Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD81B2526A3E11F1B831CEF3CE1D38B0.roa
File: DD81B2526A3E11F1B831CEF3CE1D38B0.roa (raw, json)
Hash identifier: qI7Nly7dxVaaqZ9Ay81iEAfa3Y52h5g1WD++PaxqlWI=
Subject key identifier: CC:20:27:EE:5F:13:91:8D:14:F8:89:85:C5:84:2D:EC:9C:AE:E2:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D3AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD81B2526A3E11F1B831CEF3CE1D38B0.roa
Signing time: Wed 17 Jun 2026 11:22:46 +0000
ROA not before: Wed 17 Jun 2026 11:22:42 +0000
ROA not after: Fri 24 Jul 2026 11:22:42 +0000
asID: 395886
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119722 (0x1d3aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 17 11:22:42 2026 GMT
Not After : Jul 24 11:22:42 2026 GMT
Subject: CN=6a328386-cd38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7a:c0:ad:e8:64:5d:82:84:31:43:80:5c:3e:
1e:c7:61:92:d1:19:11:5e:ea:5d:86:7c:a6:47:dd:
9b:f2:30:c2:3e:55:6d:74:a5:15:67:9d:56:dd:ed:
3c:38:33:c8:41:36:e3:cc:4c:ee:36:c1:af:0d:f8:
7f:87:2c:c6:85:e5:48:cf:58:37:0c:e5:7e:51:b5:
a4:cf:51:4f:02:5e:25:44:99:26:d2:06:ef:88:09:
70:d9:c1:ca:c7:5d:9f:59:df:cc:7b:c3:62:dd:76:
1c:68:99:fb:46:f8:98:61:8a:7d:ae:ae:bb:e3:6c:
d0:14:04:d7:4f:1a:64:84:3b:d5:a7:7b:01:f8:7c:
4a:60:48:ad:2c:a2:24:6e:ba:28:82:58:cb:22:60:
41:45:90:db:89:76:fb:40:79:d8:19:5f:4b:85:9a:
b1:b7:72:0e:30:0e:58:f3:60:98:dd:15:5e:f8:1d:
08:5a:e9:8b:b4:a7:f5:29:a9:71:f5:14:ce:7b:29:
88:d7:70:f7:ab:3e:ae:97:e1:a7:ac:0a:83:ea:71:
cc:bb:c6:9c:52:50:03:41:33:06:6c:d7:fe:d4:b6:
3a:fd:b7:27:7b:ef:65:70:60:0e:42:fb:9d:08:22:
b5:89:1e:7c:dd:c0:b4:04:21:e2:f3:d0:2e:1d:95:
c7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:20:27:EE:5F:13:91:8D:14:F8:89:85:C5:84:2D:EC:9C:AE:E2:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD81B2526A3E11F1B831CEF3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
Signature Algorithm: sha256WithRSAEncryption
06:0d:30:e8:53:79:f8:08:35:22:79:ef:53:67:1b:82:b0:fd:
56:34:9c:e2:7c:cd:8e:60:c4:ce:5e:8d:af:83:77:f1:95:8f:
f4:6a:f3:96:f0:a9:a6:fe:be:be:b2:81:f3:6f:bf:ef:e2:b9:
09:40:ba:bb:29:72:2c:f4:e0:a6:c6:62:50:35:33:5b:96:0f:
2f:62:62:44:db:8b:dd:6f:c5:f5:a5:16:0e:e9:d2:bf:55:c0:
dd:03:83:70:8a:c1:e3:04:51:a9:56:4f:ba:c7:a0:e8:24:fa:
cf:e9:cb:d7:7f:ed:21:7b:88:bb:4a:64:bb:d4:5a:03:84:75:
42:73:59:bd:60:29:d8:8f:49:23:f8:94:e6:93:70:69:70:68:
72:d7:2a:76:2d:26:1e:7e:63:c0:5f:61:91:d1:a5:a2:93:91:
19:93:94:cc:ef:a5:3c:4a:cd:e5:d0:00:20:14:77:1c:0e:64:
5f:05:c2:d9:66:ae:46:d1:bf:e4:f4:92:86:b8:af:1d:38:25:
3a:a3:48:77:c1:a9:bf:46:02:0e:6b:5c:5f:e5:d7:ee:58:52:
3d:06:cb:62:fc:db:a1:42:76:2f:88:32:31:df:90:5c:e9:79:
3a:03:d0:7c:df:52:22:49:b3:66:6b:8f:2a:cf:78:8d:86:fb:
85:45:5b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 20:00:42 2026 by rpki-client