Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A739ACC66E3611F186BB6CD3CE1D38B0.roa
File: A739ACC66E3611F186BB6CD3CE1D38B0.roa (raw, json)
Hash identifier: Pd+IUMyAZx4p5+tOgfSbbSNmS1DXnwii330DouRKjsk=
Subject key identifier: 53:13:75:34:09:B2:68:3C:96:2F:BE:25:13:0C:36:7A:F0:6E:21:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D453
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A739ACC66E3611F186BB6CD3CE1D38B0.roa
Signing time: Mon 22 Jun 2026 12:34:04 +0000
ROA not before: Mon 22 Jun 2026 12:33:59 +0000
ROA not after: Fri 31 Jul 2026 12:33:59 +0000
asID: 14315
IP address blocks: 154.194.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119891 (0x1d453)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 22 12:33:59 2026 GMT
Not After : Jul 31 12:33:59 2026 GMT
Subject: CN=6a392bbc-06c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:37:2c:ea:a3:12:b2:13:51:32:85:4f:39:
94:5f:44:0f:9b:5b:5a:f0:ef:9e:b7:10:3b:7b:5f:
7b:c9:86:ef:6a:fd:44:d7:bb:c2:db:23:5f:d0:ba:
be:bb:1b:11:75:b6:64:c7:75:08:06:13:cc:9b:9b:
78:2a:70:35:aa:3b:f7:eb:11:71:65:8f:f6:a4:61:
46:ac:5a:6f:ea:8c:0b:fb:bb:eb:3a:d9:f5:fa:68:
4f:a0:a2:67:88:cd:4e:67:85:3f:2d:5c:11:48:e5:
f5:01:26:1d:cb:ba:71:9c:28:31:ee:ed:9b:a0:a9:
6e:09:44:f4:c4:11:4f:d2:bd:7f:b5:6b:af:bc:4a:
7c:c6:2b:67:b0:7f:7b:f7:f5:14:15:66:b1:a9:11:
d2:4c:4a:bf:a7:7d:2b:bc:3c:6a:b8:cf:a3:8f:89:
20:95:3d:76:1d:7c:a9:98:c6:85:51:33:0a:47:93:
48:a8:ad:7a:fd:d6:0c:32:c9:70:8f:99:31:fc:f2:
34:bb:ab:c3:5c:f4:7e:01:7a:fa:80:e3:e5:72:e3:
4f:86:da:11:be:c4:67:3b:39:84:33:a2:a2:48:51:
6c:14:fc:7a:a9:3e:b2:cc:6b:6a:55:22:20:f3:87:
66:61:8c:40:70:a2:8e:64:fa:1e:d1:82:4a:5d:19:
05:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:13:75:34:09:B2:68:3C:96:2F:BE:25:13:0C:36:7A:F0:6E:21:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A739ACC66E3611F186BB6CD3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.50.0/24
Signature Algorithm: sha256WithRSAEncryption
75:a3:3a:1e:1b:cd:a4:e4:67:05:67:5f:2e:6e:1b:f7:38:c8:
ad:36:10:34:83:63:49:a4:4b:c6:3a:eb:b0:2a:75:f4:4b:78:
43:5e:1a:7a:8f:b0:ba:b3:1b:02:e3:44:b5:e8:07:3a:1e:c1:
d2:4a:6e:df:e6:54:7a:ff:d6:94:e1:d7:3b:92:01:d9:dd:e8:
38:b0:99:73:bb:26:49:98:16:f8:ec:37:67:14:0d:b4:fe:74:
55:80:ec:a9:1a:44:1c:ca:a0:02:79:1f:cb:c1:63:f2:59:45:
a9:0d:69:61:51:46:2f:5f:26:28:23:10:45:66:1d:d7:2b:82:
44:b1:83:db:9e:36:a5:2e:92:54:2e:aa:10:1b:07:4d:fe:8a:
f1:83:03:e0:85:f0:bb:16:36:30:88:d0:03:3c:33:22:36:1a:
5e:5a:57:f0:1d:d9:51:b9:57:b7:cb:a0:38:a4:67:81:64:ba:
7a:88:4d:b3:41:19:9d:33:39:93:0e:08:dd:75:00:78:ad:79:
30:48:8f:41:aa:b1:8e:07:75:27:f8:92:22:a1:62:6d:bd:5b:
47:66:3e:e9:e3:4a:11:3e:6f:d9:71:22:b9:e0:08:85:b8:9a:
d6:83:ed:36:98:27:bb:9f:a8:71:64:a3:dc:92:3f:ca:28:76:
11:22:2d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:15 2026 by rpki-client