6a:d4:f5:df:25:60:f2:72:60:
a0:dd:1e:a6:b5:00:74:db:92:b2:20:4a:5f:41:40:
3d:0d:53:a8:32:40:b8:77:c0:8b:fc:07:88:f5:ce:
16:4f:6f:52:c1:4c:0b:64:4f:ee:e0:92:9b:b9:03:
da:23:62:6a:ee:4a:d5:27:37:23:b1:b9:70:ed:63:
15:21:c9:18:7d:85:94:16:d6:11:ab:08:09:69:e1:
2e:b1:82:dc:7e:a7:9e:eb:82:c8:9d:34:16:54:fe:
8c:2d:9e:09:69:c1:f8:02:71:14:09:3d:88:6f:b5:
26:82:da:80:5a:e5:a4:57:0a:c7:ae:cd:ef:cc:c7:
64:0b:a9:e3:c2:88:e9:7e:5b:ff:b8:06:6e:90:f7:
f6:a5:d2:94:f7:0d:ec:e0:c1:8a:98:87:ef:9e:68:
7d:ab:a4:ed:12:fb:9a:25:b0:d7:14:e3:34:db:be:
e4:64:10:8c:3b:f6:35:e6:11:58:87:6e:45:5c:03:
fa:39:d2:7f:33:95:53:25:ea:5d:58:57:89:c3:a5:
2b:98:fc:df:fe:0e:a1:7c:21:9d:5f:9f:94:79:d2:
9e:50:5e:77:09:72:35:f0:db:af:0e:40:67:b1:f7:
d8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CA:85:D4:64:DB:12:3E:0C:FF:3C:9E:D6:0B:CB:43:B4:CC:B9:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D12E7996923311F1A49919E1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.0.0/23
154.203.204.0/23
154.203.244.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:f6:6c:7e:aa:0e:99:fe:a9:e7:ae:a9:6e:06:01:47:55:ba:
41:18:88:87:f4:77:27:89:ff:bd:39:bf:97:2c:fd:eb:bd:59:
85:51:84:8b:0c:a0:7d:85:c9:ba:7f:67:e9:e9:b1:7c:45:78:
b3:8b:7b:28:4b:c5:95:30:29:41:a4:ca:5c:ad:d0:9f:ff:ea:
4e:f9:7d:54:24:e2:14:88:9e:d9:c2:e6:c1:72:da:67:11:5a:
cf:2a:f3:93:33:f8:0c:5e:e9:26:ba:40:2e:8f:17:bb:8d:98:
7b:57:f4:ae:0f:ae:b9:08:2a:81:3c:30:0c:bd:44:fe:05:95:
cf:b3:1a:c4:33:a2:d7:7b:e5:36:51:89:03:a8:00:9b:f7:b7:
68:37:25:a8:3a:d4:e8:83:e3:a1:14:08:f0:01:f3:85:c9:59:
5f:ed:2f:dc:e7:c4:e6:04:66:2f:78:89:86:d8:30:cb:a1:66:
7a:9e:e7:69:e0:9a:0e:bb:93:c2:9d:25:5c:f9:ac:6f:8c:ef:
42:ee:38:20:1e:fe:0f:5c:39:5b:c0:f2:d5:95:01:ee:c9:ac:
92:c6:a9:00:38:29:ab:77:29:de:11:37:c3:c6:90:f4:ed:8e:
eb:97:f6:a0:68:fb:63:d9:5a:f2:25:d1:f9:1c:69:a2:a4:7b:
3f:96:ee:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:47 2026 by rpki-client