Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E75F81E7F7111F18250A8D2CE1D38B0.roa
File: 9E75F81E7F7111F18250A8D2CE1D38B0.roa (raw, json)
Hash identifier: iGAt4SUQ7RYFiCvzrKV9+6KGpkCV7G/Z8hrLeA5MgFo=
Subject key identifier: DE:91:F8:1B:DC:25:DD:6F:DE:32:C1:B0:D3:E5:B7:C1:71:78:B5:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D8E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E75F81E7F7111F18250A8D2CE1D38B0.roa
Signing time: Tue 14 Jul 2026 10:48:59 +0000
ROA not before: Tue 14 Jul 2026 10:48:55 +0000
ROA not after: Fri 21 Aug 2026 10:48:55 +0000
asID: 214143
IP address blocks: 154.206.4.0/22 maxlen: 24
154.206.11.0/24 maxlen: 24
154.208.72.0/22 maxlen: 24
154.208.88.0/22 maxlen: 24
154.222.72.0/23 maxlen: 24
154.222.80.0/23 maxlen: 24
154.222.82.0/23 maxlen: 24
154.223.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Jul 2026 17:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121062 (0x1d8e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 10:48:55 2026 GMT
Not After : Aug 21 10:48:55 2026 GMT
Subject: CN=6a56141b-1cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:d5:01:78:9c:4c:b2:03:bc:52:7c:66:5f:
00:a9:27:bc:19:7c:a6:74:f7:b7:e9:76:aa:4c:96:
1d:62:a9:13:42:12:fc:5c:c2:0f:2a:5b:be:9d:9a:
58:80:14:81:cd:7a:67:ae:dc:86:ff:dc:1e:14:6a:
98:00:23:b2:74:f4:b8:db:4c:6c:a1:15:8c:a1:e7:
b1:6e:98:60:67:a1:f1:c6:51:84:a2:86:9a:5c:c5:
5f:81:b7:3e:23:5b:1f:8f:14:b7:f5:8e:3f:6b:22:
a9:a0:4b:d7:f3:02:d3:00:b5:ce:4c:7c:ef:77:91:
36:12:b2:db:77:41:f9:cf:6e:32:08:61:cf:4d:9c:
52:5d:64:66:7d:5c:c4:bc:c9:40:11:4f:2e:16:5b:
a4:79:f0:14:8f:1b:ad:89:1f:78:85:14:89:a1:1f:
5d:09:60:90:ab:3a:43:04:db:ee:c2:85:d2:99:67:
44:4a:5d:f8:c4:0d:6d:a8:b5:22:ab:4a:ab:47:65:
03:e4:10:a3:10:8c:d1:f9:96:96:6f:c7:a0:66:87:
ce:2a:c3:4f:e5:3d:5f:2e:fd:27:c1:2e:60:b0:7c:
28:02:86:cf:87:ce:98:5c:b1:a0:ed:07:6c:7b:23:
fa:55:45:4e:4c:da:10:22:4d:ca:e6:26:95:3e:52:
65:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:91:F8:1B:DC:25:DD:6F:DE:32:C1:B0:D3:E5:B7:C1:71:78:B5:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E75F81E7F7111F18250A8D2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.4.0/22
154.206.11.0/24
154.208.72.0/22
154.208.88.0/22
154.222.72.0/23
154.222.80.0/22
154.223.232.0/21
Signature Algorithm: sha256WithRSAEncryption
c3:43:76:62:16:47:65:83:27:5a:87:7a:24:2d:c1:87:30:48:
dd:f7:e8:4c:cd:14:c8:d7:e9:f2:d2:bb:e4:54:bf:7a:9a:14:
07:b1:88:8b:ea:16:b6:f2:dc:82:4f:23:b1:fa:30:ce:67:1d:
7c:25:c6:6c:ba:35:14:54:33:ac:c9:99:69:27:e7:14:5c:66:
e2:12:38:b6:16:6a:ef:b3:82:a9:06:3e:05:c7:ae:19:47:2c:
dd:ea:00:e2:07:c1:e1:45:c1:3b:cc:ad:58:0d:e7:12:5c:da:
35:7c:b2:6c:ba:8c:08:f6:5e:20:24:69:99:19:77:41:cc:e1:
f2:a9:e9:ba:1b:21:5d:79:65:f6:af:e4:aa:9d:8f:74:17:e7:
95:de:19:13:7d:79:8d:c5:9e:5a:46:b1:30:8b:4f:05:d9:56:
95:32:7d:20:e3:a3:cc:b3:fe:02:46:48:fb:57:b9:98:da:b0:
05:ca:36:c2:20:dc:c8:56:6f:f3:9d:76:91:94:8e:be:bf:ae:
6f:1b:c9:90:b6:ef:38:7d:42:ec:db:8e:59:16:b3:d1:e4:50:
58:60:fc:86:3d:0a:51:ed:69:8c:72:a4:b6:54:33:14:35:4c:
e6:a9:64:00:dd:b6:b5:71:48:5c:ec:c9:4a:d6:cb:65:5d:95:
4a:61:57:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:14:52 2026 by rpki-client