Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/944550C269AC11F1B8C27CF0CE1D38B0.roa
File: 944550C269AC11F1B8C27CF0CE1D38B0.roa (raw, json)
Hash identifier: juN5XJED7wxngPdkIjK6iaE60qsQbdNnEMCuYYEJMy0=
Subject key identifier: 80:EF:27:5B:AF:B0:11:57:93:E0:F6:92:0A:A8:3F:67:38:20:1E:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D379
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/944550C269AC11F1B8C27CF0CE1D38B0.roa
Signing time: Tue 16 Jun 2026 17:55:37 +0000
ROA not before: Tue 16 Jun 2026 17:55:33 +0000
ROA not after: Wed 22 Jul 2026 17:55:33 +0000
asID: 395886
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119673 (0x1d379)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 17:55:33 2026 GMT
Not After : Jul 22 17:55:33 2026 GMT
Subject: CN=6a318e19-5cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:16:f3:0f:b9:d4:99:54:12:8c:7b:c3:7b:80:
10:bb:cf:66:64:2e:ee:94:98:6f:88:d6:fc:f8:24:
cc:07:e0:3c:d6:9c:55:87:dc:97:bc:e4:03:ab:38:
ae:3d:8d:c8:19:62:94:d0:8d:7c:55:6f:2a:e5:8f:
b5:22:0e:17:a6:ef:38:36:5f:5f:c1:e4:00:b0:37:
b1:e6:99:09:2f:0d:1d:27:39:a2:62:4f:3c:b3:31:
df:0d:29:04:c0:f1:8f:0c:ce:6e:0d:b5:de:ef:34:
96:cc:97:fa:c2:14:90:b5:5d:ad:ef:26:bb:43:1e:
87:4d:84:c8:cb:c2:8d:2b:3b:4e:74:2c:d9:dd:0f:
0b:c0:da:23:78:65:ce:5b:3f:31:15:31:9e:78:eb:
68:b0:15:08:89:db:7d:40:2c:43:03:9b:af:99:4c:
e4:8e:a9:49:2f:e8:3d:aa:5d:c7:cc:aa:6c:8c:e4:
72:b7:e0:1c:5a:d9:cf:28:9f:4c:56:40:ab:92:ad:
f7:81:59:f8:fe:cf:e4:cd:13:96:ae:e1:0c:3a:a8:
95:6c:91:43:71:e8:71:53:b6:8b:42:e0:83:ab:c0:
53:bd:69:1b:9d:52:34:b4:a6:bf:d4:d0:af:27:70:
f7:79:8e:2e:24:00:9a:c0:e4:10:56:8e:57:62:8b:
bd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EF:27:5B:AF:B0:11:57:93:E0:F6:92:0A:A8:3F:67:38:20:1E:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/944550C269AC11F1B8C27CF0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
2a:86:33:d7:81:9e:51:c8:d9:b2:22:94:2a:a6:df:46:7d:40:
4e:4b:e3:a4:75:b0:41:d8:fc:f6:54:6c:98:72:ee:d1:e4:10:
d4:a6:6c:0d:75:15:06:86:26:a7:b1:b5:05:a8:4d:c7:f9:59:
66:8a:bc:b8:8d:38:37:fa:a7:5f:7e:ee:e2:87:00:9f:8c:4f:
9f:47:2a:8c:b6:86:67:01:34:a7:a5:36:32:8e:43:e1:8d:c1:
fc:32:38:47:07:05:96:e3:5f:01:e1:04:12:a0:57:54:1c:2a:
a7:bc:ee:f0:0c:71:f3:81:e9:b7:83:03:87:43:38:66:1b:fb:
37:5e:57:2d:dc:61:a0:6d:16:8e:8c:c5:09:11:5d:d6:6f:80:
40:42:4b:d8:73:63:34:9e:f0:67:c8:18:7c:26:24:11:d9:2e:
c1:54:91:d6:23:89:9c:c8:24:e9:3e:f8:d7:41:9d:f3:9f:31:
05:7b:97:ef:07:73:38:8f:06:2b:73:d7:b8:9f:a2:c0:b2:d2:
a2:3f:78:6e:54:d1:9e:9d:1c:84:9e:41:ea:e1:d2:bc:17:19:
4e:61:a8:e0:48:22:fe:8f:73:41:b8:d9:93:0a:99:05:7f:f4:
d7:0b:0e:28:85:57:8a:35:a7:32:b4:31:55:dc:24:5b:63:4c:
64:0e:42:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 20:01:58 2026 by rpki-client