Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CAA77EE695A11F18615C306CF1D38B0.roa
File: 4CAA77EE695A11F18615C306CF1D38B0.roa (raw, json)
Hash identifier: OuaaY7S8/Eucx5C2JzG7Bi0IFHa9Z0dQDWbWi/++MrA=
Subject key identifier: 02:38:A9:67:70:CF:31:43:F1:AC:4A:50:0D:93:9B:19:4E:45:7B:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D326
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CAA77EE695A11F18615C306CF1D38B0.roa
Signing time: Tue 16 Jun 2026 08:06:38 +0000
ROA not before: Tue 16 Jun 2026 08:06:34 +0000
ROA not after: Wed 22 Jul 2026 08:06:34 +0000
asID: 8796
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119590 (0x1d326)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 08:06:34 2026 GMT
Not After : Jul 22 08:06:34 2026 GMT
Subject: CN=6a31040e-fe2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:01:71:87:50:3e:2d:a6:4a:e4:22:36:6f:09:
01:96:77:a8:c4:2f:71:6c:8b:b3:10:b6:7f:eb:75:
39:1d:7d:f5:c7:c3:1b:cd:0c:a7:be:5c:d5:3c:c2:
3b:ce:fb:8d:b8:df:a1:44:d8:da:16:84:7d:4b:c2:
04:67:93:3e:5e:0f:68:99:ca:0f:bd:a9:1b:be:39:
f1:b6:97:76:22:b7:c5:f3:36:f0:4d:c3:60:a2:ea:
19:4f:07:86:26:85:35:38:60:92:f9:85:72:db:94:
42:44:62:1c:cd:03:cf:1f:92:61:88:18:16:b1:bb:
b1:62:96:4a:fc:03:93:05:f7:4c:7a:3a:1b:eb:11:
9a:b0:2d:b3:58:79:13:e3:25:aa:64:a6:d2:f5:67:
de:cc:43:96:d8:0a:b1:f2:95:ef:52:a8:59:c7:d0:
2f:97:73:03:a1:4d:9d:4e:f7:13:83:91:93:21:cc:
cd:eb:da:90:23:cc:56:d5:ca:4e:ad:80:15:c1:e1:
1b:1e:ac:fc:c0:e1:ef:cd:b7:d1:1a:66:aa:7d:e0:
21:39:3e:44:0b:6f:28:60:cd:59:13:32:ca:33:45:
8c:29:64:6c:18:8a:8d:c2:62:7d:d3:4f:85:a9:a2:
70:33:d7:ac:86:92:4e:2a:f2:f6:30:e6:ae:86:62:
70:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:38:A9:67:70:CF:31:43:F1:AC:4A:50:0D:93:9B:19:4E:45:7B:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CAA77EE695A11F18615C306CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
87:b6:7a:44:1a:c2:d5:4a:0d:ac:32:d2:c0:ef:f6:81:00:f5:
8c:8b:86:03:e4:78:58:23:0b:94:51:d1:f1:30:ae:1d:8f:ca:
85:0f:e9:5d:14:a0:b5:0f:2b:5f:e8:8f:d7:95:ea:fb:da:58:
65:3b:c3:c2:14:2d:eb:b8:5a:ed:b4:81:c3:3d:2b:20:a3:1b:
56:ad:e7:24:04:c5:24:30:19:e7:fe:87:0c:8b:74:04:01:2a:
d0:af:e4:29:71:bf:f7:5b:f8:82:29:5c:95:80:f9:ed:f4:85:
ac:0d:60:13:eb:06:56:df:a6:aa:d7:26:10:4d:96:ea:39:fe:
d8:5b:a9:7a:39:3c:4d:7a:44:d7:50:85:30:8e:26:1e:00:5a:
bd:8f:22:7c:13:16:a5:49:b1:fd:63:63:3b:95:f5:0a:18:90:
2f:cc:be:93:73:6e:e2:ff:44:b3:8b:85:fb:72:6a:b0:34:ed:
bb:70:80:34:34:3e:62:4c:82:56:dc:45:33:7a:8d:dc:95:37:
45:6c:75:ff:5c:a9:fd:b2:0e:76:8b:81:52:55:35:15:71:24:
4e:80:1f:7a:e2:3c:00:60:1a:ca:b3:99:11:ee:cb:94:00:aa:
5f:74:5a:49:6a:fa:ea:1c:50:62:5b:e6:9b:2f:75:28:da:db:
0e:49:f1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:55 2026 by rpki-client