Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DBC805479EE11F18E63F50FCF1D38B0.roa
File: 6DBC805479EE11F18E63F50FCF1D38B0.roa (raw, json)
Hash identifier: AoXxdWGnCVvWO9RBOaw68n8hw6ShzZnh8YzbLXbUjVk=
Subject key identifier: 76:27:3C:B1:C4:A3:EF:E6:50:ED:78:B3:52:B3:29:A0:0D:6C:EE:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D76F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DBC805479EE11F18E63F50FCF1D38B0.roa
Signing time: Tue 07 Jul 2026 10:27:18 +0000
ROA not before: Tue 07 Jul 2026 10:27:12 +0000
ROA not after: Sun 09 Aug 2026 10:27:12 +0000
asID: 135377
IP address blocks: 154.202.65.0/24 maxlen: 24
154.202.66.0/23 maxlen: 24
154.202.66.0/24 maxlen: 24
154.202.67.0/24 maxlen: 24
154.202.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120687 (0x1d76f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 10:27:12 2026 GMT
Not After : Aug 9 10:27:12 2026 GMT
Subject: CN=6a4cd486-f05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:33:25:53:7e:fa:fa:ec:48:c8:4c:b9:ac:2b:
0b:79:45:b2:a2:29:77:cc:df:46:11:29:cf:65:f3:
6d:ff:c5:13:3e:e8:de:b2:fb:2c:b0:56:43:2c:82:
ef:89:db:87:17:77:52:e6:35:fb:2b:2c:f1:67:4a:
33:16:e6:19:98:a9:d6:2d:05:7b:23:af:18:e4:cf:
8d:f0:b6:af:b1:c4:15:ff:2e:7f:53:97:c6:0c:03:
b8:07:cc:8a:f4:bd:2e:6e:9c:31:fe:08:65:49:4e:
c0:4a:37:18:ee:cb:e0:ba:5c:87:28:45:a9:af:c1:
08:cb:f7:b0:4c:19:e8:51:3f:09:b9:12:4f:33:11:
ec:66:c1:45:c5:b7:c8:8f:33:13:09:74:61:24:b1:
98:ae:dc:37:80:8a:97:50:23:92:15:65:ae:4e:5d:
3c:ba:b1:a2:84:b6:25:58:fb:df:66:c4:cf:e7:71:
b1:35:f0:5c:f4:38:38:b0:69:ec:2a:fe:52:c7:eb:
73:87:dc:b7:8a:65:60:8e:59:91:c2:f0:09:4c:c7:
aa:3c:57:55:b5:1a:b4:17:ca:b5:2f:8b:90:0e:c0:
4d:52:df:b8:3e:89:d5:99:b4:51:af:d1:e9:6c:c8:
ec:33:8e:59:a8:f8:f2:39:3a:a4:ec:75:62:38:79:
dc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:27:3C:B1:C4:A3:EF:E6:50:ED:78:B3:52:B3:29:A0:0D:6C:EE:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DBC805479EE11F18E63F50FCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.65.0-154.202.68.255
Signature Algorithm: sha256WithRSAEncryption
12:c8:63:4a:b1:37:b1:3a:92:81:05:10:c0:51:d1:ac:fe:74:
6c:f6:df:3d:22:03:32:74:a5:34:1d:c8:8d:39:a3:3b:72:26:
d8:b9:99:f5:e4:85:51:f6:e1:7f:30:65:5b:3d:7d:7b:f1:7a:
61:ca:f1:a8:64:d7:df:d4:e8:cc:7c:18:36:f8:2d:84:d9:73:
60:17:b0:35:5d:eb:d5:0c:3b:51:22:7f:8d:ff:f3:ed:30:84:
95:fb:25:30:f8:3f:cb:73:a0:ea:ab:4c:28:cb:28:6a:c9:38:
2a:81:c6:34:0d:f1:02:18:b6:8e:ea:58:10:34:3c:2c:92:39:
b6:50:c8:ed:a8:15:5a:29:99:39:08:dd:63:31:68:32:6a:b2:
68:e4:38:8c:c2:ab:cb:e8:45:c4:70:2b:9e:c0:ff:2f:c8:ba:
7d:75:d2:af:a5:59:79:4f:13:8c:e2:67:31:63:4c:84:0e:83:
8f:24:a2:a8:b6:17:4c:31:f2:c2:d1:37:03:8d:42:bd:f7:47:
cd:89:85:3f:57:f8:93:cf:8a:82:32:cf:39:45:4c:fe:8e:48:
08:ed:79:ab:ee:a1:2a:9b:95:16:16:99:c6:1c:93:84:19:dc:
7a:84:ee:3d:c3:10:4b:af:8a:41:bd:20:da:eb:6f:06:85:80:
af:bc:82:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:47 2026 by rpki-client