Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09E617D079DE11F1B620E9AECE1D38B0.roa
File: 09E617D079DE11F1B620E9AECE1D38B0.roa (raw, json)
Hash identifier: 9G98rkZ/L9q3A2LqX9nuGfhNsWAPqNTlzdbyuIXq5AY=
Subject key identifier: F6:F1:B7:DA:4C:9E:97:6D:66:20:82:D8:A8:2B:AB:F1:57:79:7E:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D769
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09E617D079DE11F1B620E9AECE1D38B0.roa
Signing time: Tue 07 Jul 2026 08:29:58 +0000
ROA not before: Tue 07 Jul 2026 08:29:54 +0000
ROA not after: Sun 09 Aug 2026 08:29:54 +0000
asID: 135377
IP address blocks: 154.82.22.0/24 maxlen: 24
154.82.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120681 (0x1d769)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 08:29:54 2026 GMT
Not After : Aug 9 08:29:54 2026 GMT
Subject: CN=6a4cb906-06ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e2:cd:85:c6:8e:c2:3e:bc:0f:21:3d:b8:1a:
57:c9:8c:57:5e:ac:b1:b5:b1:fe:5e:a3:c4:e5:96:
bb:5b:68:2b:67:78:f6:8d:93:e1:2e:05:d1:8a:63:
28:e2:89:f3:30:e1:1b:4d:ce:f1:4b:bc:13:85:90:
6b:4a:a8:0d:0d:98:6c:7c:ce:ac:c8:25:61:fd:99:
04:3d:75:a2:97:89:53:c6:3a:d1:7a:45:ba:b7:15:
28:c1:1f:f6:15:f0:43:e4:d0:7d:82:6c:ac:2e:4a:
d5:7e:69:c5:09:d1:8e:ca:92:2f:d1:98:43:f9:b5:
9c:ff:9e:66:f2:37:75:63:5d:59:ca:44:72:6a:c7:
b2:51:42:ec:1f:d4:98:ef:2d:a8:df:2d:a3:25:b3:
76:86:87:cb:86:f0:a0:a8:fc:88:fe:5a:9f:76:2c:
f5:39:ab:3a:80:79:c1:d9:91:a0:b3:33:99:dd:d7:
bf:3d:a1:76:be:29:a5:a8:76:e8:90:04:a2:4c:17:
98:7e:f9:e6:29:13:4c:c8:ca:fc:dd:05:29:7c:c8:
cb:ab:a2:32:5a:9f:9c:54:45:e4:2a:bc:b8:f4:a6:
f5:be:8b:5b:87:04:c5:8d:f9:1a:c2:9d:8e:02:9b:
21:f5:5f:5c:e7:db:4a:c2:b3:8a:fa:79:fe:77:ad:
ed:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F1:B7:DA:4C:9E:97:6D:66:20:82:D8:A8:2B:AB:F1:57:79:7E:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09E617D079DE11F1B620E9AECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.22.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:18:6e:55:20:ba:5c:2a:78:07:c3:b6:c8:52:7f:4a:29:75:
f8:48:b5:39:2e:41:8d:dd:46:17:e7:12:4e:ad:22:be:81:96:
7a:a5:b4:27:5a:4f:9f:35:47:b0:77:0f:3f:fe:60:03:95:a8:
f6:a5:4f:88:ae:14:78:86:77:17:49:04:5c:26:07:f5:c0:32:
f9:63:07:65:56:64:11:c3:d9:ef:6b:99:4c:99:67:c9:ba:2f:
ed:9f:94:a0:29:47:66:61:25:47:6d:60:36:5f:64:8c:e3:bc:
43:10:a4:1c:7b:cb:e1:65:e4:c7:f8:21:39:7a:ec:b9:6a:2e:
47:1d:94:76:37:b2:b5:fe:20:88:a2:ee:60:67:25:60:8e:ba:
a8:5c:39:b8:ff:8f:20:93:ad:8f:d6:ff:b4:52:0c:0a:ec:c0:
6c:32:60:62:4c:16:ba:31:06:ae:bc:7d:a7:6e:d6:35:63:11:
6a:e7:ed:1f:cd:d9:83:d8:9e:3d:ca:0a:2b:35:5c:da:de:ab:
14:13:07:17:72:c8:16:93:d2:40:b6:a1:ec:65:74:59:43:23:
e5:28:ac:42:67:73:09:25:67:25:cb:b2:ca:8f:87:54:a8:62:
9d:05:9a:52:70:8f:4b:6a:93:b9:4a:d2:91:dd:fa:36:69:25:
48:71:78:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:58:21 2026 by rpki-client