Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/185AE3987E0411F1956BD51ECF1D38B0.roa
File: 185AE3987E0411F1956BD51ECF1D38B0.roa (raw, json)
Hash identifier: bemZ8t9P93x+EkMNFzJbhu+ykC1ve4BO3kF7cUIBRGg=
Subject key identifier: 9C:58:1B:76:AA:63:BA:91:B9:C1:FC:F0:3A:83:32:C9:1C:4B:92:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D895
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/185AE3987E0411F1956BD51ECF1D38B0.roa
Signing time: Sun 12 Jul 2026 15:12:28 +0000
ROA not before: Sun 12 Jul 2026 15:12:23 +0000
ROA not after: Thu 13 Aug 2026 15:12:23 +0000
asID: 137897
IP address blocks: 154.92.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120981 (0x1d895)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 12 15:12:23 2026 GMT
Not After : Aug 13 15:12:23 2026 GMT
Subject: CN=6a53aedc-bd06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b9:30:45:d9:ed:fd:bd:9c:68:ec:70:28:c6:
fb:2f:b9:9b:2a:ae:41:55:df:9a:56:50:0a:5b:ee:
b1:3a:86:0d:ad:38:20:d6:52:d6:1c:6e:c2:6e:6a:
0a:9a:fa:14:5c:3d:09:c0:ca:17:e2:9a:b6:c3:4b:
02:20:2e:50:42:bf:b6:f8:f1:11:d0:d4:5d:9c:7f:
8c:2f:ff:ed:fb:2e:df:53:ed:78:79:fc:fd:b1:e6:
d5:53:16:36:d3:f7:a5:08:57:46:32:ff:3b:06:80:
90:e1:01:48:d5:0d:b1:0b:16:26:07:00:07:85:2e:
da:4f:21:80:ca:4f:3d:d0:4c:ca:9b:2d:94:fe:26:
2a:32:9b:3a:65:fa:4b:68:9a:d6:93:86:90:9c:ca:
ea:60:eb:d3:94:bc:1f:54:a7:ef:7a:a9:69:9a:92:
17:8e:ad:b0:c7:41:a9:12:8d:ab:44:cc:09:49:30:
48:6e:b7:9b:c4:76:dc:ed:d6:da:cb:0d:77:bc:68:
08:73:80:ba:5a:f2:1f:49:a6:bd:e5:18:eb:da:eb:
4e:36:1f:f1:55:dc:1a:bc:0f:06:8c:6b:59:9d:58:
7e:30:f3:f2:16:0b:5e:18:81:0d:d2:7a:2b:ae:59:
cc:44:34:12:42:ca:a9:69:57:f8:d9:f2:d6:d2:f4:
25:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:58:1B:76:AA:63:BA:91:B9:C1:FC:F0:3A:83:32:C9:1C:4B:92:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/185AE3987E0411F1956BD51ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.10.0/23
Signature Algorithm: sha256WithRSAEncryption
56:f4:af:26:66:e2:cd:3f:72:ba:f4:b9:b2:64:6c:18:4a:c1:
62:09:5e:45:70:4d:ec:40:74:f0:83:e3:f7:03:6e:d4:d7:be:
4b:f8:54:7d:e3:77:82:d5:29:7e:3e:f7:21:ce:1b:74:6c:8e:
94:0e:ba:4a:95:ee:50:c7:ba:c9:52:d3:ab:d8:03:9e:92:f9:
94:a3:00:1e:9b:91:ba:fa:1a:1b:6e:3c:40:54:a7:b8:c5:22:
20:f0:4d:d2:57:ce:bb:04:29:ca:91:8d:6a:05:1a:10:91:18:
d2:81:7d:82:10:50:ad:b9:96:dd:4f:51:19:f3:cc:46:2f:f1:
60:16:4a:72:bb:d0:0a:73:67:1b:38:13:c5:0d:a8:69:4a:55:
59:da:af:5b:2e:6b:fb:2e:43:bd:b9:bf:4d:bb:86:e5:da:dd:
47:89:6f:6e:23:2e:6a:6f:89:df:4e:90:5c:93:cc:88:91:22:
d1:c8:6d:06:0d:b2:f5:fb:46:2c:e3:ef:36:8b:ba:94:86:a5:
a8:49:c2:5a:3a:2b:e3:da:eb:8a:41:d8:be:1c:c1:de:2e:de:
81:7e:14:5d:8d:2d:c9:04:a2:d6:67:5d:49:b5:2e:18:b2:2d:
7f:9d:50:6c:8b:f8:a0:28:68:89:d3:ac:70:96:3f:c6:db:8b:
f4:09:fc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:59 2026 by rpki-client