Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/974BB10668B411F1A75DD50FCF1D38B0.roa
File: 974BB10668B411F1A75DD50FCF1D38B0.roa (raw, json)
Hash identifier: 2cyqRvsECVWmjI/hkG05z256RA/l2Xmr4XcdzZYXHXI=
Subject key identifier: 84:F5:39:17:20:C6:E1:A0:B8:A2:46:33:92:A0:A4:4E:44:84:E6:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D2BD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/974BB10668B411F1A75DD50FCF1D38B0.roa
Signing time: Mon 15 Jun 2026 12:20:27 +0000
ROA not before: Mon 15 Jun 2026 12:20:21 +0000
ROA not after: Fri 10 Jul 2026 12:20:21 +0000
asID: 213169
IP address blocks: 154.83.91.0/24 maxlen: 24
154.83.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119485 (0x1d2bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 15 12:20:21 2026 GMT
Not After : Jul 10 12:20:21 2026 GMT
Subject: CN=6a2fee0b-d983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b7:4b:82:3b:21:c4:a2:3d:08:ed:cd:82:b9:
58:9e:cd:cf:ab:89:48:07:1d:9f:7b:da:ef:77:00:
68:72:35:6b:86:cd:0f:95:87:84:8d:08:b8:5b:73:
f0:3e:f0:fa:92:eb:a6:84:86:a3:b6:58:30:dc:1c:
89:1b:1f:31:21:6f:c7:05:84:6f:de:41:f4:05:60:
30:9e:39:10:68:ea:c1:33:a4:40:fc:72:b2:ec:88:
8b:aa:d0:10:9b:a7:7d:36:3d:20:49:99:bd:35:11:
51:8e:f8:4f:c4:8b:13:62:3d:9e:96:c0:33:ec:18:
46:b9:94:9b:2d:00:2f:11:5a:2d:bc:87:fb:ab:a6:
cb:b0:89:8e:74:fb:64:c5:d4:b2:02:cc:96:41:37:
35:e2:a5:3f:f3:15:93:d7:e4:9a:d5:50:63:88:7a:
99:f4:2a:a4:84:77:15:c0:e0:2a:c3:d4:55:c5:9c:
4b:09:e3:37:9c:8a:cd:8e:52:e9:06:93:ff:bf:9e:
ea:1b:52:10:68:78:5e:71:f2:3b:fe:ea:70:ac:76:
7d:cd:9c:2b:06:e5:32:4f:56:8e:d5:92:60:a1:d0:
6b:cf:d8:9b:eb:30:19:ab:20:38:36:63:f5:3e:a4:
13:49:34:4a:18:0b:e7:48:03:f2:86:29:60:d5:a5:
92:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F5:39:17:20:C6:E1:A0:B8:A2:46:33:92:A0:A4:4E:44:84:E6:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/974BB10668B411F1A75DD50FCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.91.0-154.83.95.255
Signature Algorithm: sha256WithRSAEncryption
45:23:c0:dc:03:b2:2a:4f:0d:71:ce:33:9a:6b:cd:85:7e:06:
6c:1a:53:09:7d:11:26:cb:cd:7c:5c:c4:42:87:cb:03:e8:ff:
67:69:46:7b:1d:51:37:5f:15:90:92:f2:b1:db:06:8f:ff:c6:
f0:93:5e:6f:5d:44:0b:73:64:7b:ec:a3:95:53:1d:a9:09:9f:
bd:04:ab:7b:63:0a:a9:f5:0c:18:50:f2:95:64:f3:96:4f:76:
00:42:8b:2f:22:c3:10:97:cc:78:6b:52:88:14:f4:a0:60:06:
45:2c:77:4e:54:a3:8a:7c:31:e8:a6:5c:e2:d4:c7:69:f5:5e:
39:f8:fc:98:28:1e:ac:0a:57:9c:03:31:a5:fd:27:90:89:31:
d3:da:e6:0c:5e:b1:ea:65:b7:69:3e:5b:97:62:b4:12:7e:93:
da:da:17:95:fb:d9:0c:68:92:df:52:4e:09:78:f9:31:38:04:
20:1d:c2:01:ef:f0:31:2a:3a:a5:35:9b:83:62:c1:5e:55:45:
5d:5d:2c:58:8e:57:25:b7:41:2f:8e:45:75:e0:30:c0:7b:ac:
d8:ae:c0:41:53:92:89:20:ad:e0:b3:f5:70:fe:32:4d:c2:82:
23:98:b6:c6:a9:d8:3f:21:96:83:77:99:fc:28:7f:9c:15:4d:
32:47:60:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:54:56 2026 by rpki-client