Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8314563C6F0511F1B1322ABDCE1D38B0.roa
File: 8314563C6F0511F1B1322ABDCE1D38B0.roa (raw, json)
Hash identifier: Pn6penJqRJShl9Cu3dxk9PxkWKPKTzGYfwlBm9IV5Ug=
Subject key identifier: 85:16:17:C6:A6:02:6B:DE:A6:B0:91:18:B2:1F:01:D6:85:48:09:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D4AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8314563C6F0511F1B1322ABDCE1D38B0.roa
Signing time: Tue 23 Jun 2026 13:14:49 +0000
ROA not before: Tue 23 Jun 2026 13:14:44 +0000
ROA not after: Thu 23 Jul 2026 13:14:44 +0000
asID: 49453
IP address blocks: 154.193.188.0/24 maxlen: 24
154.193.189.0/24 maxlen: 24
154.193.190.0/24 maxlen: 24
154.193.191.0/24 maxlen: 24
154.208.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119978 (0x1d4aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 13:14:44 2026 GMT
Not After : Jul 23 13:14:44 2026 GMT
Subject: CN=6a3a86c9-b05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:87:80:30:a3:0b:40:23:ea:d2:77:97:d9:a3:
35:1b:74:fb:28:1d:4b:db:a2:ac:4b:7a:04:a7:5b:
78:98:a3:f2:0e:5a:93:3b:89:93:38:02:3c:1a:34:
04:39:62:2b:ed:f2:97:a6:3e:e2:cd:55:bc:64:35:
c8:59:18:80:16:ba:17:eb:e3:bd:c8:e5:62:81:30:
80:bf:e5:e8:0a:64:73:31:32:6e:67:24:f4:8d:0b:
d4:7b:54:c9:8d:cd:ce:60:d2:82:76:48:15:fe:06:
74:2a:9d:93:a5:f9:2a:ef:63:f8:62:9b:0b:28:28:
60:d3:20:a8:23:35:f2:15:1b:3a:f5:d9:72:b2:6f:
81:b7:b6:1d:97:aa:7d:0d:18:aa:21:6d:41:e6:70:
85:d7:48:79:4a:10:10:c4:cf:0a:64:73:ff:bd:4d:
85:fe:b1:27:a0:a7:9e:d7:87:2a:04:50:d2:7a:be:
ce:7a:ee:9b:16:a7:e4:b4:7a:55:11:5b:66:4f:cc:
65:e9:3e:06:ba:7b:d1:e0:19:66:75:18:2b:7a:3a:
c8:bf:bc:43:11:51:45:85:8b:22:44:b3:0d:4a:45:
c7:c4:4a:71:10:04:64:d5:1c:18:61:95:84:12:cf:
9c:98:6e:53:71:cf:47:24:58:8f:f5:10:49:4f:32:
20:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:16:17:C6:A6:02:6B:DE:A6:B0:91:18:B2:1F:01:D6:85:48:09:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8314563C6F0511F1B1322ABDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.188.0/22
154.208.112.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:db:d5:d1:90:a7:b2:ae:19:06:0f:be:69:9c:f1:27:83:41:
10:51:ef:10:48:01:c3:a1:0a:f0:cb:0a:9d:3e:ba:e7:95:b0:
62:95:f9:3f:10:83:d9:80:3e:2f:f5:cc:4e:da:99:d4:48:51:
32:16:8c:56:4a:3a:b5:a7:76:8d:2f:f6:48:9b:4d:c1:2a:97:
13:e6:b1:c4:aa:2a:9d:95:10:f1:af:a2:a8:9a:4b:20:ac:30:
92:46:8a:48:62:ce:b3:f5:74:fb:9a:79:b5:ba:a5:34:6b:be:
02:0e:80:fd:1d:fe:75:27:62:90:18:6a:a7:f0:6d:62:b1:7a:
d8:ac:36:3a:70:8a:8f:2f:54:70:b1:1e:17:b6:84:3f:58:92:
3d:11:7c:71:4f:00:eb:85:03:c2:d0:86:42:e2:49:6e:37:b4:
e0:78:4c:10:af:54:d1:0d:c7:c0:4f:fb:a4:66:fb:4a:77:4a:
42:e6:ff:af:b0:c7:c6:d7:66:08:e9:78:52:9c:c6:38:a5:84:
39:a4:8b:c8:2b:79:7b:eb:c4:85:90:c9:69:f3:75:3d:88:ae:
9b:46:05:94:cd:19:60:73:bd:b1:fd:f0:60:93:8e:e7:4b:5e:
b2:8c:2b:e7:36:d7:c7:1f:ab:e0:92:c6:fe:21:fa:29:f1:b1:
66:00:7a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:00 2026 by rpki-client