Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6175B0EE81C411F19382C8C3CE1D38B0.roa
File: 6175B0EE81C411F19382C8C3CE1D38B0.roa (raw, json)
Hash identifier: eJ04KTe9YpdoVYlYbiGdQhtQZMFhusaKUQIupkUfDxg=
Subject key identifier: D5:C8:0D:41:3A:3A:99:A4:22:F1:C5:83:D8:EC:E3:21:32:1C:01:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D975
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6175B0EE81C411F19382C8C3CE1D38B0.roa
Signing time: Fri 17 Jul 2026 09:46:28 +0000
ROA not before: Fri 17 Jul 2026 09:46:24 +0000
ROA not after: Mon 24 Aug 2026 09:46:24 +0000
asID: 8796
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121205 (0x1d975)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 09:46:24 2026 GMT
Not After : Aug 24 09:46:24 2026 GMT
Subject: CN=6a59f9f4-f5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:68:a8:9a:6f:cf:ec:c9:70:d6:b4:4a:34:b5:
bb:a1:74:2a:9d:dc:b4:95:4c:10:57:b9:f0:27:be:
d4:a5:e7:3c:e8:9f:ed:7f:06:56:3a:99:bd:69:05:
d9:9b:c8:60:c9:73:ae:09:57:ab:fa:8d:4a:36:6c:
ef:8f:79:b9:c1:2d:62:ce:2d:f7:e2:c0:11:5b:19:
a2:1e:49:af:fa:b2:15:ca:b8:ac:c8:96:38:4e:0c:
45:59:41:14:e2:bb:c5:e6:ff:aa:fc:69:ed:a7:8d:
e7:c9:ce:5a:cd:89:b7:6e:79:e8:94:b2:78:88:21:
d9:0e:0a:0e:60:b1:c6:91:69:ad:01:0e:57:2a:70:
3c:6b:98:a8:03:ff:21:62:70:a6:d6:1a:cc:02:48:
ca:11:5a:8e:29:d5:ba:1f:2a:c5:dd:d8:1d:a5:b3:
86:73:73:af:14:83:fc:44:d4:c9:98:2f:bf:ae:c9:
f8:84:41:15:2e:8e:07:89:af:fe:7b:e1:77:8a:b5:
db:5f:63:ef:df:17:d3:b6:54:f8:f7:ca:36:e9:07:
5e:a2:1c:f2:11:7a:b8:b2:9e:9d:f9:75:30:af:20:
53:2f:14:60:29:b9:fd:64:9f:ce:01:4c:f5:c1:06:
71:56:d0:e0:31:45:e3:ae:b8:5d:6a:cb:07:d0:de:
a4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C8:0D:41:3A:3A:99:A4:22:F1:C5:83:D8:EC:E3:21:32:1C:01:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6175B0EE81C411F19382C8C3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
87:e2:6e:a5:f6:fc:1f:39:46:bc:75:8a:17:91:53:23:6b:bb:
c8:ef:a0:7b:2a:33:7d:ae:81:29:c1:ff:89:71:91:0e:6e:d0:
1e:e5:ec:9e:12:19:89:9e:28:9f:f1:ad:8d:c3:46:08:f4:d6:
33:91:9c:b2:83:87:2b:bb:83:5b:38:a4:86:eb:01:b3:24:62:
3b:4f:71:22:cc:29:b6:c7:65:8d:d0:f8:fe:0e:0d:19:9b:8c:
d3:79:cb:62:82:3a:11:4d:db:ef:68:e7:b3:5a:c7:1a:7c:d0:
b8:40:20:aa:bb:00:d8:79:39:12:62:4f:32:02:bc:2c:0d:99:
7f:e0:b2:c2:35:3c:0e:b4:65:3a:f6:67:6b:b3:ae:e2:78:a1:
6a:51:21:83:c0:45:dc:27:1b:1d:0f:7e:9a:2f:bd:94:9e:88:
ca:c2:5e:a4:f2:2a:18:bc:45:1f:34:b7:f1:21:e8:3f:3a:00:
30:f0:38:26:7b:e7:a3:01:c9:04:0c:db:70:d5:9f:79:f0:be:
39:e6:76:45:a1:4e:df:5b:fa:8c:83:57:e0:d1:d6:df:72:e1:
90:12:6c:96:2a:7c:d4:9e:7c:d4:48:73:97:62:63:ce:e8:92:
72:7e:53:d0:38:43:e6:33:5c:a6:54:7c:74:ec:a6:ab:d1:cf:
48:b9:60:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:06:37 2026 by rpki-client