Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D977F98697B11F197EB81CDCE1D38B0.roa
File: 7D977F98697B11F197EB81CDCE1D38B0.roa (raw, json)
Hash identifier: OV9sp75kuwsnvWXq1RRSd1SXf0iSkhq0jYBR6smNNaw=
Subject key identifier: DC:00:26:72:65:B0:98:B6:33:20:91:76:88:0C:88:22:09:41:C9:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D334
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D977F98697B11F197EB81CDCE1D38B0.roa
Signing time: Tue 16 Jun 2026 12:04:14 +0000
ROA not before: Tue 16 Jun 2026 12:04:09 +0000
ROA not after: Thu 16 Jul 2026 12:04:09 +0000
asID: 401701
IP address blocks: 154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 22 Jun 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119604 (0x1d334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 12:04:09 2026 GMT
Not After : Jul 16 12:04:09 2026 GMT
Subject: CN=6a313bbe-3978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bb:fd:0c:6e:90:4f:1b:7d:5d:eb:bb:d5:ca:
f2:2d:9d:8e:6c:f8:d8:04:aa:31:0e:8c:c7:ca:65:
7c:b7:cb:9c:b5:13:c9:80:9c:80:44:9e:4c:6b:bb:
ec:c2:41:46:65:5c:c7:6a:08:1e:49:0d:4a:2b:ea:
0d:3c:d0:93:dc:bb:80:67:b1:28:74:75:34:cc:68:
e2:f0:12:0a:aa:9a:29:8f:d3:6e:f7:ad:0a:13:6e:
5d:1b:f7:8f:55:9c:a5:83:ee:63:e9:0b:1f:8a:9f:
39:47:2e:be:65:fe:37:d8:4c:6f:b7:b5:86:c2:ad:
d5:e1:d9:19:19:6c:08:ea:8d:b0:6a:6c:e9:bd:8b:
cc:77:4b:b0:3e:51:7f:9b:ad:0e:a9:de:a7:8a:cb:
a9:4e:60:ec:76:47:f1:e9:68:d7:92:f5:17:13:22:
f3:9a:7b:15:87:10:9c:b0:74:02:53:39:5f:6f:74:
84:3c:c5:db:c4:7d:a9:07:2e:53:87:c0:1c:dc:0b:
5a:13:8d:fa:4c:23:f9:ad:77:58:1b:8c:f7:d5:72:
3c:52:7c:a3:89:66:34:40:d2:27:3f:31:1d:64:7d:
ce:e8:47:49:7e:3a:d8:16:bc:77:a2:9c:43:b1:43:
55:85:fc:4e:68:01:e3:7a:bb:53:0b:84:85:39:0f:
5a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:00:26:72:65:B0:98:B6:33:20:91:76:88:0C:88:22:09:41:C9:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D977F98697B11F197EB81CDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
b4:f1:65:d8:9d:24:4e:22:35:71:10:74:29:93:86:95:65:4b:
20:cc:17:e0:f0:5d:0e:86:e9:ba:1b:47:e5:43:98:f7:d7:1f:
a8:c5:47:8c:03:59:1f:49:db:cf:63:0b:93:8d:4c:f2:44:08:
d9:f8:55:4c:d5:f3:ea:ca:5d:02:95:25:1e:ca:87:ec:ee:c6:
59:3d:87:23:1e:39:ab:a0:c4:84:9e:df:42:86:04:b3:f2:57:
e5:87:bc:c5:ee:b0:98:37:7e:54:9b:1d:1c:a1:7e:51:79:bf:
16:54:db:cc:ae:b4:62:9f:eb:7b:5e:07:cc:de:1f:89:56:8f:
b1:34:1b:1e:7e:a9:6c:e9:8b:02:eb:e5:a9:db:90:59:34:a0:
67:c3:0b:66:47:e8:65:77:bb:5e:e0:19:a0:c8:90:aa:5e:92:
8f:a2:de:9e:7d:66:af:6b:81:90:a3:59:92:e3:eb:88:b6:8c:
ae:71:c1:80:de:89:3b:e9:03:f3:33:74:cc:37:22:63:8b:fe:
e8:37:1a:4b:c5:6f:46:9a:c4:39:2c:e2:22:5d:4c:d8:bd:b4:
80:7f:b5:73:04:da:6b:84:e8:30:a1:d9:4d:ba:23:1b:b3:7c:
02:69:0a:4d:4a:f0:b6:23:ba:47:90:2b:e9:ff:94:dd:1d:92:
88:f3:b9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 14:56:26 2026 by rpki-client