Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB640E307CCB11F19878BFACCE1D38B0.roa
File: DB640E307CCB11F19878BFACCE1D38B0.roa (raw, json)
Hash identifier: jgt96yzF/VhvFo9PUKInfh6z4VlfGRCN3/mB2K8lZYg=
Subject key identifier: 90:D3:19:82:18:DE:65:4F:61:1F:42:42:BA:1F:7A:2E:B2:91:30:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D824
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB640E307CCB11F19878BFACCE1D38B0.roa
Signing time: Sat 11 Jul 2026 01:57:23 +0000
ROA not before: Sat 11 Jul 2026 01:57:18 +0000
ROA not after: Tue 10 Jul 2029 01:57:18 +0000
asID: 17561
IP address blocks: 154.214.8.0/24 maxlen: 24
154.214.9.0/24 maxlen: 24
154.214.10.0/24 maxlen: 24
154.214.11.0/24 maxlen: 24
154.214.12.0/24 maxlen: 24
154.214.13.0/24 maxlen: 24
154.214.14.0/24 maxlen: 24
154.214.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120868 (0x1d824)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 01:57:18 2026 GMT
Not After : Jul 10 01:57:18 2029 GMT
Subject: CN=6a51a303-6709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:60:55:37:67:8b:07:bf:d9:8d:88:3a:a3:d9:
a5:26:a1:72:86:76:14:8e:fd:e3:a9:74:e0:95:77:
24:26:ed:98:6f:05:3e:ef:55:fe:e7:e5:06:ea:48:
5e:9a:b9:6f:a7:b7:38:f1:b7:b7:9e:9f:b5:3a:dc:
21:5c:eb:8b:dd:22:07:69:03:aa:8b:4e:78:fb:53:
3d:ad:4b:e8:05:5f:f2:fe:8c:28:03:1d:7a:87:4f:
4d:97:8a:8d:83:3f:15:65:31:7f:a1:63:a7:ff:87:
53:a9:09:75:7d:71:fd:cd:32:e4:b2:d6:ca:6c:f2:
a1:3b:46:1d:55:81:cd:98:01:91:e7:b1:ae:13:cb:
b6:56:20:f6:25:7d:3b:32:20:0d:83:9a:b1:e6:8c:
49:d3:14:cc:45:b3:d4:74:f0:f7:a7:95:be:52:f7:
9d:b6:65:13:e8:28:23:b1:29:ac:98:56:08:47:eb:
7b:24:3c:66:29:d8:37:33:64:cd:e0:ba:8d:09:98:
db:84:d8:24:9c:5e:86:3b:5a:20:7c:55:ba:04:ca:
91:19:74:20:20:b2:da:22:c9:c8:81:72:72:5c:0e:
a4:7f:3d:77:a9:1c:bd:1e:1c:b4:c0:55:76:fa:ca:
fe:39:5d:b5:44:8c:ec:a2:db:39:3d:36:8c:15:59:
04:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D3:19:82:18:DE:65:4F:61:1F:42:42:BA:1F:7A:2E:B2:91:30:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB640E307CCB11F19878BFACCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.8.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:67:57:ae:57:4b:79:c1:39:bb:68:0f:d8:61:1f:a5:00:c1:
f5:82:ba:ed:ac:57:50:40:6c:2a:77:5f:f2:02:fc:0f:0f:45:
f1:09:0f:9d:aa:8e:04:67:a1:e2:96:18:8a:de:91:96:23:e0:
98:1f:4f:84:d3:b7:4e:77:42:3e:1a:5b:ec:9f:ff:bd:07:24:
1e:2d:52:c2:a2:86:07:b5:b1:49:35:c4:d0:36:75:41:68:53:
f8:95:dc:92:82:d8:03:cc:bd:73:30:bb:b1:c7:1b:a3:15:8d:
8a:76:09:e2:24:d1:68:5b:c5:49:ed:2c:40:e7:91:62:1d:61:
16:d3:1f:e3:fc:28:47:c2:6f:ee:54:a1:71:99:27:67:aa:85:
8d:09:aa:3e:ea:d1:12:ca:2d:c0:34:26:89:18:4b:63:f4:2e:
26:15:61:01:0c:db:23:b5:53:5b:58:9b:98:c2:b7:ea:37:7b:
16:a2:c4:96:15:5f:d2:27:2a:a3:e4:da:3f:ab:56:fb:e9:c6:
8e:59:66:e5:f9:dc:bc:68:19:a3:da:8d:80:ad:5e:c3:4e:ff:
46:d5:4e:c1:c6:15:ba:c2:12:61:f6:d5:c9:93:d5:82:3b:13:
fd:66:54:d2:ab:94:33:ac:a0:64:16:19:41:15:e4:2d:67:41:
ea:96:ae:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:27 2026 by rpki-client