Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6300042880411F1AD5D4EDECE1D38B0.roa
File: D6300042880411F1AD5D4EDECE1D38B0.roa (raw, json)
Hash identifier: GxPDxfJQYt0dGl70WhdJ+dIBO1/wQje+9da85Gu8vqI=
Subject key identifier: DF:C2:3C:6F:C6:EC:02:E8:66:B2:66:99:4C:97:C7:6B:A1:BE:C1:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB3B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6300042880411F1AD5D4EDECE1D38B0.roa
Signing time: Sat 25 Jul 2026 08:42:58 +0000
ROA not before: Sat 25 Jul 2026 08:42:54 +0000
ROA not after: Mon 31 Aug 2026 08:42:54 +0000
asID: 200758
IP address blocks: 154.83.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121659 (0x1db3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 25 08:42:54 2026 GMT
Not After : Aug 31 08:42:54 2026 GMT
Subject: CN=6a647712-3ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:49:25:e7:bc:c8:a0:ce:b1:2b:46:4f:d2:b6:
ef:36:6a:cb:c0:98:56:c2:5b:dd:58:a9:5c:e3:89:
1f:ab:e7:15:16:d9:ca:79:31:25:44:00:f1:82:49:
f6:7d:53:9f:b1:c2:c7:57:cd:d2:a2:ad:1f:9a:dc:
a6:88:33:61:3f:15:1e:60:c1:e4:48:2a:8e:47:7f:
bd:cb:05:ed:2d:06:96:cc:64:bd:04:33:fd:1a:c0:
b1:91:72:b3:39:62:6d:da:fc:40:16:b9:3e:b6:d0:
07:b4:84:e8:33:96:bc:26:66:94:26:7e:fc:8a:84:
d3:de:4c:b6:6c:2b:96:8f:98:e0:be:c6:52:4f:06:
d0:c5:44:93:75:82:a7:43:8a:ac:61:b9:f0:4f:c9:
52:31:29:fa:1f:39:3b:97:0b:89:64:b3:54:a5:c5:
a7:52:b9:7a:16:4d:47:88:58:e6:51:2c:42:ea:9b:
e0:0c:54:38:ea:94:fe:1f:4c:cc:e4:96:3b:ec:35:
aa:99:8c:9e:de:c4:39:61:6d:cc:fa:1a:60:fb:eb:
53:03:f5:6c:30:39:8f:1c:7a:84:a6:89:23:6e:d7:
9f:aa:86:f5:e2:fe:ed:50:b0:8e:84:d7:de:a2:70:
04:57:33:09:39:a4:a6:1b:92:02:7a:85:e1:bb:a4:
b7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C2:3C:6F:C6:EC:02:E8:66:B2:66:99:4C:97:C7:6B:A1:BE:C1:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6300042880411F1AD5D4EDECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.140.0/24
Signature Algorithm: sha256WithRSAEncryption
39:5d:84:96:45:be:b4:03:f9:03:7e:2a:ed:d7:93:b1:16:bb:
49:54:a6:35:48:a2:ba:7d:a4:b4:31:73:0d:79:cf:a1:5f:e3:
d9:9f:8e:b4:41:e8:08:19:6a:9e:f8:ec:70:1a:56:b8:7d:b5:
b0:f7:1e:68:9c:e6:20:36:10:6f:89:49:aa:00:72:12:01:12:
96:40:f9:bb:b4:c3:65:04:44:98:80:3e:b0:66:63:5c:4e:a4:
91:42:1f:7b:03:e2:e9:d1:19:60:bb:f1:25:71:6b:1d:cf:8e:
23:20:e7:f3:ed:13:3a:eb:a8:a4:fb:d4:fa:c9:f8:e5:c0:48:
01:69:35:0d:4a:1e:89:d2:f9:c9:a5:0b:1f:d3:20:17:94:23:
fe:e2:56:4a:72:a0:ac:7f:a7:6f:89:35:1f:15:a3:a3:1c:10:
1f:47:a8:ed:6f:22:81:12:b8:20:30:06:76:b9:b0:d2:21:49:
46:21:b5:2c:2f:a0:aa:b4:7e:db:68:64:16:d9:e2:7c:f0:00:
c6:6f:7d:20:0b:dd:b5:fe:73:68:91:09:61:f1:33:b6:b3:c9:
0f:87:57:65:9a:17:17:1d:4c:5b:5c:16:48:3a:6c:1d:02:86:
2b:9e:99:ad:62:bf:4f:fc:15:ee:1c:22:61:41:29:52:94:a4:
38:b5:77:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:59:08 2026 by rpki-client