Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9272E3CE79D611F1B0D73B01CF1D38B0.roa
File: 9272E3CE79D611F1B0D73B01CF1D38B0.roa (raw, json)
Hash identifier: iT6Nbb2qLCFlI9kMfCz7vR1dF596t8pzVfP+q3d4PFE=
Subject key identifier: 5C:4B:C9:85:3B:64:10:AD:00:BF:67:39:41:5A:5B:83:B8:43:91:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D75B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9272E3CE79D611F1B0D73B01CF1D38B0.roa
Signing time: Tue 07 Jul 2026 07:36:32 +0000
ROA not before: Tue 07 Jul 2026 07:36:25 +0000
ROA not after: Wed 05 Aug 2026 07:36:25 +0000
asID: 272011
IP address blocks: 154.88.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120667 (0x1d75b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 07:36:25 2026 GMT
Not After : Aug 5 07:36:25 2026 GMT
Subject: CN=6a4cac7f-19df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:83:3b:06:85:3f:85:97:f1:1f:c3:66:84:e9:
c0:f4:58:f3:f5:f4:2d:a5:c1:fb:d4:88:5d:e4:45:
a1:e5:e0:3b:a9:3a:0f:42:05:d4:36:2a:9f:b1:d1:
46:f1:88:e1:04:3e:00:37:36:74:b1:6b:0d:9f:4b:
73:da:3a:b5:25:8a:6b:42:a8:14:d6:74:8c:0f:3f:
f2:d6:7e:8d:3d:76:c8:bf:87:1c:40:62:39:71:f3:
92:ce:f1:ba:3e:ed:4b:95:ea:20:31:2c:11:48:43:
06:27:35:58:08:c9:b7:dd:cc:4e:c3:f7:57:95:d2:
05:d3:95:26:d2:00:c6:3b:e9:85:25:d7:51:07:7d:
1d:d4:dc:ee:23:0a:db:cf:73:ee:a0:6a:58:ad:a1:
d6:f6:b3:32:ba:2d:3e:5b:48:11:62:04:48:52:1e:
02:3c:d7:31:d4:3f:24:d0:30:3e:8f:a5:12:45:ab:
93:36:29:b7:2f:5a:66:be:4d:c7:02:9c:84:e5:78:
13:d6:c1:6c:90:06:28:1f:3d:5b:da:b0:e4:6b:c8:
8e:f0:92:a9:fc:69:ba:56:3b:45:26:71:d4:6d:af:
f1:38:4b:b0:ea:af:41:d5:a4:38:a7:e3:b9:59:24:
2b:9d:87:f6:0f:ba:68:13:42:1d:5d:1f:64:a1:88:
fa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4B:C9:85:3B:64:10:AD:00:BF:67:39:41:5A:5B:83:B8:43:91:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9272E3CE79D611F1B0D73B01CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.189.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:9e:8e:f5:90:33:94:c6:8d:b8:d9:61:75:8b:2c:a7:6e:fd:
8c:e8:88:13:c8:3c:39:26:0a:bb:95:e9:0e:76:69:a3:06:70:
90:d7:54:2f:c8:29:2d:8a:c4:8e:46:07:c3:b9:22:9e:37:c3:
9b:33:8a:f9:55:16:1e:c4:95:de:b1:62:1f:f7:df:8b:c3:97:
fe:b8:db:d4:52:6d:43:d7:54:92:54:6d:f9:8b:7c:0c:c9:3b:
a8:d5:5b:f6:7a:7d:9e:a4:01:9d:e7:04:8e:09:a2:5e:32:2f:
f7:a0:8f:8d:45:c2:0a:93:48:b0:ae:12:d0:7f:ef:fc:34:a3:
d7:af:0c:fb:ba:c7:7b:9b:d0:14:a5:4b:dc:7b:5a:a2:23:b5:
44:d9:4b:70:c9:58:7a:0c:fc:f8:64:e1:84:26:c7:5a:46:53:
36:94:71:bb:ad:bd:42:cc:49:93:45:1e:57:c9:fb:04:4a:e0:
f8:23:2b:f1:b2:00:dd:a5:38:bb:81:52:69:bd:95:7e:3e:cd:
13:01:d8:89:3e:f7:1d:6a:6b:07:ef:44:5b:f9:a1:c2:01:7f:
6c:7f:21:4f:9b:ec:91:99:61:28:47:9f:45:26:6c:fa:a5:63:
92:7e:18:bb:03:96:02:27:4b:09:8f:bc:56:69:ac:51:31:bc:
2a:26:bd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:04:05 2026 by rpki-client