Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F9CC7986A5611F1A64A02FFCE1D38B0.roa
File: 4F9CC7986A5611F1A64A02FFCE1D38B0.roa (raw, json)
Hash identifier: OEKRRVJ72hYjvN++nzv0Sj8dp9FASGRzvRw4aCpzvTs=
Subject key identifier: B0:50:AA:90:E3:44:96:B7:06:E5:40:A3:DB:47:0A:9E:21:FD:3F:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D3D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F9CC7986A5611F1A64A02FFCE1D38B0.roa
Signing time: Wed 17 Jun 2026 14:10:36 +0000
ROA not before: Wed 17 Jun 2026 14:10:32 +0000
ROA not after: Sun 13 Sep 2026 14:10:32 +0000
asID: 139880
IP address blocks: 154.199.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119762 (0x1d3d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 17 14:10:32 2026 GMT
Not After : Sep 13 14:10:32 2026 GMT
Subject: CN=6a32aadc-91a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d4:58:0b:23:6c:cd:0f:77:14:cd:de:fb:4a:
d7:d0:bd:18:03:cf:5f:48:c9:1f:53:90:74:54:f6:
bb:de:0a:9e:db:2a:5d:86:e0:dc:45:af:9e:66:23:
9d:76:f4:1d:61:76:ba:86:09:9f:c2:66:b5:e9:8f:
47:2f:21:a8:66:6d:dc:ab:d5:38:70:da:40:e8:8a:
26:a8:ea:44:60:b7:e4:bd:35:c9:4d:b7:22:b6:7c:
90:e4:f6:d8:c3:60:2a:91:4e:e4:13:c6:7d:23:7f:
56:45:e4:15:5d:56:73:77:34:f4:d8:99:bc:ab:c1:
dc:af:8b:64:aa:3b:57:e3:f5:ba:df:a1:22:69:11:
48:b9:aa:0e:a7:44:49:3c:8f:1a:c7:27:f2:2d:f5:
21:e5:c6:82:67:c6:b9:35:0a:f4:b4:78:74:19:55:
c4:40:25:0e:66:43:d0:a1:32:c7:70:f7:ab:5a:c7:
bb:5d:25:27:3a:98:2f:09:5c:5f:db:23:f9:bd:aa:
17:8b:4e:f4:7c:ce:00:fe:70:ba:22:a1:ba:7d:f7:
22:f6:6d:90:7e:ac:cc:c0:50:a1:ab:a6:0c:23:36:
b3:3a:f5:f4:33:76:96:db:c8:77:d7:f1:e8:5f:c4:
55:7b:8f:12:cb:50:51:2e:d4:37:6b:81:f1:99:4d:
d7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:50:AA:90:E3:44:96:B7:06:E5:40:A3:DB:47:0A:9E:21:FD:3F:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F9CC7986A5611F1A64A02FFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.32.0/20
Signature Algorithm: sha256WithRSAEncryption
7a:18:60:a6:33:19:55:ed:2f:18:c4:53:b0:b1:b1:06:1c:a2:
50:da:77:fb:97:02:c9:20:1f:68:c1:94:fd:a7:7d:ce:0b:0a:
12:e9:0a:ba:73:c0:91:b1:03:00:79:57:c8:4d:d2:fa:fc:58:
ee:21:5a:fb:df:67:5e:26:c4:d0:f6:ca:b2:17:5b:fc:37:c5:
64:07:1d:a6:80:83:0d:45:4a:22:0d:d0:73:ae:c4:0a:51:b3:
ac:32:08:2a:20:52:48:e3:b6:d3:60:c3:08:b5:ea:c9:5b:b5:
bc:84:08:53:ba:ba:3f:d9:93:6b:d6:c1:b6:5b:ee:4e:5a:a4:
9b:23:80:df:e6:43:a3:15:b8:c5:3d:46:7b:8a:5a:f9:c6:cf:
7e:63:78:39:83:db:34:77:07:3b:b5:3c:34:5d:64:ca:32:67:
5b:1e:8d:70:68:57:bc:15:4b:da:ac:d0:37:97:36:1c:a0:71:
d1:db:9c:8c:b8:1f:14:bd:0f:27:16:20:11:3b:4d:2d:d3:f0:
c6:af:2b:97:bb:67:0d:44:f2:4a:53:54:98:55:c4:4e:e1:a4:
81:ed:fd:1b:f2:02:87:ba:5e:1e:64:f4:bd:c7:3e:d1:a1:b6:
d0:e2:10:6f:47:52:b4:65:a3:4b:cb:6f:10:f6:69:5d:9b:51:
12:53:4e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:35 2026 by rpki-client