Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/935A031C699B11F1B6C2660CCF1D38B0.roa
File: 935A031C699B11F1B6C2660CCF1D38B0.roa (raw, json)
Hash identifier: 9BhFAar2csffqBiRhFYaPGSAFWWk5sgOpK0RGcE3Ngo=
Subject key identifier: D8:74:C1:98:D8:1C:67:D6:50:7F:F5:62:03:83:A5:E8:B6:20:AD:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D363
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/935A031C699B11F1B6C2660CCF1D38B0.roa
Signing time: Tue 16 Jun 2026 15:53:54 +0000
ROA not before: Tue 16 Jun 2026 15:53:49 +0000
ROA not after: Thu 09 Jul 2026 15:53:49 +0000
asID: 197574
IP address blocks: 154.83.149.0/24 maxlen: 24
154.86.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119651 (0x1d363)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 15:53:49 2026 GMT
Not After : Jul 9 15:53:49 2026 GMT
Subject: CN=6a317192-d430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bd:b5:dd:fc:b6:80:24:19:7b:9d:3a:97:e7:
45:02:31:56:aa:7c:60:e7:0a:63:22:b1:24:f9:4c:
b0:da:d3:e5:9e:58:2c:15:cd:18:f8:c6:f9:5c:13:
06:22:85:0d:4b:01:b6:bc:d9:53:24:51:cc:de:29:
d9:1e:64:77:19:2a:5c:26:a5:66:bb:df:39:2b:97:
8d:e2:de:3d:10:3a:61:03:27:ff:71:1a:c1:78:26:
14:99:c7:01:49:23:a0:f5:1a:53:33:22:d0:de:75:
3d:a2:ed:3e:ec:15:bc:f0:e5:cf:83:ac:3a:80:a6:
45:0d:91:eb:49:89:7e:1d:f8:30:13:ff:18:ab:2e:
bd:bf:3b:78:69:8f:e0:ba:45:bc:84:56:dd:59:05:
d1:77:fb:98:04:f9:fc:df:f4:db:a5:f9:ea:d1:7c:
73:94:26:15:8f:ac:03:ac:72:87:f3:91:dc:94:39:
47:aa:1d:c1:82:3a:26:4a:5a:9b:af:e1:d0:60:a0:
61:d2:16:25:4c:a3:d0:d7:12:32:7e:3c:c0:4f:a3:
2f:c3:5a:29:32:b2:8d:8a:7e:7d:63:9c:52:43:e7:
db:f0:de:5f:a3:5f:1f:9c:f8:a4:99:1b:d6:84:fa:
1b:95:36:49:ff:c0:c1:8e:25:96:6c:d9:73:3a:d3:
24:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:74:C1:98:D8:1C:67:D6:50:7F:F5:62:03:83:A5:E8:B6:20:AD:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/935A031C699B11F1B6C2660CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.149.0/24
154.86.119.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:68:6a:5e:32:ff:c6:44:99:37:f1:b9:78:b8:40:3c:2c:bb:
a3:73:9d:79:7e:c0:13:9d:bc:ba:de:f4:01:d8:71:43:6e:98:
95:62:49:e0:27:ef:9d:eb:32:5f:ae:46:da:36:3f:1f:02:65:
3a:74:a0:1d:d9:86:7d:40:73:89:cd:7d:ca:92:e0:cd:74:5c:
e9:60:67:f1:5a:2c:2e:d2:f4:69:97:16:8f:48:75:c5:32:01:
83:1d:d3:5f:65:c5:a5:5f:4b:9f:42:e8:2b:31:38:7d:43:92:
e8:74:78:a7:26:9b:e1:ce:09:98:a6:d1:21:8e:be:7f:9c:18:
ce:7b:37:7c:ee:04:17:f3:c3:8a:84:43:2d:8f:3d:47:ba:04:
03:77:85:15:ed:83:12:b8:0d:57:21:d1:95:f6:0a:1b:20:3c:
00:d4:02:41:9e:df:c7:f0:2e:02:c6:9d:57:b1:c7:c5:46:a3:
0f:0f:65:5a:fb:f7:c5:74:d6:d3:f3:33:87:8f:83:b6:de:91:
ff:71:79:a4:e1:89:64:27:09:99:2d:eb:31:f9:1e:0a:dd:3d:
c6:0c:75:69:d0:7c:b9:d0:13:b1:d8:47:40:68:52:0c:3b:f9:
fc:ff:2c:67:0b:78:17:09:72:cc:24:82:63:9a:79:69:42:2a:
ea:19:ce:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:53 2026 by rpki-client