Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97C68F72502F11F1A399ECF9CE1D38B0.roa
File: 97C68F72502F11F1A399ECF9CE1D38B0.roa (raw, json)
Hash identifier: SDOgqVo4z3tSXDBuXosh4OVdyqnxNam1zMefxEjaQX8=
Subject key identifier: 81:17:70:B2:0E:7D:EF:FF:DA:73:E7:F0:FF:22:91:9F:03:62:86:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CBAC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97C68F72502F11F1A399ECF9CE1D38B0.roa
Signing time: Fri 15 May 2026 07:27:57 +0000
ROA not before: Fri 15 May 2026 07:27:51 +0000
ROA not after: Mon 22 Jun 2026 07:27:51 +0000
asID: 17497
IP address blocks: 154.196.156.0/22 maxlen: 24
154.196.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117676 (0x1cbac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 07:27:51 2026 GMT
Not After : Jun 22 07:27:51 2026 GMT
Subject: CN=6a06cafd-4814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c6:1e:e3:e4:8d:6e:6c:30:25:c7:78:21:fa:
51:ee:d2:9f:8b:48:9c:26:51:4d:0f:6f:8c:9a:33:
5b:48:09:4b:94:04:16:b9:5b:27:e2:9f:fd:7f:a0:
5c:12:b3:6f:7b:1d:25:b3:be:e3:29:8f:92:3b:19:
dd:aa:69:4c:a8:77:6f:d7:fa:15:3b:1e:13:18:1e:
a1:04:9e:cf:36:04:22:0e:94:de:6f:81:89:46:b2:
06:e1:1a:d2:da:26:ec:61:33:54:7d:c4:ba:5d:bc:
57:0f:f1:60:93:22:b1:fb:b9:d3:33:fd:9a:14:4d:
54:6f:80:63:a4:ec:bc:fc:c4:b7:22:41:8c:84:e0:
c3:34:c3:68:08:b1:93:39:93:d5:1f:9b:19:71:ec:
bd:80:ce:bb:70:00:81:01:99:24:72:a3:85:38:7b:
34:5a:0d:db:59:ff:75:35:62:6f:48:25:ce:ee:c2:
e9:74:f8:f6:33:55:04:64:16:66:de:91:64:99:01:
96:ef:20:4c:62:21:c1:63:30:f2:7a:e9:0f:04:bd:
0e:84:9d:7d:80:4b:2d:fb:d8:36:10:62:ac:47:02:
2a:dc:6b:b2:e4:47:79:c6:17:2d:a6:00:71:1b:62:
ee:ea:e0:76:5b:47:a2:01:aa:b0:3b:17:9c:1b:86:
3b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:17:70:B2:0E:7D:EF:FF:DA:73:E7:F0:FF:22:91:9F:03:62:86:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97C68F72502F11F1A399ECF9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.156.0/22
154.196.172.0/22
Signature Algorithm: sha256WithRSAEncryption
94:8b:91:36:61:22:76:fa:09:62:2c:29:e9:76:16:0b:a3:43:
ce:f8:47:26:de:0e:a0:61:6b:d6:cd:37:20:e3:cc:a5:0e:f4:
6f:2e:89:35:c4:f3:d9:eb:82:29:75:ca:85:cd:f9:27:af:a8:
a5:0b:5f:ac:b5:59:98:02:79:e3:14:13:a0:ea:36:2d:7e:72:
9a:86:c4:44:30:98:d9:f9:32:5c:19:fa:d0:4a:ab:74:71:8e:
93:47:f1:41:75:46:0f:fd:ea:ff:82:80:f1:e6:a0:cb:a7:24:
67:19:2f:09:06:a2:c5:1b:9f:f0:3b:c0:6d:b1:cb:81:dc:f3:
b3:48:a9:2f:6b:fd:12:ba:c8:d5:5f:69:bb:bb:72:bc:c3:fb:
23:e4:76:d0:7e:9e:58:74:51:45:bc:f9:74:be:5a:8b:28:2b:
34:27:f7:c7:62:cd:ba:f9:41:7a:9c:a9:31:a9:41:23:cf:a2:
02:8a:59:46:be:a7:16:47:90:68:31:87:16:19:43:17:cc:51:
bf:66:d1:65:a0:e1:45:86:01:ea:3e:46:0a:ef:43:cd:48:3b:
53:66:76:2a:5e:18:69:21:b0:ce:61:58:01:de:9d:b4:e2:32:
f5:a4:54:2a:24:7d:a1:ba:3b:70:79:7c:a3:e4:62:6d:bf:fc:
7e:98:2f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 11:55:26 2026 by rpki-client