Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A0A1C987D5311F1BB7837E8CE1D38B0.roa
File: 5A0A1C987D5311F1BB7837E8CE1D38B0.roa (raw, json)
Hash identifier: AWMcDa3tbrwpV1udG0tPLMDLKTjHxk4xT/1cW+DxjCc=
Subject key identifier: A4:6D:BC:D7:03:4D:30:0A:83:F9:3D:CB:96:0B:A7:38:02:D2:9B:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D852
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A0A1C987D5311F1BB7837E8CE1D38B0.roa
Signing time: Sat 11 Jul 2026 18:07:17 +0000
ROA not before: Sat 11 Jul 2026 18:07:13 +0000
ROA not after: Tue 18 Aug 2026 18:07:13 +0000
asID: 139923
IP address blocks: 154.193.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120914 (0x1d852)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 18:07:13 2026 GMT
Not After : Aug 18 18:07:13 2026 GMT
Subject: CN=6a528655-69fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0f:cb:3e:f1:08:e1:f2:d3:80:c5:46:e5:89:
7a:20:54:90:bc:69:6d:39:25:97:aa:af:1d:0d:de:
b8:b7:8c:c0:62:ef:36:a6:ae:53:40:2f:e5:6b:09:
00:a3:3d:6d:54:33:f1:24:89:6a:74:8a:0d:dd:44:
3a:a9:5c:fb:65:52:03:11:ee:c4:c9:87:f5:63:f9:
51:72:35:e2:dc:42:ca:c0:fe:2c:66:fb:0d:e6:9e:
b2:d4:53:eb:82:52:01:62:61:ff:21:19:2a:28:75:
98:34:d3:45:01:98:f9:42:2b:80:77:ff:d0:55:93:
ad:b0:ab:23:3a:f5:d2:77:04:87:c7:64:72:76:51:
3a:28:4c:7c:ea:50:3b:6c:96:1d:51:91:32:2b:24:
b7:20:c6:25:fb:ba:a4:04:e8:27:0e:db:63:94:5f:
c5:f9:19:5f:86:1d:04:92:10:cd:d6:dc:b6:37:62:
6c:4f:6b:a5:3c:cf:4f:ee:46:55:f6:aa:3b:ae:4f:
33:35:ab:ef:ff:40:0a:be:d8:df:fe:3c:5a:8c:5c:
fb:52:6e:b5:2f:c3:18:d6:d8:dc:1b:f6:da:99:98:
eb:79:8c:d7:d2:8a:5b:74:7b:e2:15:4f:18:00:df:
68:96:6e:18:e9:b0:ab:34:40:65:36:17:eb:9e:1e:
4b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6D:BC:D7:03:4D:30:0A:83:F9:3D:CB:96:0B:A7:38:02:D2:9B:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A0A1C987D5311F1BB7837E8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.240.0/21
Signature Algorithm: sha256WithRSAEncryption
26:b7:79:d0:f2:f2:6e:ed:47:88:53:ba:4b:42:c2:ed:ba:4c:
e8:05:d3:b5:f5:18:e2:df:90:06:d1:56:e7:2e:d2:9f:c2:5e:
75:bf:9d:a4:5c:e4:cd:1c:34:37:68:5a:ae:0d:2a:6d:19:28:
b6:b8:5c:f7:09:cc:0d:f8:85:6a:03:34:66:9c:2c:b8:b6:4b:
81:aa:3c:ff:db:30:93:fa:b0:42:11:e9:92:a8:58:11:41:4e:
ca:0f:7a:24:80:85:39:fd:ad:ea:d0:f3:e1:d3:67:3f:fa:e7:
7a:c5:47:02:f4:36:b1:c4:a1:25:2c:00:87:56:07:46:9f:cb:
e7:ef:0b:92:27:1c:63:05:fb:40:95:eb:86:29:85:36:51:11:
aa:2e:41:8f:f5:56:1a:62:5c:14:80:9e:d7:5f:3e:b3:fe:90:
f1:e6:82:8f:0e:4e:45:89:f4:34:ae:85:4c:c9:05:f7:a2:3b:
c8:47:79:33:1d:d7:33:60:ec:65:66:28:4a:b0:3a:cf:f0:02:
f3:44:ab:8e:23:c9:c2:4d:ab:27:9b:6c:f8:f8:8d:da:08:1b:
81:f1:75:08:7a:32:5e:d8:de:b9:b4:00:f1:ea:d1:cb:5d:bc:
7b:a2:d5:02:10:03:7a:6d:05:78:f6:cb:5f:fb:a0:d1:74:7b:
ff:0b:c7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:34 2026 by rpki-client