Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2676B37A51C811F1BDA0D0AFCE1D38B0.roa
File: 2676B37A51C811F1BDA0D0AFCE1D38B0.roa (raw, json)
Hash identifier: v7rMrI1JHXXjRx/6de51gAfS2qw9WVzCeZxebdK1v/I=
Subject key identifier: F6:9C:1D:25:5F:21:ED:CD:F9:A3:5E:49:2D:71:C2:3D:C3:00:39:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CC1E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2676B37A51C811F1BDA0D0AFCE1D38B0.roa
Signing time: Sun 17 May 2026 08:12:31 +0000
ROA not before: Sun 17 May 2026 08:12:25 +0000
ROA not after: Tue 23 Jun 2026 08:12:25 +0000
asID: 63969
IP address blocks: 154.89.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 14 Jun 2026 00:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117790 (0x1cc1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 17 08:12:25 2026 GMT
Not After : Jun 23 08:12:25 2026 GMT
Subject: CN=6a09786f-c64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:af:81:c3:26:90:4c:6a:78:29:26:bf:40:b2:
e5:24:03:2a:2a:83:c7:e7:57:76:38:a7:cc:f3:68:
6c:5b:c8:eb:1f:7c:38:c5:c5:a9:53:6b:7e:99:37:
0d:04:8f:27:e7:68:85:0e:96:c7:db:27:a3:24:b4:
11:25:fd:84:7d:03:bc:7b:71:af:0e:18:91:30:db:
b3:d8:bb:af:d1:a6:a4:1b:6b:dd:70:38:fc:81:d9:
b5:88:72:3d:4a:7e:fa:18:d3:25:01:48:c0:7b:bc:
bd:ea:f1:a3:ec:80:07:d7:1f:89:23:a8:66:93:3a:
17:14:ce:2e:fd:c1:b6:f0:e0:17:9d:5a:e3:5c:3b:
34:f9:b8:fd:54:ed:75:a7:60:29:18:b5:2e:54:41:
29:17:20:07:41:38:c5:b4:bb:fb:a6:78:1d:fe:eb:
b2:1c:50:df:e0:fa:ad:25:76:27:c2:48:74:e5:6f:
c2:f7:dd:dc:13:4a:c1:e7:a9:a2:de:68:0e:2e:45:
85:30:69:74:33:41:7e:ea:0d:87:e1:57:76:d2:b8:
18:16:74:0f:7f:80:aa:54:e1:6e:e0:6c:a4:e1:c3:
1e:d0:c9:c9:98:85:61:e1:13:c7:1d:c1:5e:75:c4:
f6:17:f1:46:04:cb:64:de:d8:f2:fd:e7:1f:ec:6c:
74:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9C:1D:25:5F:21:ED:CD:F9:A3:5E:49:2D:71:C2:3D:C3:00:39:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2676B37A51C811F1BDA0D0AFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.7.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:32:c6:91:af:62:f6:7f:dd:31:4a:10:a0:69:d6:c5:8d:ec:
e5:b6:3b:37:bf:20:72:e5:e1:e7:7f:38:96:ed:43:ba:e1:93:
1d:9e:e7:47:4a:b7:3e:35:8c:88:3d:75:6f:62:5a:f4:12:4a:
d1:94:aa:22:8d:03:ac:56:62:c0:c8:df:55:3b:98:10:6c:b9:
2b:e0:e4:d3:f0:09:8c:7c:5c:81:a7:20:a0:f2:a0:23:b8:65:
d8:9e:4f:af:64:e9:16:bb:bb:e0:3c:9a:46:67:04:d6:ba:3f:
9a:89:53:1a:a4:a5:e4:59:2f:af:32:6e:30:2b:5b:1e:19:fb:
df:76:8a:ab:f5:ca:16:da:5e:62:a7:6e:97:70:49:37:e8:d8:
de:33:2c:43:1b:4c:fc:07:af:4a:76:ea:3a:dd:af:2d:a6:ac:
83:46:6b:d4:8e:1c:62:9f:38:54:0d:5e:b2:2b:66:ae:ee:ac:
84:0a:1a:78:d5:7c:7a:31:71:2d:72:77:c1:2d:79:75:80:b7:
58:26:4a:ad:e8:2f:9d:4f:0a:fe:34:a3:3c:55:09:56:34:72:
c6:af:fa:87:30:a3:12:0c:bb:8d:58:51:38:79:ea:ec:55:fb:
1f:55:4c:72:ec:ff:4f:70:5d:32:88:ec:1d:2a:d8:2e:23:37:
cb:75:a1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:17:28 2026 by rpki-client