Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2019CD4948711F187CE5DFCCE1D38B0.roa
File: E2019CD4948711F187CE5DFCCE1D38B0.roa (raw, json)
Hash identifier: kjY8i72xpPxpRSvskaMV6xI7MuBSt1g6oRLk0NFTW1U=
Subject key identifier: 4F:AA:A9:22:9A:82:F9:43:6F:79:53:4A:38:96:DB:C6:68:91:9A:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DDAA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2019CD4948711F187CE5DFCCE1D38B0.roa
Signing time: Mon 10 Aug 2026 06:51:16 +0000
ROA not before: Mon 10 Aug 2026 06:51:12 +0000
ROA not after: Mon 17 Aug 2026 06:51:12 +0000
asID: 139646
IP address blocks: 154.204.0.0/24 maxlen: 24
154.208.12.0/22 maxlen: 24
154.208.16.0/20 maxlen: 24
154.212.128.0/24 maxlen: 24
154.215.0.0/24 maxlen: 24
154.218.0.0/24 maxlen: 24
154.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 17 Aug 2026 00:08:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122282 (0x1ddaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 10 06:51:12 2026 GMT
Not After : Aug 17 06:51:12 2026 GMT
Subject: CN=6a7974e4-3da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c0:b7:c5:00:c7:53:aa:ac:61:87:42:4c:cc:
cd:43:6a:95:a2:f0:9b:9d:89:c9:fa:0f:0c:f6:c2:
d1:0e:0d:a6:10:dc:2e:08:e5:07:11:10:31:ee:5b:
bd:5c:e0:19:16:b7:85:02:0e:a9:55:01:f2:6f:67:
86:11:3c:52:b7:54:82:8a:b0:39:b7:44:a7:eb:3d:
6c:6e:b9:19:c3:95:95:f5:01:61:04:53:b3:ea:67:
81:b8:7b:51:4e:64:31:d7:f1:c0:5b:d2:89:e3:cb:
1a:c4:87:9c:23:ca:ce:8d:42:d7:4e:94:81:31:8c:
b6:05:34:fa:bb:e6:cc:87:0b:4e:58:71:8a:fb:0c:
28:84:d9:c0:1b:74:67:c1:d9:c6:19:ef:f6:dc:29:
1d:33:8c:5d:fd:66:44:65:46:dd:a8:12:57:7d:01:
34:bf:40:db:47:c5:d4:5b:5a:53:59:47:c2:35:6e:
ab:9d:9f:94:d7:e6:cc:e9:b2:ec:ec:41:6f:10:a4:
9b:02:20:fa:35:b6:54:27:4c:2b:20:35:7f:e9:35:
38:74:fc:89:22:8d:09:19:8f:2a:7e:b1:96:d4:fd:
ee:50:35:e5:2e:60:34:8f:fc:bd:ba:9d:d0:49:82:
0f:79:2d:db:89:df:a8:ed:23:7b:d9:9a:b4:57:e7:
76:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AA:A9:22:9A:82:F9:43:6F:79:53:4A:38:96:DB:C6:68:91:9A:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2019CD4948711F187CE5DFCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.0.0/24
154.208.12.0-154.208.31.255
154.212.128.0/24
154.215.0.0/24
154.218.0.0/24
154.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
14:64:b6:15:4b:01:1f:90:c8:38:ce:d0:91:21:33:ba:40:a3:
26:23:87:d0:66:c7:65:88:11:7d:73:1d:f2:fb:26:eb:f5:11:
ff:3b:ef:73:bf:21:f5:66:2c:0d:71:7c:2d:ad:c9:27:b4:44:
0d:87:2e:4c:17:e6:3b:60:55:70:8f:af:23:41:04:ad:b2:18:
70:61:72:80:67:91:e5:bb:f7:5b:f4:bd:e5:a0:ec:c4:1a:40:
eb:7b:a1:26:70:3b:31:8f:cb:cb:db:c3:1e:3f:15:b3:96:3d:
27:b0:c5:94:a2:5a:f3:77:16:4e:bb:a8:4e:49:c3:5a:ac:e8:
72:ff:30:c5:7d:62:02:d8:ab:b7:37:af:90:e2:1e:1c:19:00:
b0:f8:57:12:76:7c:7a:44:70:e4:fc:13:ed:e8:09:db:c2:36:
65:6d:32:e4:0f:a5:8c:99:dd:89:00:79:26:a1:1a:57:19:90:
61:a7:34:e1:27:51:73:a6:79:cc:f4:76:03:da:7c:d9:c3:ea:
6c:88:8b:9c:82:9f:d4:6d:a3:99:ed:19:c5:f1:7d:25:7e:79:
e6:c1:fb:91:42:82:23:c7:41:f0:ad:21:8c:31:8b:4b:62:e1:
59:dd:13:dd:f7:a7:3b:e6:29:d9:7d:ff:02:96:6e:f6:28:5a:
a1:79:28:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:19:53 2026 by rpki-client