Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11989FEC898E11F1843A57BCCE1D38B0.roa
File: 11989FEC898E11F1843A57BCCE1D38B0.roa (raw, json)
Hash identifier: sprWG9z6xpbd7pCz8/BH82ahXccd2mjLfyEQLBt0CYY=
Subject key identifier: 52:1E:EE:F7:74:FC:26:5C:03:F6:63:8C:B2:46:58:1F:1B:39:AF:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB59
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11989FEC898E11F1843A57BCCE1D38B0.roa
Signing time: Mon 27 Jul 2026 07:37:50 +0000
ROA not before: Mon 27 Jul 2026 07:37:46 +0000
ROA not after: Mon 26 Oct 2026 07:37:46 +0000
asID: 29852
IP address blocks: 154.194.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121689 (0x1db59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 27 07:37:46 2026 GMT
Not After : Oct 26 07:37:46 2026 GMT
Subject: CN=6a670ace-f282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a0:3a:cc:32:4e:62:18:39:06:46:f8:93:13:
19:ab:72:93:85:e2:ae:59:ab:f4:f9:4b:77:6f:c4:
b9:7d:b1:3b:fb:7b:32:06:b5:f8:c4:82:9d:35:e0:
7b:63:5b:e3:a4:be:6b:45:aa:c0:5e:34:74:e7:bb:
98:a2:73:49:07:fb:b2:1e:c6:60:8c:98:5b:36:8a:
a4:7e:31:0f:37:83:34:a7:c2:fb:22:c8:14:c0:c0:
94:a5:57:f6:3b:83:a0:a3:f4:b3:63:83:fc:f4:f5:
d3:0a:47:3a:50:59:70:8f:4e:9a:86:09:e7:c2:2a:
5c:87:f6:a6:97:96:d7:e5:29:b9:a9:e2:30:a7:69:
51:53:67:b1:c4:0a:c9:0e:b3:ab:41:04:5f:bf:70:
57:3d:65:98:94:67:20:be:b8:47:80:28:3a:19:22:
80:f6:95:1a:8d:15:c2:e1:dc:0a:3a:4b:cb:2a:65:
f7:3e:9f:06:98:2d:71:e7:64:e5:59:ab:6d:fc:f6:
9c:91:74:06:7c:03:49:5a:bb:c1:0f:8f:f5:13:a3:
83:71:3e:5c:3f:70:13:42:ef:15:b6:11:b7:0a:dc:
91:ba:db:d2:8f:89:9e:f4:49:c5:86:8f:64:c6:29:
1c:82:b1:5a:bc:07:d9:6c:ef:f2:59:29:0b:e9:92:
a6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1E:EE:F7:74:FC:26:5C:03:F6:63:8C:B2:46:58:1F:1B:39:AF:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11989FEC898E11F1843A57BCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.58.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:e5:78:fd:04:06:73:63:52:ec:d0:3a:44:f7:c7:b2:5e:44:
ba:86:a6:94:97:13:d0:0e:d6:7d:30:64:7f:b3:e1:9e:9c:5d:
0b:5e:04:a6:a5:91:85:43:e9:29:a4:4c:20:dd:1b:f1:71:a5:
26:1a:a1:43:a0:7a:bf:83:37:90:9e:3c:ae:53:95:f9:99:33:
5e:d0:34:ab:32:1b:c3:bf:6c:43:59:94:cc:31:6c:44:3f:69:
16:55:06:09:f7:50:3c:ce:8a:6e:35:f5:ba:ea:9f:ff:12:e0:
81:36:d8:e7:ab:95:f9:6c:c5:7b:28:b4:d1:ec:62:8a:4e:b2:
de:3c:26:68:88:f8:2c:a0:9d:e2:7e:ea:59:cd:6e:50:ca:a4:
15:63:74:6a:d5:3c:61:5e:c2:1d:7c:1c:20:3f:74:ba:01:32:
ec:13:ba:94:38:7b:7d:8f:9b:61:0e:a5:b8:60:08:4b:78:16:
98:1b:6a:69:35:9b:d9:9a:cf:8d:9f:9a:60:02:ed:1d:96:4d:
e0:71:a0:f5:5b:2e:28:ea:0c:28:8c:ca:fc:66:7a:5f:d1:00:
57:64:60:d4:b0:ae:ed:ed:85:74:d9:01:85:7a:ff:be:0c:b6:
eb:45:51:9f:38:a5:71:2f:51:28:80:49:80:36:68:e5:21:80:
78:0a:14:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:58:52 2026 by rpki-client