Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A8D9E1276E211F1B77E6B0CCF1D38B0.roa
File: 7A8D9E1276E211F1B77E6B0CCF1D38B0.roa (raw, json)
Hash identifier: 8u1EvZJz1FejVhDpM41wFFr3mYFdgFEgzJU+1WmQLnc=
Subject key identifier: 63:87:3D:C1:F7:64:57:F8:F9:02:F9:19:23:D5:2C:37:E4:BC:ED:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D6C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A8D9E1276E211F1B77E6B0CCF1D38B0.roa
Signing time: Fri 03 Jul 2026 13:24:12 +0000
ROA not before: Fri 03 Jul 2026 13:24:07 +0000
ROA not after: Thu 06 Aug 2026 13:24:07 +0000
asID: 140224
IP address blocks: 154.86.16.0/24 maxlen: 24
154.86.17.0/24 maxlen: 24
154.86.18.0/24 maxlen: 24
154.86.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120512 (0x1d6c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 13:24:07 2026 GMT
Not After : Aug 6 13:24:07 2026 GMT
Subject: CN=6a47b7fc-8c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8c:e5:de:5b:4e:05:06:49:8a:28:8e:d1:20:
48:e9:d6:c2:88:78:b8:b3:8d:d9:0f:5d:21:e4:cf:
0d:02:59:d1:dc:93:b7:dc:e4:dd:7d:74:f5:b4:ba:
ce:b1:12:f2:49:ed:ac:b0:bb:83:8c:bc:35:e6:45:
5a:18:57:d4:02:f4:46:aa:4b:7d:fa:f1:b9:05:74:
aa:40:6e:38:9a:cc:eb:24:8b:95:06:4a:eb:c8:5d:
32:d6:46:2f:15:54:3c:eb:e6:01:1c:c6:69:3c:ba:
bf:e5:11:c9:cb:6e:85:67:57:a5:71:00:d0:0a:85:
66:4d:d3:cc:6a:a0:04:78:29:ed:23:79:ea:7f:3b:
59:29:7c:95:f8:17:b7:08:d0:1e:ed:fd:a1:1f:0e:
7e:50:2e:86:80:7c:63:d9:74:52:a3:72:08:7d:b4:
99:c3:15:c7:e5:9d:df:41:28:2c:c5:93:c8:6f:1a:
02:96:98:4c:25:b8:10:89:8b:81:af:a0:9c:87:b2:
57:80:2d:62:3d:8f:df:bb:92:d6:61:8d:75:17:d2:
45:a3:87:a2:9c:9e:b3:3d:6a:03:9c:ab:d6:b8:95:
74:ab:ad:c1:10:13:dc:06:df:96:56:6e:90:c3:17:
3e:57:db:4a:42:5e:36:40:15:6f:75:06:ac:9e:c0:
2f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:87:3D:C1:F7:64:57:F8:F9:02:F9:19:23:D5:2C:37:E4:BC:ED:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A8D9E1276E211F1B77E6B0CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/22
Signature Algorithm: sha256WithRSAEncryption
02:50:b2:7c:8b:5e:13:6d:71:02:7b:8d:11:78:40:92:d2:f0:
34:af:fd:e4:0b:e9:a1:69:7b:43:bb:7e:e9:1b:13:82:21:99:
df:cb:58:00:bf:f7:66:30:19:60:7c:54:61:b1:5f:20:e8:26:
b1:65:2f:9a:2f:a3:db:ab:22:c2:ad:bb:34:bf:2d:b7:96:07:
6a:1d:29:9b:8a:d1:f0:2b:fa:83:ab:5e:4d:43:ee:8f:db:ea:
87:5b:bf:45:91:13:b5:c9:1d:7c:46:37:cc:dc:d1:6c:c9:f8:
1d:c4:3d:d9:de:93:a9:cc:36:b9:63:10:2a:a2:55:29:c8:8a:
32:59:29:92:3f:bd:f5:7b:c4:f2:c9:a5:79:3e:88:8b:1e:10:
f9:0c:6c:ad:89:72:4a:49:1b:03:44:8e:cf:32:c8:97:e1:6a:
12:da:8a:ee:3e:af:c0:53:a1:3c:a3:ce:31:d6:2d:44:d1:3d:
79:68:20:e9:80:bc:7b:5b:da:60:cd:5e:7a:94:ef:51:a2:0c:
d9:e3:9c:59:e3:14:8b:a9:5f:9e:00:e0:1b:a6:c4:9e:4c:db:
fb:68:6d:07:e6:fb:be:51:c6:3d:31:1b:25:ff:a2:97:dd:53:
ca:47:64:2a:f9:ae:3e:81:e0:cf:5e:14:94:0b:c6:98:94:aa:
63:35:46:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:38 2026 by rpki-client