Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F53227BC79D711F19BDEB007CF1D38B0.roa
File: F53227BC79D711F19BDEB007CF1D38B0.roa (raw, json)
Hash identifier: PJB/l+TOIdjgjeUAUL0KnmKiOdCw5nGwvowQJ8IEdWY=
Subject key identifier: 2E:2A:28:39:C4:4B:4E:25:7B:58:17:4F:EE:0C:0E:96:43:9B:62:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D75F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F53227BC79D711F19BDEB007CF1D38B0.roa
Signing time: Tue 07 Jul 2026 07:46:27 +0000
ROA not before: Tue 07 Jul 2026 07:46:22 +0000
ROA not after: Wed 05 Aug 2026 07:46:22 +0000
asID: 271956
IP address blocks: 154.88.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 18 Jul 2026 00:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120671 (0x1d75f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 07:46:22 2026 GMT
Not After : Aug 5 07:46:22 2026 GMT
Subject: CN=6a4caed3-9c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:2f:2f:3c:4e:92:fa:66:6b:37:ca:e2:54:
f5:80:37:c1:be:ef:c7:c5:77:f5:26:2d:e5:89:38:
2c:19:e4:3c:b8:a8:35:6f:64:6c:17:36:1d:1f:2e:
59:85:d5:23:1a:45:01:b3:f6:22:94:24:e3:25:67:
c3:89:32:9a:db:ff:fe:bf:5e:a9:eb:13:6f:9a:2b:
ad:09:ec:0f:29:c3:04:bf:54:3e:ac:6a:20:5f:82:
d0:b8:8f:14:cd:bb:d4:9b:6d:23:ff:ef:9f:8f:c7:
8d:3a:93:5c:90:5e:83:bc:ce:20:63:a3:5e:53:50:
cc:94:d6:0d:32:80:bf:aa:f4:ec:c2:fb:8c:9e:80:
47:24:f9:2a:0f:70:c8:da:65:87:93:d3:06:3a:f6:
5b:77:5f:27:ed:0c:5c:40:f1:91:17:0d:60:22:86:
21:77:23:0f:e5:28:35:59:b1:4a:dd:2b:41:93:15:
ca:4e:13:94:38:01:5d:35:e1:c5:63:e2:3f:7b:53:
e5:8f:53:27:86:fd:ee:30:87:83:1b:10:8e:25:3c:
d9:b4:0e:73:c0:4e:97:ae:14:f6:8a:e8:34:39:73:
11:4c:4b:76:b5:a8:e4:a9:cd:3d:82:7d:6d:65:bc:
f3:51:06:2c:90:57:6e:7f:3d:c4:54:3d:25:0d:ad:
7b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2A:28:39:C4:4B:4E:25:7B:58:17:4F:EE:0C:0E:96:43:9B:62:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F53227BC79D711F19BDEB007CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.190.0/23
Signature Algorithm: sha256WithRSAEncryption
81:85:9c:df:53:a7:f8:c2:ee:2d:9c:ee:44:96:fb:34:ed:20:
19:71:12:d3:f3:10:70:4f:c9:27:74:5c:82:12:82:0d:ab:95:
18:78:69:2d:53:33:71:95:c6:05:ef:a0:8a:b1:a6:88:ab:82:
86:5c:7f:b6:a6:08:77:fd:9b:d6:2a:81:69:21:86:44:67:c1:
41:51:3c:09:23:b1:f9:4e:5f:be:8b:06:5c:55:6c:55:06:dd:
82:ba:e3:64:0b:23:fe:cc:8d:6a:1b:66:ba:c8:d5:1f:37:3e:
e5:59:ca:b8:e3:fc:64:5e:0e:50:5a:ac:42:50:cf:1c:65:29:
c2:e9:0e:9c:35:09:53:1f:9a:28:ff:6d:52:53:50:c4:53:08:
31:82:8f:bf:72:09:05:1d:98:96:5b:94:12:9d:99:53:43:4e:
29:d8:54:95:35:fe:9b:77:4c:bf:6b:a2:fb:e0:6c:fb:6c:00:
d4:38:10:63:35:32:cf:19:06:57:30:13:f9:9d:02:4d:bc:36:
53:6c:3b:da:a3:21:ac:80:a3:cc:c6:71:34:c3:76:04:f1:20:
8f:ba:a1:9b:f0:eb:37:c7:35:f2:cf:05:42:e5:85:bd:2f:e1:
55:af:c7:59:78:f9:06:69:27:4a:33:ba:ff:0e:fc:d4:ea:88:
49:89:d1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 16 15:32:26 2026 by rpki-client