Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84E791A677A011F1AB6CB512CF1D38B0.roa
File: 84E791A677A011F1AB6CB512CF1D38B0.roa (raw, json)
Hash identifier: LPrnQsKbJ4MQ8/PpA9Wk/CSABZILr9vKM6NZpZw5S5Y=
Subject key identifier: CE:F1:75:E2:2C:E1:E8:50:87:8F:03:69:C7:AA:4E:81:8E:2C:36:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D705
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84E791A677A011F1AB6CB512CF1D38B0.roa
Signing time: Sat 04 Jul 2026 12:04:34 +0000
ROA not before: Sat 04 Jul 2026 12:04:29 +0000
ROA not after: Sun 10 Jan 2027 12:04:29 +0000
asID: 9304
IP address blocks: 154.89.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 11:51:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120581 (0x1d705)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 12:04:29 2026 GMT
Not After : Jan 10 12:04:29 2027 GMT
Subject: CN=6a48f6d1-998d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0c:f1:f9:fe:d6:1a:d6:9e:85:18:82:50:75:
9f:8f:3b:1c:c7:55:40:8e:e5:72:7d:83:0b:e5:36:
70:2c:ee:ac:e2:6c:f6:65:3c:61:39:c5:03:19:4a:
db:41:d3:d3:45:b1:92:07:65:74:90:f9:e7:6e:c9:
60:b2:52:4c:a1:2f:20:3d:9d:c2:96:9c:36:01:f3:
46:1a:08:a0:72:d6:3e:c2:11:52:a2:07:9b:3b:94:
5b:2b:14:68:8a:da:d1:83:93:38:35:c5:81:69:38:
44:02:c2:55:73:b5:c5:12:53:dc:15:69:17:5a:a1:
8d:13:3f:d3:2f:8f:2b:60:d6:26:95:1a:7f:a6:c6:
1e:38:4d:92:d9:2d:4e:58:72:a6:e0:ca:34:d1:9f:
e6:e6:76:29:6b:8c:fb:98:cb:26:4d:26:5d:15:f4:
be:24:be:17:d5:5e:c4:4d:fe:ff:0f:9f:ee:e6:5b:
f6:8a:3b:82:31:c8:a4:b7:83:68:fb:ef:ef:4c:42:
31:0a:92:09:7e:46:36:4c:ef:5e:b2:bf:68:0d:1d:
1e:a8:f5:f9:57:6b:ac:34:14:f4:ab:b7:6d:de:7a:
96:35:24:85:0f:1e:58:b1:c2:c8:57:f4:f0:d3:f9:
9a:0f:18:d5:70:e6:01:df:2d:88:72:9c:3e:e6:24:
19:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F1:75:E2:2C:E1:E8:50:87:8F:03:69:C7:AA:4E:81:8E:2C:36:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84E791A677A011F1AB6CB512CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.6.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:c5:ec:6e:a9:d6:71:ba:a7:1a:3d:fb:5c:10:44:fe:ed:ad:
4c:35:c6:d3:44:f6:89:33:2e:70:e7:f4:52:57:2c:28:f6:c3:
78:8a:df:93:84:41:86:d9:62:87:0b:bb:b3:a1:a7:8e:5d:ee:
eb:d9:27:f8:10:be:a4:66:36:c4:08:2b:c4:41:a3:2b:cf:d0:
8a:12:42:0d:2d:c0:3b:53:3a:96:ed:2b:e6:54:e9:b5:64:51:
64:62:24:c4:19:41:e4:15:23:62:c2:50:5d:d5:50:83:fc:60:
4b:3d:78:4f:cd:6f:17:c5:27:32:8f:3f:a2:e7:ca:9a:0e:cf:
68:09:20:67:45:86:78:bb:87:96:22:c1:72:d7:9e:64:2e:d8:
22:3d:09:25:af:c7:3d:ea:56:42:cd:c3:8e:cc:39:1c:46:96:
64:7c:2a:09:fe:52:de:ad:45:6b:35:8c:0c:71:54:dd:fd:8f:
42:5a:2d:94:72:18:fc:96:70:e0:3d:2e:30:0b:3b:99:1b:9a:
a1:97:84:58:f0:38:56:1d:70:e2:36:74:92:42:66:f8:b2:5b:
96:69:f4:65:17:d2:f3:ef:20:2e:93:87:30:af:ea:9f:f5:09:
4b:0c:b5:ff:d1:63:81:e4:7f:b7:ec:9d:0c:03:89:a3:b6:da:
71:e1:9f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:58 2026 by rpki-client