Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/862B5FA6707B11F1BFB84CA4CE1D38B0.roa
File: 862B5FA6707B11F1BFB84CA4CE1D38B0.roa (raw, json)
Hash identifier: doM/nNFiu/3wq1F0N/MVCGEYK8SYzFRVYhi+WlXB9N4=
Subject key identifier: 69:B2:1D:9B:68:1A:F3:8C:A2:10:8E:C9:D6:56:C9:57:5E:E9:96:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D530
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/862B5FA6707B11F1BFB84CA4CE1D38B0.roa
Signing time: Thu 25 Jun 2026 09:52:06 +0000
ROA not before: Thu 25 Jun 2026 09:52:02 +0000
ROA not after: Wed 29 Jul 2026 09:52:02 +0000
asID: 59642
IP address blocks: 154.84.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 02 Jul 2026 09:24:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120112 (0x1d530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 09:52:02 2026 GMT
Not After : Jul 29 09:52:02 2026 GMT
Subject: CN=6a3cfa46-ff4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7e:7c:dc:f0:5a:af:fe:44:51:b3:d3:d0:c7:
1b:c8:57:0c:c3:36:e5:5e:c6:40:0d:9a:47:58:03:
09:eb:7c:11:ed:3b:40:b5:16:2d:a8:44:6b:3d:fe:
39:d6:ea:c8:ef:1c:2e:93:80:8e:b7:1f:e3:b4:2a:
44:9c:76:6c:97:d6:99:ec:76:41:98:42:37:77:a1:
03:cd:7b:6d:64:1e:b5:f4:3f:64:28:13:9b:bb:96:
e7:79:c1:de:05:63:a3:9c:08:9e:52:2c:5c:56:a6:
45:d7:98:02:4b:c4:1e:95:ec:c5:4d:1a:fe:4e:e7:
36:a8:40:00:6d:0a:cd:24:a4:ec:d6:ce:7f:b2:83:
2a:de:67:2c:35:d3:3b:8d:dd:3f:0f:69:af:41:08:
99:bf:c4:0f:a7:7d:e3:b5:bd:b0:3e:50:9e:22:97:
67:4c:f3:1c:bd:e6:63:dc:80:01:c3:4e:d7:c5:c9:
eb:16:2f:95:15:1c:fe:25:aa:de:27:b7:36:47:9a:
bc:e5:c3:4a:d3:50:72:c0:8a:e0:b7:91:b8:56:69:
d8:83:41:b8:42:2b:3f:5f:78:9f:b7:b1:e1:d1:94:
3f:16:69:21:89:8e:ac:47:9f:ff:cf:22:a8:db:d3:
fd:b7:8e:8f:c4:49:58:7f:ae:32:51:0f:57:d0:42:
1f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B2:1D:9B:68:1A:F3:8C:A2:10:8E:C9:D6:56:C9:57:5E:E9:96:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/862B5FA6707B11F1BFB84CA4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.171.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:39:c9:e0:b7:aa:1b:b4:bb:0a:f1:bf:95:fc:fb:59:cb:ed:
00:e5:56:3d:2f:b1:aa:74:fc:ef:82:ee:6b:1f:9b:5c:00:cd:
9a:94:87:91:43:63:d9:1b:26:6e:e1:4d:50:57:e2:29:1e:a4:
f5:27:d4:8e:8b:26:46:3d:ad:d7:2b:b3:94:40:ac:28:ea:3c:
54:4c:a8:c0:9c:6f:fe:a1:e6:98:6f:20:c5:1f:b9:b4:e3:fa:
59:47:3c:c9:6a:bd:f5:d2:2a:7d:8c:5d:88:21:1a:b6:76:e7:
7f:fa:b0:4c:50:66:2c:34:ab:28:ed:df:bc:39:5f:e4:59:37:
d2:0d:b8:7b:3a:6a:fd:a3:dd:b3:70:5b:54:f0:04:a9:98:7e:
d5:09:bc:4c:9d:bd:1e:c9:2b:34:64:dc:06:90:29:d0:d8:b4:
1c:69:0f:e8:22:87:39:14:7a:b2:8e:2b:b2:5e:11:eb:3f:02:
56:fd:a9:cf:9f:2c:95:c8:af:a8:0a:9d:08:01:07:41:46:8c:
57:19:78:e0:f1:e3:ca:2e:ef:ae:39:b3:05:5f:5e:7b:c3:12:
10:92:0c:a2:46:47:d6:3a:f1:64:86:5f:2b:8d:9e:e6:3b:01:
de:01:5b:58:2d:8a:c4:3e:13:5b:25:86:62:68:2b:73:b9:e7:
11:29:6c:94
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdUwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjI1MDk1MjAyWhcNMjYwNzI5MDk1MjAyWjAYMRYw
FAYDVQQDEw02YTNjZmE0Ni1mZjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6X583PBar/5EUbPT0McbyFcMwzblXsZADZpHWAMJ63wR7TtAtRYtqERr
Pf451urI7xwuk4COtx/jtCpEnHZsl9aZ7HZBmEI3d6EDzXttZB619D9kKBObu5bn
ecHeBWOjnAieUixcVqZF15gCS8QelezFTRr+Tuc2qEAAbQrNJKTs1s5/soMq3mcs
NdM7jd0/D2mvQQiZv8QPp33jtb2wPlCeIpdnTPMcveZj3IABw07XxcnrFi+VFRz+
JareJ7c2R5q85cNK01BywIrgt5G4VmnYg0G4Qis/X3ift7Hh0ZQ/FmkhiY6sR5//
zyKo29P9t46PxElYf64yUQ9X0EIfCQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGmy
HZtoGvOMohCOydZWyVde6Zb9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NjJCNUZBNjcwN0IxMUYxQkZCODRDQTRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlSrMA0GCSqGSIb3DQEB
CwUAA4IBAQBOOcngt6obtLsK8b+V/PtZy+0A5VY9L7GqdPzvgu5rH5tcAM2alIeR
Q2PZGyZu4U1QV+IpHqT1J9SOiyZGPa3XK7OUQKwo6jxUTKjAnG/+oeaYbyDFH7m0
4/pZRzzJar310ip9jF2IIRq2dud/+rBMUGYsNKso7d+8OV/kWTfSDbh7Omr9o92z
cFtU8ASpmH7VCbxMnb0eySs0ZNwGkCnQ2LQcaQ/oIoc5FHqyjiuyXhHrPwJW/anP
nyyVyK+oCp0IAQdBRoxXGXjg8ePKLu+uObMFX157wxIQkgyiRkfWOvFkhl8rjZ7m
OwHeAVtYLYrEPhNbJYZiaCtzuecRKWyU
-----END CERTIFICATE-----
Generated at Wed Jul 1 02:07:55 2026 by rpki-client