Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A50A9A9C79D411F189BFC5F6CE1D38B0.roa
File: A50A9A9C79D411F189BFC5F6CE1D38B0.roa (raw, json)
Hash identifier: 9fL5LSN2ZdBkqNY5PlaqJ4CmC/lav3VKMGN+YZ2kHtc=
Subject key identifier: 1E:46:75:04:A7:83:95:4F:2B:75:C7:C6:FB:B4:33:BF:AA:67:7D:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D757
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A50A9A9C79D411F189BFC5F6CE1D38B0.roa
Signing time: Tue 07 Jul 2026 07:22:44 +0000
ROA not before: Tue 07 Jul 2026 07:22:39 +0000
ROA not after: Wed 05 Aug 2026 07:22:39 +0000
asID: 64126
IP address blocks: 154.88.128.0/17 maxlen: 24
154.88.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Jul 2026 00:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120663 (0x1d757)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 07:22:39 2026 GMT
Not After : Aug 5 07:22:39 2026 GMT
Subject: CN=6a4ca944-f2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2e:74:4d:ce:fb:4c:1f:94:e0:e6:7a:ca:44:
1d:b0:5f:53:60:4a:f3:80:48:4e:c7:96:df:ab:bc:
06:0e:cc:37:93:98:3f:03:7e:2b:d0:b1:87:5d:af:
73:aa:b6:3c:93:0d:01:cc:81:05:bd:ea:63:31:d2:
30:1a:d7:fa:5f:46:a5:be:79:c3:d2:34:51:66:7c:
e2:d7:eb:c1:3a:4d:7e:e5:86:1b:83:4d:6d:af:d9:
56:05:ed:d5:1e:ae:cd:01:a8:77:8b:f7:04:a3:5e:
c6:7d:26:09:e6:ad:e2:ab:0f:a2:6d:24:49:b5:28:
a5:f4:cd:19:fe:06:ef:af:15:a8:5a:01:92:11:07:
9c:e8:64:c3:66:b1:a2:77:1e:07:44:94:36:5e:83:
d8:3e:85:21:9f:a0:ba:18:fc:3d:1f:47:b6:07:3b:
db:ef:2a:20:92:05:a7:38:c4:e2:12:40:e1:3d:ae:
f1:b3:15:ec:ec:52:29:12:0d:2d:34:63:00:be:93:
b5:2f:93:ed:c3:70:24:5f:cd:7a:dd:8b:c3:d3:c0:
1c:b6:4a:9c:5b:52:55:89:d2:b4:bf:72:1a:cf:27:
af:19:bf:12:2e:dc:06:2b:b3:e7:c8:85:e1:d6:9c:
53:ca:86:a4:5f:d5:36:67:aa:71:80:c1:bd:3a:b3:
56:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:46:75:04:A7:83:95:4F:2B:75:C7:C6:FB:B4:33:BF:AA:67:7D:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A50A9A9C79D411F189BFC5F6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.128.0/17
Signature Algorithm: sha256WithRSAEncryption
13:7d:31:d0:52:a2:00:3e:bc:ed:01:b7:55:ec:0e:ac:fc:fa:
21:6e:bb:2f:25:d8:21:33:c8:85:6f:41:5b:d8:f9:5d:a2:32:
70:6d:4a:ee:c1:2b:89:0f:63:8f:de:ac:af:b7:0f:ab:a1:5a:
5a:46:47:3a:c1:f5:53:6c:12:52:6d:fe:69:0d:79:5f:f0:0e:
64:3f:53:f2:65:67:44:82:2f:5b:ed:dc:b9:d5:2c:45:b9:8e:
f1:03:e9:d5:4f:5e:54:49:65:53:22:c4:8b:84:ec:1e:b0:75:
2c:33:0f:7f:62:2a:80:23:75:3b:82:12:77:60:86:9f:2b:81:
a6:37:fb:18:82:59:12:ca:36:8b:49:69:ec:7b:4c:19:e5:19:
fb:37:58:f9:be:bb:b0:63:df:01:8b:21:7e:1c:99:e1:dd:38:
0d:b7:6c:d8:b5:d4:5c:e3:74:89:5d:06:08:8d:1e:94:a9:18:
0e:b8:d2:18:4e:71:80:48:b1:28:57:39:d4:6d:95:5d:8c:bb:
59:ca:f8:3d:eb:a1:c5:8c:79:b4:1c:cb:47:2a:d8:60:5d:e4:
f4:2e:af:84:b2:fa:98:79:e1:41:03:4c:32:aa:88:23:58:e0:
a6:fb:6d:80:b4:57:bc:a6:72:a9:37:87:cb:2d:5e:98:21:f9:
2e:da:26:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:54:18 2026 by rpki-client