Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78680C4C916A11F1BBA43C1CCF1D38B0.roa
File: 78680C4C916A11F1BBA43C1CCF1D38B0.roa (raw, json)
Hash identifier: JLw+z1pS3SmsY+TaIjzbIZMAKnx8kd4j/c1Lw4HIFwU=
Subject key identifier: B3:36:18:2A:E7:01:1C:98:8E:2C:41:20:4F:6D:D3:45:75:25:0A:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DCD9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78680C4C916A11F1BBA43C1CCF1D38B0.roa
Signing time: Thu 06 Aug 2026 07:43:10 +0000
ROA not before: Thu 06 Aug 2026 07:43:06 +0000
ROA not after: Mon 28 Sep 2026 07:43:06 +0000
asID: 52263
IP address blocks: 154.194.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122073 (0x1dcd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 6 07:43:06 2026 GMT
Not After : Sep 28 07:43:06 2026 GMT
Subject: CN=6a743b0e-b45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1d:42:18:7e:79:f0:45:b6:25:33:c0:86:f9:
df:b4:9e:e1:87:0f:7d:d7:a4:c7:d6:02:cc:61:da:
14:4b:c8:13:dd:1b:63:f5:85:8f:5b:26:ab:4d:81:
b6:86:68:ad:9e:f2:1f:1b:68:59:4e:70:6a:9d:8c:
dc:d4:34:8b:31:4e:fa:90:b3:77:48:25:fc:1d:bd:
f0:51:bf:2e:de:3d:12:63:77:6b:45:0f:ba:06:8b:
7b:b4:ae:d9:67:80:80:73:c8:28:19:13:ee:cf:8c:
41:a9:36:46:5e:9d:e4:3c:7c:cb:09:c3:a5:67:a1:
45:02:75:af:a8:19:3a:e0:b6:15:2b:ab:a0:42:3e:
39:e0:79:fa:f2:db:5f:b9:60:29:69:55:e0:7b:33:
91:7b:b1:59:41:ee:af:0f:8a:ec:ae:bf:8d:6d:56:
17:3e:07:97:ec:68:18:2c:44:22:48:54:ed:2d:62:
d9:da:29:e4:a1:ec:e4:20:db:91:cc:bb:24:9a:b3:
f0:40:02:c5:9d:ea:f2:38:f0:cf:0c:eb:3a:4f:86:
62:aa:a7:e6:30:a7:d0:4b:4c:3b:22:34:af:f7:08:
2e:6c:60:ec:a2:73:b2:04:f5:ae:4b:a2:25:f9:76:
7c:fe:21:be:cc:3d:d5:73:17:58:0b:5b:dc:17:9c:
15:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:36:18:2A:E7:01:1C:98:8E:2C:41:20:4F:6D:D3:45:75:25:0A:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78680C4C916A11F1BBA43C1CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.69.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:5a:ff:33:15:2e:4e:55:53:fe:f2:5d:07:79:99:4d:65:3b:
a0:7c:4b:30:f7:87:7a:ff:fa:cf:54:70:c0:6d:8e:3f:6c:00:
7a:2b:2c:43:03:4e:54:36:3d:72:8e:dc:be:6d:c8:9a:a0:ad:
17:6d:2b:8a:e3:db:f0:fe:60:c9:a1:27:79:a7:ec:62:e4:b2:
4d:e4:10:18:73:4a:9c:83:b1:65:8b:b2:84:ba:6a:9b:a6:5b:
3c:7c:28:11:7c:19:fe:6b:01:23:2f:02:c1:58:1a:93:01:d6:
c3:45:80:e9:59:e2:1b:bb:4c:79:49:35:5b:71:a5:bd:09:5c:
a9:97:7f:31:6e:6d:50:cb:a2:ac:c9:aa:d0:53:0e:ee:c4:ab:
ec:06:be:2a:29:e6:94:5a:44:1d:57:d2:74:55:2b:7c:75:6a:
04:cf:3f:82:2e:f8:57:0e:34:7b:d8:24:cb:62:ea:91:1a:ef:
a2:90:e8:5a:09:a7:c7:9b:38:b7:3c:1f:a2:06:e2:5f:64:5f:
2e:3d:00:08:6f:ea:eb:7d:7b:5f:aa:83:82:4e:49:91:c8:bd:
e8:50:0f:bc:ec:74:b2:9a:3e:d7:ac:ef:61:c4:74:1f:e2:39:
1f:1e:d4:66:be:fc:0d:e0:ad:5a:c5:b4:20:23:76:da:c2:5b:
f3:5b:82:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:40 2026 by rpki-client