Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1075AFC8924511F1BFEADDC8CE1D38B0.roa
File: 1075AFC8924511F1BFEADDC8CE1D38B0.roa (raw, json)
Hash identifier: usWumnWRAZEkkcem8KNOP4q03dl18EA9EPOhIDUZRdQ=
Subject key identifier: 3C:39:22:2F:AE:DB:81:E4:71:AB:D0:D1:3D:86:9A:93:21:88:DB:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DD79
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1075AFC8924511F1BFEADDC8CE1D38B0.roa
Signing time: Fri 07 Aug 2026 09:47:55 +0000
ROA not before: Fri 07 Aug 2026 09:47:51 +0000
ROA not after: Sun 06 Sep 2026 09:47:51 +0000
asID: 137535
IP address blocks: 154.86.16.0/23 maxlen: 24
154.86.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122233 (0x1dd79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 7 09:47:51 2026 GMT
Not After : Sep 6 09:47:51 2026 GMT
Subject: CN=6a75a9cb-0d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:54:0d:2a:34:e2:7a:49:20:93:14:00:e3:e4:
b5:85:bc:03:fa:6d:b3:d7:82:c6:d4:35:e9:1c:94:
96:2d:13:45:d7:39:bb:1a:48:65:8a:22:b2:27:e3:
9c:80:dc:8e:68:21:7b:52:d0:cf:8b:a0:8f:9f:43:
71:16:43:ec:23:39:ef:ce:4f:f2:38:5a:c1:49:07:
0e:df:79:38:0b:f4:99:1a:d1:29:6d:d9:9e:6f:2a:
a6:da:63:c8:19:46:4c:35:ea:5f:c6:6f:da:88:ff:
6f:2e:4f:5a:26:ef:d2:5d:c4:7e:63:45:be:e5:a0:
fb:0e:da:15:e4:ce:5d:42:42:3c:20:ae:86:80:c4:
84:61:3f:37:23:83:3c:a1:e2:75:2f:97:3f:6c:3e:
38:72:f2:94:5c:0f:b8:ab:a0:03:ee:92:3b:b0:62:
ef:ae:85:c1:1d:99:46:e7:81:28:c0:5a:96:3e:60:
20:7b:4c:e2:5d:80:62:70:5e:84:6d:f9:5e:9e:2a:
0c:9c:00:9a:ac:54:c5:82:43:69:6f:11:14:b9:25:
28:ce:68:5c:6e:40:92:14:64:45:9b:15:b8:1a:e3:
37:63:e3:a8:2a:ab:a0:02:ec:8b:4b:3d:85:f3:cf:
1b:2a:52:7e:e5:db:8b:fe:cd:01:3f:b8:3f:1f:68:
fb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:39:22:2F:AE:DB:81:E4:71:AB:D0:D1:3D:86:9A:93:21:88:DB:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1075AFC8924511F1BFEADDC8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:d4:24:e7:c7:0a:80:ea:74:08:7e:c1:69:ff:b6:aa:35:8e:
6f:53:34:8e:e8:a8:fe:74:63:78:f2:0e:d7:99:6f:da:d0:af:
58:d9:c6:f5:36:c9:13:24:75:8c:5d:68:03:4f:7e:12:2e:35:
27:0c:43:44:d3:ca:aa:20:f6:cc:8e:49:ae:fa:5b:ed:61:bf:
5b:eb:a6:b7:b0:c2:6f:f5:6e:f2:f9:e7:fe:97:b8:a5:b4:4b:
eb:07:ba:e0:35:f8:90:81:15:22:d2:19:78:8d:84:08:0b:50:
21:28:5f:7d:19:58:e2:ee:9a:4e:7b:a9:ba:c8:98:09:dc:73:
7c:96:13:1b:fa:21:b8:bd:e2:28:0c:80:b8:98:b1:c2:d4:3d:
d6:f3:75:4d:46:b0:58:d1:e0:49:71:a9:7a:dc:88:5e:0f:c2:
19:2a:fc:16:d8:d6:d6:06:57:50:33:34:93:b1:18:a0:a1:d1:
11:6b:35:66:cb:7a:65:17:36:12:8a:e8:90:83:c5:ec:e7:a5:
87:45:ad:91:27:4b:1b:3e:71:51:7b:3f:56:e2:8f:4e:41:6e:
5b:f5:fd:77:e0:02:68:95:8d:3b:ae:86:9b:fb:4a:2b:0a:cb:
4b:a0:1c:6d:a6:9a:08:67:4b:bf:31:45:33:d5:c7:94:a0:87:
03:d3:9c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:05:59 2026 by rpki-client