Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F17578E93BC11F1B7A7A4B2CE1D38B0.roa
File: 6F17578E93BC11F1B7A7A4B2CE1D38B0.roa (raw, json)
Hash identifier: nAYZphjmcGq5BoYPNrseLTW6+3vzZkAp5s6etPpvses=
Subject key identifier: 2F:6D:2E:08:90:D7:17:4E:F4:1C:1C:E8:2B:7F:A9:A7:DB:58:9C:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DD9D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F17578E93BC11F1B7A7A4B2CE1D38B0.roa
Signing time: Sun 09 Aug 2026 06:34:55 +0000
ROA not before: Sun 09 Aug 2026 06:34:51 +0000
ROA not after: Tue 15 Sep 2026 06:34:51 +0000
asID: 199037
IP address blocks: 154.198.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 14 Aug 2026 00:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122269 (0x1dd9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 9 06:34:51 2026 GMT
Not After : Sep 15 06:34:51 2026 GMT
Subject: CN=6a781f8f-3fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:1a:6b:70:8f:56:85:f2:86:ca:d8:25:55:
6f:08:a2:aa:94:3b:cf:7b:0a:a9:b3:4c:2d:d7:65:
0a:e3:c2:35:f2:58:1e:fd:18:50:ae:f0:59:43:6e:
d2:57:ef:69:89:5a:55:cd:c5:da:78:4f:f5:47:9a:
c8:cd:4c:1a:44:b4:31:84:1c:0a:f5:84:36:10:72:
37:30:be:ad:49:f5:01:9b:db:35:fb:1b:73:bd:c1:
3d:fc:5f:68:62:ea:51:05:a3:4a:78:5f:40:6b:f9:
a6:69:67:94:95:af:2c:d1:c8:85:f4:e3:36:d0:26:
53:71:6e:85:a6:a4:c4:54:35:66:58:d0:c8:63:86:
c6:d7:b3:33:60:53:8e:06:b1:7a:5e:4a:47:7c:3d:
be:ce:5f:dc:6c:c3:13:6c:a1:85:f7:42:e9:a9:9b:
d3:8e:d4:c9:35:1d:47:87:90:47:f5:9f:56:0f:f8:
01:df:23:f5:7f:48:5e:5b:d3:88:1b:d2:c0:89:c1:
09:f1:db:55:40:05:eb:2e:bc:8b:b1:bf:aa:6a:d6:
fc:f8:25:f7:3f:fc:2d:51:22:61:76:9e:0c:02:9d:
ac:14:92:6b:a2:ee:de:83:7f:5f:a8:a9:d0:74:12:
c0:ec:79:de:ab:5f:a8:ce:3b:15:1e:af:ba:f4:3c:
c0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6D:2E:08:90:D7:17:4E:F4:1C:1C:E8:2B:7F:A9:A7:DB:58:9C:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F17578E93BC11F1B7A7A4B2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.9.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:92:28:ad:24:f5:80:a5:35:38:98:24:a5:de:80:14:fb:1f:
96:ee:8a:23:a5:88:46:32:d9:f8:18:09:72:37:02:fc:81:8f:
a8:f5:25:4f:1d:6e:39:6b:6a:fd:7d:57:7a:10:24:12:c1:06:
45:ec:80:6a:d2:6f:9b:06:e4:cf:eb:ed:1f:0b:de:a0:ea:17:
2b:57:4c:3b:d4:1b:41:62:7a:79:ff:48:71:00:82:89:f9:15:
2d:7e:e8:e6:01:5c:4c:af:99:91:16:4f:a6:ee:83:d7:d4:07:
bc:73:02:f4:c6:cb:0b:46:31:90:78:d2:8d:0c:d8:b7:cb:e3:
11:a0:c7:39:a4:cd:03:d3:ea:1e:05:ce:a7:98:75:37:3b:63:
bd:9a:77:8a:0f:61:c8:2a:0e:d3:cc:b5:7f:9a:74:be:4f:aa:
77:89:dd:3f:d4:61:e2:3d:68:d0:dc:d8:b2:35:25:33:f6:e2:
e5:fa:b4:76:e5:66:8d:37:c0:56:2c:7b:58:f6:f5:d0:89:4d:
3c:35:41:dc:9b:c4:66:a2:4b:76:94:cd:d1:aa:e0:57:d9:8a:
59:0a:70:ea:14:6b:4f:67:93:6f:bf:e3:ce:16:e4:00:d0:99:
ad:4b:41:19:20:98:45:83:ca:dd:34:01:06:0e:de:fd:bb:a0:
86:a4:e3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 19:40:48 2026 by rpki-client