Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F2C21AE6C8711F1AA48A1CFCE1D38B0.roa
File: 9F2C21AE6C8711F1AA48A1CFCE1D38B0.roa (raw, json)
Hash identifier: dI2qy7f+9GUR+g6t4HG+VK0HWCYiqvJYRY4IBNdkoXw=
Subject key identifier: E1:08:57:D3:2B:5C:A7:6B:69:31:52:AF:F6:69:D1:F1:DB:27:86:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D419
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F2C21AE6C8711F1AA48A1CFCE1D38B0.roa
Signing time: Sat 20 Jun 2026 09:08:37 +0000
ROA not before: Sat 20 Jun 2026 09:08:32 +0000
ROA not after: Mon 27 Jul 2026 09:08:32 +0000
asID: 138915
IP address blocks: 154.206.65.0/24 maxlen: 24
154.206.66.0/24 maxlen: 24
154.206.68.0/23 maxlen: 24
154.206.68.0/24 maxlen: 24
154.206.69.0/24 maxlen: 24
154.206.70.0/23 maxlen: 24
154.206.70.0/24 maxlen: 24
154.206.71.0/24 maxlen: 24
154.206.96.0/23 maxlen: 24
154.206.98.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119833 (0x1d419)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 20 09:08:32 2026 GMT
Not After : Jul 27 09:08:32 2026 GMT
Subject: CN=6a365895-163a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:95:cc:57:a2:49:f6:e8:2e:78:fc:d1:81:3b:
74:87:c6:68:fb:d3:e5:51:01:3e:49:96:3a:8a:ea:
a4:36:7d:12:e8:da:15:26:14:4e:b8:e5:06:b6:4d:
ec:5b:ea:59:7f:9e:8d:04:da:99:9f:bf:5f:8c:fd:
c9:f6:02:b0:f7:4c:1f:78:79:23:a1:77:6b:d0:8e:
7d:d1:0b:d8:cc:a3:ba:a1:3e:5d:bc:4a:36:d7:e7:
10:43:f2:a2:48:f3:ad:3a:81:cf:5e:49:30:b9:11:
99:2a:b7:b5:61:f8:3e:f1:90:d2:2e:ac:50:ae:ea:
47:54:29:98:78:99:e1:7b:95:42:36:22:d7:c4:4c:
9f:12:c9:7a:08:b1:e9:4c:85:31:1d:dd:d1:f9:98:
03:2a:bd:ad:1e:97:f7:a3:ab:b2:07:ff:26:f9:b7:
d1:3b:fd:a6:f3:5e:99:fa:c5:0c:4e:b1:49:b2:07:
52:55:37:6d:0f:7e:a4:ef:9d:c0:45:ab:2c:97:58:
6d:6a:0d:6b:20:40:31:c8:16:9c:87:66:82:c1:87:
b2:e1:38:e2:38:71:eb:15:e8:49:d2:bc:59:f0:b7:
d0:b3:42:b0:70:c3:c9:ac:bc:b1:07:c5:cf:d1:20:
8f:18:2b:f4:47:d2:99:43:22:a7:8a:2e:76:b8:bd:
89:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:08:57:D3:2B:5C:A7:6B:69:31:52:AF:F6:69:D1:F1:DB:27:86:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F2C21AE6C8711F1AA48A1CFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.65.0-154.206.66.255
154.206.68.0/22
154.206.96.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:4d:d7:83:e7:8d:80:d7:8c:39:c2:70:ed:a3:03:12:30:8e:
64:96:0f:4f:30:67:0c:f4:56:11:e3:d6:fe:a4:6f:4c:d4:ca:
6f:e3:13:e2:91:2d:04:e2:c2:5c:75:5c:63:4f:2b:2d:a4:31:
10:4a:78:e6:3b:4b:23:ff:86:01:55:ae:8e:9b:02:1a:b8:1a:
c6:f1:51:a5:7d:af:3c:56:1e:38:83:ec:42:e1:67:c2:9c:5f:
7b:e8:f9:a7:f0:05:a2:2a:3f:ce:13:2a:f1:a1:1d:3d:3d:8b:
a1:a7:9d:88:bd:af:06:39:5a:0d:60:27:4b:91:36:e7:e9:6a:
87:8f:d6:4e:20:4b:88:8d:52:69:a6:47:32:14:48:ef:cf:93:
0e:50:c4:2b:97:93:58:21:95:c9:d4:95:cf:e1:9c:f1:5d:b6:
f7:f7:f8:33:ca:ab:2b:a9:6a:f1:16:3c:9f:6f:35:2a:2f:3d:
1b:1a:f2:11:69:a8:90:45:5b:18:e1:e2:a9:41:dc:f7:b7:84:
fe:4f:7a:11:a7:66:41:ab:fa:2b:90:67:51:e2:0b:90:20:33:
8a:bf:9a:35:49:d7:01:50:d9:9d:29:26:e8:d0:8d:e9:79:f6:
ce:ca:fb:08:54:f1:fa:13:12:85:cc:f4:33:c1:1b:50:7f:03:
ba:19:2b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:01 2026 by rpki-client