Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95600C4E8E4C11F1968325B9CE1D38B0.roa
File: 95600C4E8E4C11F1968325B9CE1D38B0.roa (raw, json)
Hash identifier: G5nBB+iYP01hautBTu6I/A0EhoJ9CTs5h5zdHdczhr8=
Subject key identifier: 90:C0:44:86:4D:30:DB:BA:91:51:19:38:28:8E:61:9A:E7:25:AD:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC4B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95600C4E8E4C11F1968325B9CE1D38B0.roa
Signing time: Sun 02 Aug 2026 08:31:40 +0000
ROA not before: Sun 02 Aug 2026 08:31:36 +0000
ROA not after: Wed 16 Sep 2026 08:31:36 +0000
asID: 401701
IP address blocks: 154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Aug 2026 00:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121931 (0x1dc4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 08:31:36 2026 GMT
Not After : Sep 16 08:31:36 2026 GMT
Subject: CN=6a6f006c-90b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:72:8d:ba:37:0b:1a:b3:ec:aa:65:2e:1c:a6:
01:5c:52:9a:5d:26:ea:a6:48:03:c7:b4:2e:b6:72:
0c:ec:28:79:dc:cd:fa:ae:9d:91:06:de:79:7e:42:
f5:2e:7d:fc:0b:e1:26:80:f5:f4:8c:3a:df:e0:da:
32:78:1f:b0:51:06:c0:3b:e8:4f:9a:1f:76:61:c2:
69:7f:d5:ad:54:ac:00:ce:d8:45:17:c4:44:e2:c0:
35:41:08:4c:9b:6f:e4:f8:da:7b:fb:8c:8f:df:fe:
86:43:1f:41:bc:53:da:0c:58:e5:57:7c:2a:b6:07:
d1:f7:ac:05:14:0a:5b:7b:fd:50:68:51:3e:3b:c8:
de:d0:d1:03:6a:86:32:e9:d2:eb:08:49:5b:b9:84:
a9:cf:18:ff:6d:b4:a6:ee:b4:26:9b:ae:55:f1:b8:
01:fb:12:89:b5:88:51:d7:21:76:85:8c:db:e1:3f:
30:e8:ec:0d:e9:4e:2f:65:17:62:c6:a5:7a:16:45:
51:ea:43:a3:a6:cb:56:e3:5e:5a:ad:70:4f:8e:51:
91:17:47:38:0c:a3:63:a9:1b:48:27:a4:9b:11:81:
97:1a:1f:51:57:34:57:53:c8:72:97:77:88:52:68:
f2:db:49:c2:27:b9:a1:a3:d7:ca:31:88:51:75:f2:
8f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C0:44:86:4D:30:DB:BA:91:51:19:38:28:8E:61:9A:E7:25:AD:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95600C4E8E4C11F1968325B9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
7c:b1:c3:a3:66:39:2a:81:94:24:fc:fd:ab:b2:3f:f1:ae:d4:
a1:6b:70:b0:18:e6:90:83:e6:71:a6:90:e2:36:d8:bf:c0:b9:
09:4f:b6:a9:38:36:01:e2:1b:e7:0c:08:00:de:57:e5:96:96:
f8:52:df:55:f1:26:6a:d9:95:eb:57:e6:d8:92:ca:a3:f6:a2:
00:55:23:44:42:84:ff:e3:96:4c:22:a0:41:dd:38:1b:6e:fc:
46:8b:27:07:8b:04:c6:40:6f:99:ae:b3:22:8a:3b:25:bf:b3:
8d:ee:50:fd:80:1f:ec:53:ff:57:93:7a:d0:38:81:4c:40:34:
d1:b8:fd:5b:0b:99:c7:94:b2:8f:cc:e0:3e:23:fc:0c:3e:7c:
e3:f8:23:fd:22:69:36:a4:f9:04:29:56:f7:a2:90:a9:67:99:
c9:ac:e4:ae:70:9d:0b:f2:cd:ce:5d:08:40:73:99:b2:c8:a5:
3a:13:d8:65:79:36:e7:c5:f6:5c:c4:bd:c8:6d:4e:a1:64:b7:
ee:7d:de:72:44:49:a8:08:ed:ed:93:1a:2e:01:0f:21:8c:80:
b9:5d:79:51:fc:fb:4e:24:54:e2:7e:df:bb:3b:95:ec:ba:ff:
5f:e3:d7:4f:c0:95:f8:c4:c1:3c:2b:7c:1d:e8:c5:6f:3f:84:
e4:c9:56:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 18:07:00 2026 by rpki-client