Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D1B3C828D9011F1BF8F7BBBCE1D38B0.roa
File: 3D1B3C828D9011F1BF8F7BBBCE1D38B0.roa (raw, json)
Hash identifier: y+Xzjdi0CFXqG9LRiRN2k+yKG2ETvvMs9UcunHfFz+8=
Subject key identifier: 0F:C6:0A:D3:E5:E6:9B:C5:BB:F3:74:D5:AA:E2:EF:E8:EE:38:5D:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC34
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D1B3C828D9011F1BF8F7BBBCE1D38B0.roa
Signing time: Sat 01 Aug 2026 10:03:27 +0000
ROA not before: Sat 01 Aug 2026 10:03:23 +0000
ROA not after: Mon 07 Sep 2026 10:03:23 +0000
asID: 59711
IP address blocks: 154.84.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121908 (0x1dc34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 1 10:03:23 2026 GMT
Not After : Sep 7 10:03:23 2026 GMT
Subject: CN=6a6dc46f-620c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:48:e7:3d:20:ce:e7:87:1c:8a:90:1d:54:02:
09:d9:2c:7a:6b:6e:c5:32:ce:c5:fb:9b:9a:fc:d0:
36:69:89:f4:d6:81:ba:72:fc:5e:ce:c6:cd:2b:1b:
e7:54:16:97:44:ff:f5:3f:2a:5e:ce:54:c0:51:8c:
27:9a:b7:cd:07:6f:2b:ba:d4:57:91:7a:ca:62:71:
78:12:a5:d2:23:b4:17:52:88:cd:e1:87:55:b1:47:
79:44:3d:7a:82:35:d6:24:10:70:2a:bd:2f:0e:5d:
90:70:b0:21:69:32:e3:32:88:cf:9a:6a:92:36:80:
6c:11:82:3b:cd:8b:f6:1a:45:5a:b2:14:b0:ed:dd:
63:86:05:c4:47:91:99:8b:94:36:5c:99:29:fd:8e:
4b:33:bc:10:06:40:55:64:34:0f:9a:7c:15:ab:56:
69:12:7b:d9:f2:3d:34:ac:4d:e6:ec:1b:61:81:cb:
16:5b:b8:ac:8e:c1:cb:0a:23:68:6d:4a:29:e8:6c:
d4:8c:78:2c:d9:07:ca:5a:b8:f0:76:fb:04:2e:f4:
31:45:bb:2e:8b:15:95:5a:57:f4:ae:e1:4d:e8:f2:
cf:d7:29:16:e3:ae:2f:71:ff:f5:a4:a0:d6:e8:ce:
ed:a4:be:5e:a4:84:0c:e7:cd:52:fd:18:d9:6e:83:
f0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C6:0A:D3:E5:E6:9B:C5:BB:F3:74:D5:AA:E2:EF:E8:EE:38:5D:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D1B3C828D9011F1BF8F7BBBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.170.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:48:7f:fd:01:7f:eb:77:67:a8:fd:d0:13:a1:64:e1:11:66:
06:87:e5:cc:65:59:59:2a:85:ea:d4:34:c0:4b:17:6b:d0:40:
f2:0a:27:be:25:23:6e:ca:83:79:b9:21:c9:f5:24:a3:5d:71:
96:66:59:1b:69:48:0c:6b:59:5d:63:a3:b1:79:d0:d1:d0:2f:
f4:d4:bf:2b:aa:64:47:1e:03:5b:11:ce:8a:87:cb:b3:fa:95:
60:c5:5a:1c:d0:68:59:26:f6:b1:14:c6:92:72:4f:60:0f:27:
bb:8d:13:77:59:17:ef:12:d5:55:cb:cf:09:e4:fc:10:f8:6f:
a3:7e:4a:44:f5:ac:5a:37:c5:75:b5:18:cc:16:bb:76:25:79:
c2:a0:52:d3:3f:d6:f9:69:c1:e8:83:6a:7b:f1:2e:06:88:6e:
72:60:b8:3c:af:f6:01:19:0d:e1:c1:b2:54:98:4b:bc:ea:55:
1d:ac:2d:ba:50:c4:07:63:41:e7:45:be:1f:cb:df:10:45:31:
39:e4:ac:c6:59:43:8b:d4:8e:1b:b0:c5:27:6f:1a:b1:72:35:
1e:73:fa:70:49:47:02:33:e0:02:75:b4:f8:cb:e7:2b:12:67:
b2:71:01:1b:68:cd:1f:85:92:f3:87:e5:a6:dc:c8:16:68:aa:
f0:6f:28:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:49 2026 by rpki-client