Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72C878D46A4711F1B88152A9CE1D38B0.roa
File: 72C878D46A4711F1B88152A9CE1D38B0.roa (raw, json)
Hash identifier: yxmb/fMvcVXfkcBiBVIIQLLzyacSdk5Tj0mVu8RN4WM=
Subject key identifier: 73:02:DC:7B:0D:75:88:ED:A3:4C:69:E9:F2:F4:4F:C3:CA:FB:1B:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D3BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72C878D46A4711F1B88152A9CE1D38B0.roa
Signing time: Wed 17 Jun 2026 12:24:13 +0000
ROA not before: Wed 17 Jun 2026 12:24:08 +0000
ROA not after: Fri 24 Jul 2026 12:24:08 +0000
asID: 40065
IP address blocks: 154.89.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119742 (0x1d3be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 17 12:24:08 2026 GMT
Not After : Jul 24 12:24:08 2026 GMT
Subject: CN=6a3291ed-0b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:af:c3:d4:2f:bd:59:bb:ec:76:f7:e4:87:92:
5d:33:32:15:63:f2:fe:69:a6:db:1c:00:f3:2e:9f:
50:9f:5f:97:58:05:77:3b:af:68:ca:56:7d:56:25:
48:c8:98:b2:ff:96:ef:d8:78:b0:a7:28:79:32:44:
1b:dd:83:98:1d:78:74:d1:20:c3:64:7c:5d:6e:56:
90:6f:81:07:84:98:f2:9d:36:fe:f7:88:f3:e8:d0:
bf:4e:c1:91:04:0b:0d:90:a2:21:4a:d5:63:82:6c:
f6:d2:0c:32:a5:b0:82:67:45:81:ec:10:b7:e7:15:
a8:15:c3:5a:87:7c:b7:d7:f6:26:b0:3d:08:40:d5:
9f:2b:d2:53:4b:2d:e1:e8:f3:1b:e8:4a:e7:e4:72:
d3:88:13:bd:c4:ec:05:d2:aa:74:fc:5f:d6:2b:7e:
de:7a:76:15:a9:34:78:70:58:f4:b6:60:25:4d:99:
b9:d0:b6:fa:01:d5:2e:44:f3:bd:18:6f:ec:58:7c:
3a:f4:73:b5:28:4a:cc:e0:e2:1f:94:1d:4e:9f:5b:
23:cf:80:95:3a:51:8b:dd:cc:5b:7f:fd:0a:7d:f8:
b0:91:1d:3b:79:01:59:f4:15:6d:5d:c3:6b:a6:be:
7a:e9:5e:4a:9f:6f:59:03:4a:3b:d3:ff:ec:3d:f2:
f5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:02:DC:7B:0D:75:88:ED:A3:4C:69:E9:F2:F4:4F:C3:CA:FB:1B:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72C878D46A4711F1B88152A9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.160.0/19
Signature Algorithm: sha256WithRSAEncryption
3b:24:5c:72:18:40:c4:0a:e8:7f:0f:a8:27:2d:51:4f:56:fc:
5d:4f:cb:57:6a:46:b3:b7:01:2a:35:b0:b0:a5:23:d8:67:b3:
ea:2a:04:76:34:93:34:25:a3:e7:b4:9a:cb:84:5b:a0:73:3f:
a5:85:e1:74:5b:a1:ac:29:b3:fe:e6:1e:c7:11:3a:10:0c:14:
2a:b0:53:4f:d5:ea:66:9e:50:e4:3a:be:c7:fc:1d:46:f7:a3:
79:65:71:4f:b2:c8:e8:1c:6b:c0:74:e1:a6:3f:ca:af:eb:c2:
2c:1b:79:92:ae:82:43:4a:90:85:02:ca:1f:3f:d7:a9:ee:1d:
9e:2a:16:85:fa:08:76:1e:46:78:e9:98:44:f0:b5:a2:5e:c8:
e6:eb:58:0e:eb:b2:4c:9c:3c:1e:50:a3:4c:d6:14:9a:39:d8:
6f:b3:52:a0:84:57:87:38:a9:76:f2:21:2d:21:5f:8e:8f:d2:
24:13:43:70:97:24:2e:fe:e5:7a:8a:78:73:d3:82:fe:4e:ec:
75:51:9a:8f:69:3f:a3:0a:d0:5b:e5:a5:ae:30:70:28:33:ed:
72:db:fa:fc:35:1e:35:c9:97:1a:17:47:7d:ed:89:90:b2:e5:
b7:99:a4:47:63:31:7e:97:27:08:b1:17:1e:92:3f:5e:38:f0:
b0:3b:ba:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:53 2026 by rpki-client