Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE26451A8B2211F1AB71F4ECCE1D38B0.roa
File: DE26451A8B2211F1AB71F4ECCE1D38B0.roa (raw, json)
Hash identifier: K+jYKk0LqKrYyF9SYOXgVN6yNgJmb6uXuvokRR+UkiI=
Subject key identifier: 8D:0C:BE:F5:76:03:FB:93:51:21:C0:AC:9C:64:DD:09:B5:31:BE:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DBC5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE26451A8B2211F1AB71F4ECCE1D38B0.roa
Signing time: Wed 29 Jul 2026 07:55:30 +0000
ROA not before: Wed 29 Jul 2026 07:55:26 +0000
ROA not after: Mon 31 Aug 2026 07:55:26 +0000
asID: 202656
IP address blocks: 154.200.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121797 (0x1dbc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 29 07:55:26 2026 GMT
Not After : Aug 31 07:55:26 2026 GMT
Subject: CN=6a69b1f2-b792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:57:04:c2:56:5b:81:fb:3d:1e:a7:25:bc:a3:
c8:c3:a7:8c:f0:7d:08:8e:5b:d8:03:d3:8e:e5:11:
20:9e:20:6a:1a:9b:af:f5:cc:46:5f:9a:0d:0d:fb:
f6:e7:70:35:32:29:31:4f:b3:20:23:78:80:d2:a3:
ae:44:5c:4c:44:7d:93:70:b9:9d:ce:ac:cb:5d:a2:
e9:72:a7:dd:05:2b:f6:9a:de:18:bf:11:20:18:9f:
a5:37:c1:75:d5:c9:79:6c:66:9f:47:6a:d0:90:6d:
eb:5b:79:21:eb:6b:5c:36:b9:d3:62:57:1d:76:f1:
70:cf:d7:c6:37:5e:57:e1:6a:1a:47:b7:67:8c:4b:
f5:bf:ff:81:c8:ad:d7:63:a4:d5:b0:4b:5e:d3:e1:
30:b5:85:c3:fd:e4:cf:53:68:df:b3:79:86:35:02:
59:f8:55:3c:84:d5:41:d0:94:ba:5f:fb:f5:1f:a5:
63:a8:93:0b:65:2d:53:32:7b:83:05:8e:38:57:93:
63:e1:84:d6:3f:bb:f8:f9:d8:59:2f:9f:f3:38:08:
a2:b2:35:5d:d0:86:eb:10:21:a6:b0:98:72:7c:1f:
22:cd:54:58:17:f6:62:2e:d7:96:57:21:b1:de:1e:
5b:10:aa:2d:01:22:18:ef:f6:ab:91:6d:96:a6:62:
44:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0C:BE:F5:76:03:FB:93:51:21:C0:AC:9C:64:DD:09:B5:31:BE:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE26451A8B2211F1AB71F4ECCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.227.0/24
Signature Algorithm: sha256WithRSAEncryption
14:38:95:79:fa:6a:ae:fe:6a:b1:81:8f:4b:08:f6:c2:f9:6e:
ed:be:80:d5:41:9b:58:c6:7a:27:ea:c0:7e:53:cc:12:73:ff:
86:4a:dd:7f:ac:c9:62:bc:69:52:34:e0:1d:6b:02:c5:6a:3e:
46:a4:b1:62:6b:e4:01:7c:cd:80:95:80:2b:f9:b2:3b:48:82:
cd:5f:be:ae:4d:f1:09:b9:ed:ff:fa:dd:9c:c2:c1:cf:a2:c4:
e3:e5:a9:b1:db:b4:8e:44:a9:ec:71:5a:ee:c7:00:bc:bd:0d:
74:69:aa:eb:cb:ed:84:e2:b4:96:c3:31:d6:c6:cc:d0:5e:1f:
68:8d:59:e8:64:90:51:67:52:3d:42:80:63:ce:94:c4:ee:46:
77:2e:b9:be:1e:d1:32:f3:7c:17:02:50:d0:e1:0d:de:5c:06:
74:91:2f:34:ae:99:f6:ad:5b:8c:b4:de:c1:ad:43:4d:6a:d0:
1e:06:7b:c6:ba:61:c8:83:15:94:bb:30:ac:ac:dc:7b:f0:35:
c0:a8:92:56:ed:84:dd:94:44:7d:30:1b:e5:fe:1f:c9:ce:16:
4d:b6:44:4c:03:2b:83:b0:08:89:4a:3b:78:1a:11:34:4f:f2:
91:85:12:07:a0:7b:da:16:75:ae:fe:39:56:42:b8:01:62:3d:
65:0b:64:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:40 2026 by rpki-client