Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6803432E545411F19A1FBEA5CE1D38B0.roa
File: 6803432E545411F19A1FBEA5CE1D38B0.roa (raw, json)
Hash identifier: 1TYV3LEEN4Wnc3oZfcBlQ0o/BytP5P7qkdXOYHAA+h8=
Subject key identifier: 3C:D4:83:82:6B:2A:CD:01:2B:06:DC:97:7A:5F:91:FA:49:EA:16:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CCE4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6803432E545411F19A1FBEA5CE1D38B0.roa
Signing time: Wed 20 May 2026 14:01:33 +0000
ROA not before: Wed 20 May 2026 14:01:28 +0000
ROA not after: Fri 26 Jun 2026 14:01:28 +0000
asID: 63139
IP address blocks: 154.93.77.0/24 maxlen: 24
154.93.78.0/24 maxlen: 24
154.93.79.0/24 maxlen: 24
154.93.80.0/24 maxlen: 24
154.93.81.0/24 maxlen: 24
154.93.82.0/24 maxlen: 24
154.93.83.0/24 maxlen: 24
154.93.95.0/24 maxlen: 24
154.93.123.0/24 maxlen: 24
154.94.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117988 (0x1cce4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 20 14:01:28 2026 GMT
Not After : Jun 26 14:01:28 2026 GMT
Subject: CN=6a0dbebd-7a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:41:17:47:c1:74:9e:74:22:45:21:06:d8:66:
21:72:30:b3:e8:94:fc:4b:05:1f:09:26:d8:73:36:
f9:96:62:9b:6c:e4:23:ee:f8:b2:fe:76:0d:f7:aa:
18:be:bb:cd:57:bd:82:be:be:cc:f8:09:62:8c:3e:
d9:24:76:00:2e:5a:4c:b6:e1:f1:81:0f:e1:15:0a:
42:0e:07:79:c8:0f:08:db:7b:63:6c:32:5b:65:1c:
ac:eb:26:d8:b3:3c:83:75:48:5f:e7:c8:91:e6:eb:
d2:01:00:19:68:0c:04:3c:3c:2f:2a:9e:6a:e5:c8:
8c:65:5c:c6:a8:5a:29:25:6a:98:fc:04:9b:6f:56:
15:70:69:05:73:ba:e2:3d:7f:11:7d:a1:50:62:68:
33:ae:3e:dc:cc:0e:09:90:dc:55:9d:1b:90:59:ee:
8c:3e:f4:ac:62:3d:11:32:b1:2d:46:c9:ef:38:ad:
0f:0e:44:99:18:37:f4:f9:ae:ba:e1:6d:00:7a:00:
c9:6a:a7:8d:a9:a4:2e:3d:39:9f:c3:07:43:96:09:
30:71:c9:8b:00:b0:f6:a7:a2:7a:76:18:71:34:f5:
14:03:88:76:4b:b5:43:44:78:fd:bb:46:59:8e:dc:
29:b1:c8:df:fa:64:ea:6a:d6:65:92:9a:44:59:95:
12:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D4:83:82:6B:2A:CD:01:2B:06:DC:97:7A:5F:91:FA:49:EA:16:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6803432E545411F19A1FBEA5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.77.0-154.93.83.255
154.93.95.0/24
154.93.123.0/24
154.94.111.0/24
Signature Algorithm: sha256WithRSAEncryption
24:8b:45:3d:5f:ba:bf:14:83:1b:29:69:e9:e4:53:b4:83:b7:
e0:73:7d:a0:08:2a:d9:c0:7d:8d:49:4b:c0:6c:b2:08:6c:17:
dd:6e:85:90:c5:61:14:7e:8a:94:27:da:44:0f:c5:74:c6:fe:
b9:9b:ec:6c:90:58:28:99:76:c1:6b:36:9e:74:b8:b4:32:18:
61:22:2a:25:3f:41:ab:e3:d1:5b:9a:cd:c2:16:1d:e0:e9:9c:
b2:93:fe:b0:c8:f4:50:7a:0c:88:e6:78:e1:d8:d5:76:ab:28:
7f:9f:05:3e:52:80:56:9e:3e:de:e7:00:6a:34:44:4e:e1:06:
41:6f:08:8a:43:7e:22:35:29:53:ab:f6:e5:3d:38:26:0b:33:
21:f6:02:6d:4f:89:3b:06:47:ec:1a:37:2f:ec:c2:b6:b9:ca:
2b:39:a4:52:9c:3c:53:80:fd:b2:86:d0:01:eb:d4:cb:a2:5d:
b0:6d:75:ba:f2:11:16:72:e2:f8:e7:98:0b:13:8f:e5:16:ee:
55:29:5b:dd:77:34:cf:b5:19:08:4f:8e:9c:f3:7f:3a:ab:d7:
3f:ef:fe:2a:1e:5c:3e:65:2c:8b:08:13:3d:4b:d2:af:d1:85:
f3:e7:d5:37:16:99:ca:9b:ff:63:75:fb:c4:7c:ce:bd:12:34:
24:28:3c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:30:55 2026 by rpki-client