Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCB71F6A873811F1AA04D200CF1D38B0.roa
File: FCB71F6A873811F1AA04D200CF1D38B0.roa (raw, json)
Hash identifier: 4XzjhMOWAqmXRUzMm/kIHcfLjLis/4ueLLPv3tkSmzU=
Subject key identifier: 09:E9:D1:44:46:A6:1F:CF:A5:5F:CA:29:40:51:92:27:57:B6:3C:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB32
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCB71F6A873811F1AA04D200CF1D38B0.roa
Signing time: Fri 24 Jul 2026 08:23:46 +0000
ROA not before: Fri 24 Jul 2026 08:23:42 +0000
ROA not after: Wed 02 Sep 2026 08:23:42 +0000
asID: 197646
IP address blocks: 154.83.212.0/24 maxlen: 24
154.83.213.0/24 maxlen: 24
154.83.214.0/24 maxlen: 24
154.83.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121650 (0x1db32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 24 08:23:42 2026 GMT
Not After : Sep 2 08:23:42 2026 GMT
Subject: CN=6a632111-ad42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fc:15:04:06:eb:4e:57:54:d1:c1:0e:c0:1b:
02:df:90:9e:d8:b5:f3:78:30:81:ed:5a:81:13:c9:
38:40:1a:4b:77:c1:2e:99:1a:e3:b2:f5:ae:4f:67:
6a:d9:7f:a5:55:2d:8a:6e:a6:7c:a0:09:f8:90:3e:
29:dc:ae:43:20:73:79:8b:ed:42:c6:dc:64:ef:fc:
23:d0:38:6e:b6:9d:02:56:c4:21:17:12:75:85:fd:
51:9c:4e:33:66:68:8a:cb:01:0b:d6:fb:24:49:76:
29:6f:c3:8f:8c:ac:da:f0:65:c0:0c:a5:97:22:26:
48:4c:8d:d2:c6:8f:aa:64:68:9e:80:a6:be:23:cf:
19:00:9b:f7:cf:d0:4b:ba:13:01:c9:25:f4:90:d5:
d1:24:49:05:12:6c:f4:77:d1:41:96:c1:30:d8:b3:
38:7e:5a:bf:3d:a2:e4:da:ac:aa:d3:4e:8d:16:e4:
a2:7f:79:a1:05:8a:08:c8:7c:9c:25:e0:38:b4:15:
1b:94:e0:8a:d5:5c:ca:cc:03:20:f4:66:e4:59:cf:
b5:3e:25:17:43:48:a7:ee:73:25:b7:1b:1d:7e:c3:
c8:0e:9e:86:15:6a:81:e0:21:48:97:0e:59:15:85:
f8:e0:2d:08:9a:78:92:14:5a:04:1c:0c:62:94:89:
92:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E9:D1:44:46:A6:1F:CF:A5:5F:CA:29:40:51:92:27:57:B6:3C:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCB71F6A873811F1AA04D200CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.212.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:7e:70:54:0f:34:d5:3d:62:50:12:f1:00:73:b8:da:53:fe:
f0:59:f7:3e:f1:9d:d3:4d:56:92:7a:bd:95:7e:0b:a7:6c:67:
7e:58:13:6c:6c:ad:78:0e:dd:d7:7c:11:dc:e3:da:af:88:b4:
6f:4d:2e:d0:24:ac:73:47:a5:cd:bf:81:13:7d:ae:08:7c:5d:
03:dd:d3:78:15:db:81:3a:8f:d9:c2:f6:b4:a9:5f:eb:c4:4f:
cc:b6:2b:04:ae:8c:41:29:a9:01:1b:0f:50:7c:30:cc:32:ff:
12:e2:36:e7:3f:14:53:3e:4f:1d:7f:3b:00:ce:ab:cf:de:74:
e0:b6:30:e6:9e:2d:37:e9:4f:5d:17:43:8f:83:ed:f8:6f:44:
99:5a:94:9a:30:eb:5d:bb:14:d7:b5:1c:b3:f6:7b:2b:e8:c9:
f0:99:84:16:ee:ae:fe:fe:dc:47:b0:ef:18:95:d0:45:78:48:
1a:9d:52:19:a6:32:01:88:6a:44:80:87:16:17:c3:52:fd:dd:
64:33:c7:a6:ad:7d:41:0a:11:44:b0:c0:70:ec:84:23:b9:e6:
2b:6e:38:5d:f1:10:7c:b1:d2:a2:6d:46:b5:1e:02:ea:82:3f:
13:25:bd:fe:b6:33:92:e8:46:fc:08:85:b1:87:9d:22:96:77:
1e:55:84:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:02:58 2026 by rpki-client