Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA30247A699A11F19B9D5408CF1D38B0.roa
File: DA30247A699A11F19B9D5408CF1D38B0.roa (raw, json)
Hash identifier: cf+YLA60iGVvKGoQXj3XJU2MzT0k97H9CO82wvdhNWI=
Subject key identifier: 03:3D:46:8E:15:6B:3E:F7:9E:A8:BA:58:F8:01:64:F5:0E:C4:67:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D361
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA30247A699A11F19B9D5408CF1D38B0.roa
Signing time: Tue 16 Jun 2026 15:48:43 +0000
ROA not before: Tue 16 Jun 2026 15:48:39 +0000
ROA not after: Sat 25 Jul 2026 15:48:39 +0000
asID: 174
IP address blocks: 154.214.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119649 (0x1d361)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 15:48:39 2026 GMT
Not After : Jul 25 15:48:39 2026 GMT
Subject: CN=6a31705b-a486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a3:b8:06:81:51:90:52:38:61:ed:ea:58:74:
ff:e0:ee:b0:8b:eb:b2:d9:e2:fc:25:a8:2e:3d:cc:
9d:5c:1a:e8:fa:2b:4f:72:95:a6:21:8f:82:ca:a4:
f4:26:99:ef:5a:4d:d1:e1:83:a7:7c:c1:14:bd:db:
6e:00:c2:93:7c:14:66:9f:45:e1:20:4b:07:d1:77:
6a:0e:88:93:9a:ff:53:c6:50:77:05:bb:41:cf:ba:
af:ff:7a:7b:9d:d7:e7:05:cf:d4:4d:9d:72:0b:f2:
3c:ec:cb:73:b2:a1:e7:a8:b9:04:e6:65:4e:d5:6f:
56:5a:d0:0c:61:f7:0f:2b:ce:95:60:24:e4:74:0a:
e1:1e:63:e5:42:c0:00:1e:42:6c:ed:c9:db:5f:91:
69:da:20:77:8b:b4:78:49:17:e3:c3:da:ac:2f:fd:
b9:8d:62:5a:c8:48:7a:0a:1b:3a:f8:d1:73:88:91:
d3:5a:fd:df:25:fc:11:0a:23:59:a4:1a:18:67:8b:
17:80:3e:b7:d8:fd:9b:f9:af:23:a3:8b:27:38:bb:
b9:99:87:eb:57:86:fb:6f:c8:bb:f7:da:2f:17:b8:
14:c2:0d:3c:c7:10:0a:01:31:9b:4d:79:64:6f:68:
15:50:8f:d2:e4:37:77:d6:c3:73:cb:4c:df:a6:ba:
89:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3D:46:8E:15:6B:3E:F7:9E:A8:BA:58:F8:01:64:F5:0E:C4:67:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA30247A699A11F19B9D5408CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.0.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:62:4a:cb:37:fc:ea:1e:f7:fd:76:df:7d:88:55:a6:f5:84:
52:5b:20:c4:4d:9e:b3:a6:1f:5e:c7:fc:27:6e:32:7b:7b:66:
18:ec:a1:44:27:69:2c:ba:a8:4e:c8:c4:83:df:15:2d:e6:63:
79:d2:9d:2c:d6:ec:82:76:09:88:cf:15:84:6d:96:f8:4b:ae:
c1:98:88:81:8c:b6:a7:67:36:82:a1:5d:cc:ce:f4:f1:75:dd:
87:1f:1e:9b:56:ba:e0:37:01:2e:70:40:96:47:2b:90:86:60:
b6:f3:51:d3:17:8f:e7:15:2c:d7:42:16:d7:88:6c:85:56:90:
ce:2b:df:ca:db:d7:b9:75:37:d6:de:86:3b:ea:bb:90:1d:32:
8d:32:c9:18:30:99:fd:3d:7e:f5:3a:d9:d5:6f:69:43:de:24:
9b:c1:d8:9d:27:5b:29:9e:19:77:1c:1e:ea:af:a6:ce:80:ff:
e5:fa:ae:38:51:1d:66:a7:a7:65:d0:c6:aa:e4:2a:c2:8b:4f:
7c:c3:37:28:40:5b:05:56:1f:58:51:1d:02:8d:c9:4f:aa:90:
ff:4c:c1:d2:02:00:d0:d2:b8:52:50:22:d7:df:3e:29:19:cf:
65:db:18:dd:9e:bf:3d:7d:5e:2f:31:ef:bb:40:74:f7:19:5d:
09:62:67:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:29 2026 by rpki-client