Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE3470FA8B2611F1AC4F4503CF1D38B0.roa
File: DE3470FA8B2611F1AC4F4503CF1D38B0.roa (raw, json)
Hash identifier: wCrmGYiFmngXZEQ/XBNmw29qpDW1mehJApC/6TVbUTo=
Subject key identifier: B9:CA:48:1B:30:66:8E:32:10:6C:9A:E4:9C:03:ED:0C:E0:3B:70:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DBC9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE3470FA8B2611F1AC4F4503CF1D38B0.roa
Signing time: Wed 29 Jul 2026 08:24:08 +0000
ROA not before: Wed 29 Jul 2026 08:24:04 +0000
ROA not after: Tue 01 Sep 2026 08:24:04 +0000
asID: 49505
IP address blocks: 154.205.244.0/24 maxlen: 24
154.205.245.0/24 maxlen: 24
154.205.246.0/24 maxlen: 24
154.205.247.0/24 maxlen: 24
154.223.198.0/24 maxlen: 24
154.223.199.0/24 maxlen: 24
154.223.200.0/24 maxlen: 24
154.223.201.0/24 maxlen: 24
154.223.202.0/24 maxlen: 24
154.223.203.0/24 maxlen: 24
154.223.204.0/24 maxlen: 24
154.223.205.0/24 maxlen: 24
154.223.206.0/24 maxlen: 24
154.223.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121801 (0x1dbc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 29 08:24:04 2026 GMT
Not After : Sep 1 08:24:04 2026 GMT
Subject: CN=6a69b8a8-b2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:57:3d:ad:5d:f0:02:c2:94:69:63:9b:44:85:
1e:a2:4c:db:a8:b7:7a:45:e2:14:03:b3:9b:8f:13:
96:0c:af:29:3a:8e:bc:17:a4:cf:d4:6d:92:c8:9d:
80:6d:bd:b4:2e:19:db:14:7c:40:fe:51:d2:9d:d7:
94:7c:78:94:74:9e:fd:79:fe:64:2c:87:e3:66:4f:
35:27:b6:dc:59:99:3a:9f:77:d8:d7:d5:31:3c:04:
23:b4:b4:3a:64:ef:09:6c:f0:02:80:eb:65:88:75:
19:a3:df:c6:a1:6f:57:33:64:72:b9:a7:59:e2:61:
89:4d:77:95:9d:77:30:13:2e:56:07:27:7c:1e:f7:
51:3c:e8:48:b4:97:0a:f2:fa:6c:5f:17:7a:13:8d:
fe:b2:8b:d9:c8:ce:52:14:f1:58:b8:e2:b4:c5:c9:
cb:4b:23:67:45:94:24:86:e7:11:99:14:e0:be:cb:
3f:c7:9a:26:88:ab:08:bf:63:41:66:6f:bd:f7:13:
d0:89:1e:e2:1c:df:4c:47:b3:34:cf:9d:16:cf:f3:
4d:d7:9e:89:a7:e2:ca:eb:08:e6:40:dc:1e:dd:f9:
f3:7c:bf:95:b7:1f:47:f6:29:49:6f:89:d6:ee:96:
00:56:77:41:12:7c:85:2b:ca:d4:1c:d3:6f:7f:35:
e3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CA:48:1B:30:66:8E:32:10:6C:9A:E4:9C:03:ED:0C:E0:3B:70:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE3470FA8B2611F1AC4F4503CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.244.0/22
154.223.198.0-154.223.207.255
Signature Algorithm: sha256WithRSAEncryption
7c:c4:d8:62:39:d3:58:d9:b8:38:19:5c:ab:99:4c:44:69:1a:
78:11:90:97:b0:1f:29:61:bd:8c:54:85:1d:dc:27:db:33:6a:
57:18:1f:65:f1:a3:a0:3d:44:75:ee:a3:54:e1:8a:74:75:97:
5c:ef:e5:d3:f3:50:b3:38:c1:3b:44:b9:dc:a7:ec:f4:18:41:
45:16:c6:c3:09:4b:56:51:cf:d1:c2:75:ee:07:6e:08:b6:30:
ab:21:3f:06:10:dc:e2:b4:84:b5:08:72:54:44:61:f8:8b:9c:
48:35:6d:c0:e4:23:a9:d7:c7:79:88:e5:6a:0d:2a:7f:84:fb:
38:26:f9:e3:a5:da:10:ee:3c:75:c3:8f:5c:5f:55:5c:dc:ad:
8c:14:7a:5c:55:e1:bd:c9:aa:00:2c:c1:f2:30:9c:17:cb:f2:
52:a2:6b:73:a5:a1:e8:c7:fe:1f:e9:ad:c3:e0:41:a2:5a:5d:
77:94:71:8e:fa:8c:0e:e1:fd:b9:07:be:5e:27:99:55:60:47:
44:e9:1a:9a:73:75:68:b0:c2:0e:6a:d9:ac:ec:ae:a6:ab:2e:
4a:09:88:7f:a2:f6:cf:5a:23:04:e4:bc:54:75:0c:73:3a:58:
a6:d6:73:86:78:53:c2:44:8f:46:30:c2:87:d4:6a:ae:ff:53:
5b:70:b0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:11 2026 by rpki-client