Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DC9B3D068E011F1BCDF0E15CF1D38B0.roa
File: 4DC9B3D068E011F1BCDF0E15CF1D38B0.roa (raw, json)
Hash identifier: rimI2z4/icGzR846lSuMnH/o0ZQMkSzJCCJhGt+LrzE=
Subject key identifier: 5B:EF:AE:08:7C:DA:83:25:4F:CA:33:47:67:59:EF:4C:1C:5B:31:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D2ED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DC9B3D068E011F1BCDF0E15CF1D38B0.roa
Signing time: Mon 15 Jun 2026 17:33:21 +0000
ROA not before: Mon 15 Jun 2026 17:33:17 +0000
ROA not after: Thu 16 Jul 2026 17:33:17 +0000
asID: 401434
IP address blocks: 154.85.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119533 (0x1d2ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 15 17:33:17 2026 GMT
Not After : Jul 16 17:33:17 2026 GMT
Subject: CN=6a303761-998f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9b:22:bd:e4:62:5a:52:df:ff:0f:6e:f0:5e:
9f:49:3f:f5:8f:23:03:2a:c0:27:07:17:c4:c5:6e:
21:5b:2c:99:0e:2b:4b:cb:58:25:10:a4:e7:58:ec:
3b:1b:2e:49:90:94:ea:4f:71:4d:8a:a9:64:43:41:
e2:41:a5:4a:eb:79:76:a0:f3:8c:73:58:08:74:f4:
bd:31:d8:3a:f2:b6:73:ef:9e:84:6c:8b:0d:4a:f5:
34:e9:4d:09:26:b6:82:b7:23:09:85:2b:90:3f:f3:
43:03:67:6c:1e:65:23:94:46:1d:00:ee:4a:6a:1e:
a0:5b:fc:6c:9f:3e:b1:ec:13:fd:55:d0:d7:e9:5f:
4d:97:f1:75:a0:75:ee:3f:0e:c0:24:11:5c:36:bd:
c7:0f:07:e5:fc:53:cc:82:78:09:89:dd:51:81:f6:
5e:0f:73:67:b2:db:5b:7f:e9:57:5e:08:d1:f8:8c:
d5:46:9a:8b:6d:f7:61:b9:52:9e:49:a2:b3:2a:30:
e5:56:c4:d5:4d:d6:6f:6c:ed:e9:3a:fe:4f:e0:67:
63:9b:ec:30:66:07:53:4f:66:97:af:18:58:53:8f:
5c:f8:15:58:90:85:51:9b:03:ff:51:81:5b:e5:81:
4c:70:db:3c:91:37:24:17:d6:d6:77:6e:71:49:93:
39:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EF:AE:08:7C:DA:83:25:4F:CA:33:47:67:59:EF:4C:1C:5B:31:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DC9B3D068E011F1BCDF0E15CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.16.0/23
Signature Algorithm: sha256WithRSAEncryption
12:03:c1:9f:62:82:d7:04:16:bf:21:93:57:46:7a:de:8c:96:
c9:40:78:28:e7:a3:4e:93:ac:84:2b:7b:f6:3b:be:19:18:b9:
8a:f2:cc:58:4d:13:13:52:02:b5:a3:4b:c0:2a:f3:60:8d:fd:
f8:91:ac:c4:c5:93:3c:e6:f8:37:d7:40:db:b6:23:ba:16:03:
f2:91:bd:fd:d5:c3:0a:91:48:de:64:1f:7c:70:e0:80:a1:a4:
16:31:0c:84:2e:9b:77:70:b1:60:12:90:46:0a:11:ab:f2:73:
16:8c:3d:07:62:7c:7b:1d:b2:05:5d:88:99:3d:df:fc:e2:b9:
09:c2:98:95:b2:9d:89:ad:ba:d7:9f:24:1c:f9:93:f7:39:d4:
eb:4a:8c:b5:c0:b4:0c:1e:df:86:90:6d:7e:ab:d7:f2:71:2a:
8a:0f:b4:64:e2:13:0a:30:ef:7d:e6:0e:fe:ee:e0:7c:56:e5:
6e:4e:f5:aa:ba:1f:9c:b4:d8:2b:99:79:ba:19:fc:d8:4b:64:
3e:f8:83:62:c4:d7:1e:3f:9f:70:75:92:ca:8c:a8:0e:d4:11:
08:24:c6:2a:1d:f7:2e:9a:c4:21:39:7c:79:e0:87:8d:52:db:
ad:86:95:95:0f:98:16:5e:ae:b4:5f:63:58:a6:98:b1:19:d9:
5c:b9:d7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:55 2026 by rpki-client