Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/547E7E72740211F1B936E906CF1D38B0.roa
File: 547E7E72740211F1B936E906CF1D38B0.roa (raw, json)
Hash identifier: xfmpJ+4rGy+3QJLCdie3EGK2EqEpLGTDNKpHdHVucXU=
Subject key identifier: 22:13:6A:42:46:B1:E2:2A:4A:60:84:95:15:FF:26:6D:80:BD:91:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D61A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/547E7E72740211F1B936E906CF1D38B0.roa
Signing time: Mon 29 Jun 2026 21:34:38 +0000
ROA not before: Mon 29 Jun 2026 21:34:34 +0000
ROA not after: Tue 04 Aug 2026 21:34:34 +0000
asID: 213169
IP address blocks: 154.94.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120346 (0x1d61a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 29 21:34:34 2026 GMT
Not After : Aug 4 21:34:34 2026 GMT
Subject: CN=6a42e4ee-9567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d1:41:71:7b:ae:59:b5:bb:4f:31:08:b8:e0:
a2:2a:04:ec:bf:ab:2e:2d:f2:88:6a:7c:de:0c:af:
f5:cb:44:e3:67:34:da:dc:fd:00:72:83:fc:62:19:
a1:f2:69:38:d6:f2:68:47:8b:1a:43:97:5e:f5:51:
54:cf:2f:27:65:56:b0:d3:5e:bf:5d:d0:15:f9:d2:
22:f8:ac:b2:ce:96:df:cf:9b:4e:ea:04:4e:cf:4e:
f8:e5:d8:6f:c7:0a:ec:b5:d8:7a:3f:94:d3:a1:a3:
9e:09:60:4f:32:cc:d8:95:c5:d4:f5:ba:da:ee:73:
e1:39:f4:c7:56:6d:44:51:44:2b:62:77:c6:3b:bb:
36:28:2f:55:68:47:9a:a7:c3:3a:9c:1b:f1:6e:41:
7a:9a:1a:b6:b3:ac:f0:c1:1e:ab:5f:3a:8d:43:f7:
13:76:52:7e:b6:6e:fa:29:a9:3f:59:79:a2:0b:ca:
4f:ae:d9:61:c4:47:6d:fd:21:a2:3f:53:8c:6a:ef:
a4:44:db:1d:fd:b0:db:a9:43:45:50:1c:b3:18:3c:
3c:38:1e:34:d7:b0:12:ad:92:d7:04:6d:ab:e6:30:
09:e0:ac:56:d0:1a:f9:53:c1:9e:8b:76:3c:cf:88:
95:90:f6:55:8f:33:22:8b:11:85:7f:c9:ec:fd:31:
51:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:13:6A:42:46:B1:E2:2A:4A:60:84:95:15:FF:26:6D:80:BD:91:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/547E7E72740211F1B936E906CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.48.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:5a:6d:0c:8d:52:82:c9:19:0d:f4:09:32:6b:1a:20:55:3e:
80:49:2f:6c:6c:a3:e3:74:5e:a1:29:e7:40:88:2b:1f:14:03:
2b:c4:fc:ed:6b:6a:c8:77:5f:02:58:36:ee:ec:f1:8f:76:72:
47:3b:09:29:b4:f7:87:2c:c8:29:52:36:8a:25:56:cb:96:80:
e3:15:2c:5a:4c:cf:ae:35:5c:6c:d9:d2:be:f6:26:ff:b5:84:
82:2c:f8:9e:22:6f:8f:ec:3b:1c:c5:97:6e:e3:95:c1:04:f5:
01:41:cd:fa:25:a0:dc:62:08:f2:c2:45:bf:74:e6:6f:dc:65:
0a:24:33:84:5c:97:76:f7:a4:fa:39:41:4a:a7:3c:dc:91:1c:
e4:ee:90:5e:fc:58:88:14:dd:a0:d3:b1:88:9e:5c:60:85:6e:
12:f4:df:82:49:34:b3:db:6c:c0:8e:af:06:54:74:c4:ad:ae:
c9:51:9e:bd:08:ea:58:9b:ff:57:e8:4f:16:32:06:41:2d:c9:
36:96:0c:ad:65:44:dd:39:c9:f1:ba:c2:37:3d:56:83:26:d1:
78:e9:7d:14:69:96:7b:4e:8f:3f:f6:59:f1:51:5e:8e:ba:2a:
c9:45:56:dd:22:a0:6b:e4:df:58:53:17:f0:ea:d9:a9:d4:03:
11:43:01:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 21:06:24 2026 by rpki-client