Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA64C56C810111F18E08741DCF1D38B0.roa
File: DA64C56C810111F18E08741DCF1D38B0.roa (raw, json)
Hash identifier: 1wn/ZzN6hX262MQPL2h5t0zx0EgLpjuQp6c3SFwO3Nc=
Subject key identifier: CA:4C:79:D1:A8:2A:F5:73:8B:E6:65:4A:20:21:CC:21:46:EA:5F:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D928
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA64C56C810111F18E08741DCF1D38B0.roa
Signing time: Thu 16 Jul 2026 10:33:59 +0000
ROA not before: Thu 16 Jul 2026 10:33:54 +0000
ROA not after: Mon 24 Aug 2026 10:33:54 +0000
asID: 9009
IP address blocks: 154.91.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121128 (0x1d928)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 16 10:33:54 2026 GMT
Not After : Aug 24 10:33:54 2026 GMT
Subject: CN=6a58b397-e773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c4:cf:0e:e2:ec:f5:30:6a:3b:61:c2:6f:24:
b5:40:c1:45:b7:35:a6:9f:f6:3f:e2:55:24:45:b3:
47:7d:23:52:c2:44:eb:8b:59:55:37:d7:e7:1f:83:
ae:7b:88:51:de:c6:df:55:b4:69:46:fb:c2:27:2f:
d3:80:b0:5e:8f:df:6f:dc:c0:78:7a:b9:0e:31:3c:
80:93:8f:f5:94:c8:c5:a2:e1:49:4b:67:b7:7e:80:
42:85:52:fa:f9:75:5c:c3:2d:48:ab:92:d5:34:9b:
29:a6:5a:2c:1f:4e:7b:6a:d1:1f:cb:97:9e:8a:22:
dc:95:3a:f7:9c:fd:7f:cb:fb:14:c4:f1:9e:f9:a7:
6b:7e:ec:60:4b:cd:90:28:0f:97:d5:08:9b:05:71:
e7:59:72:d2:e4:a2:c3:de:e0:b6:4f:2c:a2:d5:f0:
1c:d4:b7:01:b3:a8:ce:81:fd:e8:2d:dc:a0:68:fa:
d7:e9:55:f6:e3:32:4d:44:6a:d7:5d:d1:2c:b4:94:
69:8e:a3:57:8a:42:db:db:53:44:07:ff:c8:29:c9:
52:05:e6:5a:f8:3d:5e:d3:12:41:fd:57:6c:49:26:
95:a0:b2:6d:fb:1a:4d:bc:bf:51:af:e3:2e:8e:0b:
d7:4a:fa:17:47:7d:05:fe:f2:17:d7:eb:15:a3:8e:
fb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4C:79:D1:A8:2A:F5:73:8B:E6:65:4A:20:21:CC:21:46:EA:5F:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA64C56C810111F18E08741DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.157.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:ee:29:0f:b7:e8:f9:9c:c1:b9:8e:68:e5:74:bf:ca:90:e2:
9d:74:01:95:61:80:1f:ee:43:b7:30:7f:40:1c:59:ba:0d:c8:
98:46:09:6c:93:00:5d:45:39:65:e0:f5:5d:e1:13:4b:47:49:
dc:df:74:1b:a6:5a:e9:9d:3f:b1:60:12:01:bd:9f:98:a5:06:
cf:8c:b8:70:bb:6d:ee:56:08:10:2d:3d:fb:c4:90:74:6b:07:
bb:d4:cf:b6:62:97:c7:22:88:06:80:3b:ce:45:f8:a8:6b:10:
f8:44:92:d9:82:a2:26:6c:0c:3d:c2:6f:31:ff:a7:e6:db:2e:
4f:69:2b:8d:ce:15:e9:4f:73:6d:3f:a1:8a:46:d5:8d:56:76:
9a:9b:44:d6:91:6d:6a:25:7e:b3:b0:49:b4:be:e2:30:e7:6d:
ba:a2:14:8c:92:94:68:ec:75:23:b2:68:07:cf:46:e9:64:b1:
a5:a1:98:df:62:0d:c3:1a:7a:58:fe:57:e4:a2:0f:20:e3:6e:
a5:e2:32:ca:cd:3f:0d:b2:a4:51:7b:ea:8c:d3:4b:78:95:8c:
b5:5e:00:1a:23:01:c6:e8:7b:1c:1f:37:c7:21:15:b5:a8:1e:
62:96:9d:5e:e6:02:1d:ec:9d:da:1d:ef:a9:cb:4a:b0:1f:c0:
61:07:54:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:28 2026 by rpki-client