Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F056BF72949511F1AFA868D0CE1D38B0.roa
File: F056BF72949511F1AFA868D0CE1D38B0.roa (raw, json)
Hash identifier: IGt4VUBKhfwGr3m8MMiG1+UaGrBgmslMFj1A8BHHzX0=
Subject key identifier: 3D:68:E6:EA:AD:37:60:76:1E:9D:84:59:61:21:E0:7A:FF:A8:51:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DDDC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F056BF72949511F1AFA868D0CE1D38B0.roa
Signing time: Mon 10 Aug 2026 08:31:53 +0000
ROA not before: Mon 10 Aug 2026 08:31:49 +0000
ROA not after: Thu 17 Sep 2026 08:31:49 +0000
asID: 22773
IP address blocks: 154.202.15.0/24 maxlen: 24
154.202.16.0/24 maxlen: 24
154.202.17.0/24 maxlen: 24
154.202.18.0/24 maxlen: 24
154.202.19.0/24 maxlen: 24
154.202.20.0/24 maxlen: 24
154.202.21.0/24 maxlen: 24
154.202.22.0/24 maxlen: 24
154.202.23.0/24 maxlen: 24
154.213.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Aug 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122332 (0x1dddc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 10 08:31:49 2026 GMT
Not After : Sep 17 08:31:49 2026 GMT
Subject: CN=6a798c79-ff7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d4:c2:8b:7f:57:ce:7b:d2:e2:c7:59:5b:54:
27:a7:05:be:f3:51:43:cb:4a:08:5f:70:f3:a0:c7:
cc:fc:55:7e:bd:92:52:02:ad:aa:8c:b9:b1:65:7e:
ef:5f:a3:55:ea:c1:0d:bc:70:7a:d3:8d:a9:dd:90:
47:a3:76:d1:0c:4d:13:59:f8:e2:7d:ac:54:0c:96:
4d:8d:5b:c4:05:82:f6:e2:ef:ff:88:19:c9:56:0a:
90:9a:9c:35:eb:56:57:e6:60:72:03:05:51:e8:a0:
b5:1f:f4:fe:01:55:2a:45:e0:59:30:84:18:4f:5a:
f4:33:a2:1b:cc:0f:45:d1:6c:ea:d6:68:d0:f0:ed:
26:1e:37:16:e9:d6:6d:27:eb:05:5b:d6:46:a6:33:
89:3c:f2:df:45:79:06:fb:ef:5e:26:36:0d:63:d9:
a2:d3:37:70:aa:99:41:86:94:32:d2:c4:33:42:10:
f7:a3:f3:01:91:87:b8:c7:52:9e:d3:f8:b1:11:9f:
b3:3e:01:c8:60:2a:2f:9d:b9:35:3a:3c:b5:2b:c2:
09:df:f6:14:1c:f1:c9:6e:1e:57:72:4e:3c:90:c1:
94:b5:9f:e9:2b:4b:bf:7d:e2:25:88:50:45:d6:d3:
b6:12:cb:25:bf:d1:e5:12:b9:4c:c6:5d:0e:6b:40:
9a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:68:E6:EA:AD:37:60:76:1E:9D:84:59:61:21:E0:7A:FF:A8:51:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F056BF72949511F1AFA868D0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.15.0-154.202.23.255
154.213.206.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:50:9b:ac:f0:e3:69:fb:3e:62:10:b2:17:27:e1:99:84:8a:
47:b3:8a:02:c6:33:95:f9:25:16:c2:08:eb:8c:f0:d9:16:2a:
12:e5:3d:63:af:e3:2a:44:0c:06:0c:7a:cd:29:c0:c4:2e:c5:
45:fd:1a:aa:b7:72:2d:9a:b2:10:67:ad:b8:4b:4a:3f:63:15:
51:ea:dc:b6:ab:94:9c:11:60:de:d2:45:4a:92:dc:9e:27:db:
6f:e2:24:9b:56:d7:53:b6:4a:00:61:97:08:d5:ca:a3:be:3c:
8e:e4:a8:e0:76:1f:b3:ca:e9:f6:2d:cf:15:30:5c:ff:5a:90:
c0:4c:5a:f0:de:c5:c0:27:0c:1b:b8:ad:31:be:9c:e7:76:5e:
af:c2:b3:e3:29:01:1b:bf:c7:83:63:72:ee:ce:fd:9c:0f:64:
a3:0e:ab:a1:27:7b:6b:d6:8c:32:7e:5a:a7:e8:10:c7:5c:32:
72:9a:23:b9:50:c7:62:69:5c:04:27:d5:3e:8e:7b:f6:77:ec:
8c:4b:9d:ac:dc:9b:69:51:d0:7e:d9:4e:56:23:0a:2c:7c:80:
78:4f:6b:bd:6e:c8:c5:70:1f:4d:2f:5d:a7:de:1c:2c:f3:b3:
30:13:3d:db:67:75:92:d9:ea:d4:7a:6e:28:0d:e8:a7:31:69:
06:75:2a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 05:14:18 2026 by rpki-client