Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/166FC24A917011F1916C8FBFCE1D38B0.roa
File: 166FC24A917011F1916C8FBFCE1D38B0.roa (raw, json)
Hash identifier: xwsWW7PJClCF6wuDwEVKaDGppOGqccH0VrEOTNb79nU=
Subject key identifier: 04:C8:6A:45:73:6A:53:A6:10:4D:73:22:A8:E0:D9:6A:F2:08:EA:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DCEB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/166FC24A917011F1916C8FBFCE1D38B0.roa
Signing time: Thu 06 Aug 2026 08:23:23 +0000
ROA not before: Thu 06 Aug 2026 08:23:19 +0000
ROA not after: Sat 15 Aug 2026 08:23:19 +0000
asID: 9294
IP address blocks: 154.88.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122091 (0x1dceb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 6 08:23:19 2026 GMT
Not After : Aug 15 08:23:19 2026 GMT
Subject: CN=6a74447b-bb3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:94:1a:6b:ce:13:33:83:9c:be:fc:86:2f:09:
9a:c9:8d:56:b4:7e:3a:05:9c:d8:da:80:c9:7c:d3:
f7:40:10:8c:77:6b:6f:8c:84:29:b2:15:66:5a:95:
30:aa:ba:ff:38:27:3f:62:41:5f:77:cd:59:81:0e:
79:87:9a:6a:10:6a:3a:c9:5b:68:24:d8:68:b1:a7:
d7:39:8e:a4:02:c7:22:f6:7e:35:a2:cc:da:b3:1c:
e5:b6:24:cc:9d:c3:b0:e3:7d:dd:7c:10:b4:20:ed:
92:cc:1c:e0:fb:1a:cf:d8:dc:fd:eb:7c:47:0f:ea:
72:b7:a3:b4:4c:63:04:70:b0:7a:ad:aa:f0:41:c2:
89:37:12:52:60:c1:b9:22:3a:08:a5:ae:9b:aa:1a:
24:6c:9b:a4:ad:db:a1:5b:eb:b4:cb:b8:e0:96:bd:
11:21:7a:23:a3:01:96:3c:69:96:b4:b3:93:99:3d:
bd:c8:61:dc:41:72:bc:f0:d0:1e:cf:c4:58:d1:81:
ff:be:f0:78:e6:d2:11:17:26:a1:cb:59:60:f8:f9:
b6:20:25:81:3d:8b:22:ad:c8:3f:62:14:b9:6b:dd:
f1:63:cb:13:d1:d3:71:43:3c:17:64:7c:96:cf:e6:
b6:d6:1b:dd:88:b6:83:df:96:4a:bd:40:76:b4:b2:
47:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C8:6A:45:73:6A:53:A6:10:4D:73:22:A8:E0:D9:6A:F2:08:EA:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/166FC24A917011F1916C8FBFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.96.0/19
Signature Algorithm: sha256WithRSAEncryption
93:ee:b0:20:51:15:a4:c8:56:d0:63:29:43:25:14:ec:95:05:
00:51:0c:9b:57:50:92:2a:fc:79:c4:94:0d:69:8d:ef:d7:76:
ae:93:44:7f:5f:30:d1:eb:cf:fe:cc:98:95:d3:d2:17:a4:16:
14:01:7a:fd:87:2d:51:a8:27:67:35:fd:40:2a:af:34:2b:89:
01:00:c7:f3:2f:11:a6:db:1d:af:4e:28:f0:41:7d:af:60:9d:
c1:ed:96:18:25:20:7f:77:ff:99:8d:62:70:8a:a3:5a:10:56:
64:33:2e:ba:8a:b8:4b:3a:67:89:3f:a5:e2:63:9d:7c:d2:7d:
e4:04:59:4d:80:08:45:4f:fd:4f:33:cd:85:82:28:4a:28:34:
e8:36:a7:24:62:ea:b1:d8:0b:4d:da:80:cf:9b:83:12:62:47:
19:6f:3f:78:06:cf:4a:61:44:02:4a:24:d6:7c:f0:10:b1:94:
14:ac:b2:90:58:8b:94:dc:53:b7:e7:ba:5d:83:93:9a:c9:96:
00:de:f0:cd:92:b1:f1:2b:c9:18:4f:20:9f:f0:f2:32:22:8a:
65:47:79:d7:9e:46:65:4e:17:21:a9:fa:5d:ab:f8:98:25:5a:
d0:04:99:92:46:a7:86:c5:ce:b6:2b:e1:c4:f4:69:24:1a:ec:
94:c7:6d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:09 2026 by rpki-client