Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49FCC5FE770311F19E613AD1CE1D38B0.roa
File: 49FCC5FE770311F19E613AD1CE1D38B0.roa (raw, json)
Hash identifier: I0FfvhqGuZLdnpv4dYC7Fnk3paNxQOIZX57lhraOlXA=
Subject key identifier: F8:10:20:2A:4A:F3:62:CB:A2:0A:FB:B3:B6:78:7C:49:4D:65:7F:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D6DC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49FCC5FE770311F19E613AD1CE1D38B0.roa
Signing time: Fri 03 Jul 2026 17:19:04 +0000
ROA not before: Fri 03 Jul 2026 17:18:59 +0000
ROA not after: Mon 10 Aug 2026 17:18:59 +0000
asID: 63139
IP address blocks: 154.95.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120540 (0x1d6dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 17:18:59 2026 GMT
Not After : Aug 10 17:18:59 2026 GMT
Subject: CN=6a47ef08-4eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e8:6d:20:02:95:cc:9d:88:27:43:88:57:2a:
f0:20:c5:d3:c8:89:81:6c:dc:8b:60:18:1c:87:e0:
b4:fb:ab:78:50:ee:70:f9:bf:59:9f:c1:c4:e4:2a:
96:86:3b:14:ff:e8:ab:97:6a:b7:81:7c:51:ab:17:
8d:e0:d6:5c:61:95:31:1b:69:b1:90:b8:2a:85:bc:
d9:7a:41:9a:60:f6:1a:c0:ec:51:7a:70:c8:4a:af:
38:7a:2b:cf:91:54:e5:49:27:ab:38:08:06:8b:cc:
15:43:18:e5:55:09:0f:2a:00:29:33:6d:1d:0b:3d:
15:29:c9:cd:99:68:2e:64:32:ba:e9:11:93:4f:36:
ef:3c:23:b0:a0:80:21:57:1c:c5:f4:53:8e:ac:79:
24:40:52:57:9e:1b:3d:5d:35:34:a7:9b:5a:a6:11:
6d:a5:56:ec:1d:e2:c8:51:45:d0:c8:00:b3:14:81:
e0:d8:33:dd:e4:8c:94:5b:2c:7e:e6:84:49:10:cd:
9d:75:c2:9f:be:60:60:53:d9:5e:56:cf:e6:11:d0:
54:0f:8d:1a:60:e1:05:ac:73:4c:39:f1:a8:5d:47:
77:41:46:f3:10:42:8f:a5:17:87:e1:70:80:18:7a:
3d:40:8e:2f:0b:d0:d7:8f:8f:a0:3e:ab:28:46:f3:
ff:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:10:20:2A:4A:F3:62:CB:A2:0A:FB:B3:B6:78:7C:49:4D:65:7F:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49FCC5FE770311F19E613AD1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.95.0/24
Signature Algorithm: sha256WithRSAEncryption
15:82:b2:c9:6e:88:62:f1:b0:10:fd:4b:86:ae:2c:39:18:0b:
f4:8a:28:ed:fe:03:e5:25:cc:a4:1a:5a:1a:c4:19:5e:f1:e9:
ae:6f:97:cb:38:5c:3e:bb:7d:db:1b:e4:0a:7b:89:3c:bc:c8:
93:2e:e8:7b:da:a7:f5:90:72:ae:75:dc:1d:af:e0:61:33:24:
17:36:2d:d9:92:43:47:e1:c3:e8:d0:75:a9:90:14:c6:64:07:
5b:80:6b:7c:96:51:16:df:ef:cc:52:f0:e8:d1:3a:02:9d:8c:
ed:94:5d:5a:13:f4:92:5b:60:7f:94:5d:60:69:e9:58:c2:ea:
6b:2d:4a:2b:2d:cf:eb:a5:42:58:3e:40:0e:85:50:d6:4b:1a:
4c:64:76:45:e5:00:54:02:d6:a4:32:43:bb:f9:33:14:f3:79:
cc:87:09:fc:62:ba:2c:b0:af:82:69:fb:e3:bc:4d:ac:77:68:
c7:66:1e:b3:01:07:e4:76:59:42:30:b5:8f:8b:2b:49:8e:2d:
a5:ef:f6:5a:7d:89:7a:85:55:03:cb:d2:aa:2c:52:9a:c5:de:
e4:2e:d6:ab:7a:11:d6:b0:cc:2c:fd:4f:b4:24:a6:de:32:1b:
d9:20:d1:e7:fb:88:7a:10:cf:bb:d9:97:37:52:15:50:65:3c:
44:7e:d5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:26 2026 by rpki-client