Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD781E2A715C11F187C178F7CE1D38B0.roa
File: DD781E2A715C11F187C178F7CE1D38B0.roa (raw, json)
Hash identifier: CbWF0eFaVeyzmTz+DM9o/IpNcjtX49Kj8h4BG6IK9DU=
Subject key identifier: E5:51:B9:0D:77:B2:FC:E8:46:05:12:2D:E2:34:67:96:C2:D9:BF:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D565
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD781E2A715C11F187C178F7CE1D38B0.roa
Signing time: Fri 26 Jun 2026 12:45:09 +0000
ROA not before: Fri 26 Jun 2026 12:45:05 +0000
ROA not after: Sat 01 Aug 2026 12:45:05 +0000
asID: 137436
IP address blocks: 154.94.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120165 (0x1d565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 12:45:05 2026 GMT
Not After : Aug 1 12:45:05 2026 GMT
Subject: CN=6a3e7455-e149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d8:46:69:8d:55:2d:d1:a4:42:41:b5:3d:35:
5b:8d:c3:88:db:67:08:c6:73:bc:ed:cc:e7:c5:ff:
e9:ba:47:99:13:45:d2:58:fd:76:27:e7:79:25:91:
70:bc:b4:d5:3f:d3:91:8b:40:3a:10:78:2e:81:59:
23:3f:87:b4:aa:0c:d2:54:1b:49:cd:7c:ff:06:29:
c8:c6:a9:4f:d6:97:7c:59:01:c4:17:03:2d:2c:17:
75:da:94:bd:21:dc:0a:c4:34:9e:b1:4b:17:39:aa:
51:25:a9:e1:c1:f8:d6:7f:af:0f:65:19:44:77:12:
89:65:09:23:36:b9:19:31:74:ee:ed:04:a9:a6:2f:
ba:8c:1f:47:7c:5b:c6:fc:c0:03:73:8d:8a:ca:ef:
aa:6e:e5:0c:c0:6a:94:5a:b5:6c:30:06:e3:12:43:
87:cb:bc:65:d7:f8:c9:02:73:db:98:73:dd:bb:4f:
db:60:e3:f0:63:5e:ba:1e:c8:4d:53:5f:b5:10:ba:
12:44:74:d8:26:cb:9b:90:0f:c0:e3:a5:b2:7b:36:
cb:07:d8:90:45:70:63:ca:f7:74:bc:8e:6e:ad:15:
ca:23:b8:26:1c:c3:2c:6d:25:ce:50:4d:ea:11:8f:
ab:59:1a:4a:6e:47:6b:40:c4:72:1b:e8:7d:87:ac:
69:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:51:B9:0D:77:B2:FC:E8:46:05:12:2D:E2:34:67:96:C2:D9:BF:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD781E2A715C11F187C178F7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.50.0/24
Signature Algorithm: sha256WithRSAEncryption
20:df:4a:e1:47:40:07:1d:26:e0:32:93:fb:ac:c3:43:7a:59:
fb:14:3b:96:48:00:39:aa:82:24:4b:19:71:81:e0:29:bf:be:
23:a0:47:42:20:b8:6a:f3:18:d0:5e:a2:ab:cf:09:7d:5d:53:
8b:38:81:50:b2:ed:96:8c:d8:37:92:1a:70:6e:5d:f0:d2:37:
9b:ca:8b:79:28:6d:d5:f0:72:f5:a5:1e:6d:1d:d4:24:7d:e9:
05:90:6e:d7:df:8b:8a:1c:74:f6:d1:0f:07:29:b3:3c:fd:7e:
b6:37:fa:a0:23:ea:99:3e:3c:a3:5b:2e:1d:9d:32:60:41:7d:
42:ef:0c:db:06:e1:40:86:43:cb:69:55:95:45:8d:f9:ad:65:
b1:09:ed:e0:e9:cc:b6:03:be:24:21:a9:13:30:15:2f:08:d0:
a0:54:4b:93:8d:08:ed:d9:79:11:10:0f:f3:99:9e:3b:dd:d4:
06:41:f8:61:3b:6b:c8:e9:9c:42:a5:a6:1a:d6:02:03:72:db:
6a:9a:48:0a:1b:f3:3c:cb:79:06:ce:db:3e:22:18:c0:0c:9e:
42:f6:59:e4:99:c3:48:aa:6c:67:53:bc:f1:c0:18:e6:c6:94:
d4:d9:72:de:ed:e4:a6:5a:cd:55:92:37:71:78:fa:5a:29:cd:
e2:f7:1e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:10 2026 by rpki-client