Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A73B27CC560811F1A62E370ECF1D38B0.roa
File: A73B27CC560811F1A62E370ECF1D38B0.roa (raw, json)
Hash identifier: oOAySrJ2BWgauNS0pdQO4Khu+KEu3joaqzO9M6dRHyA=
Subject key identifier: 78:63:07:4A:26:2D:8E:84:1C:17:95:D3:49:FF:0F:4B:AE:79:49:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE4A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A73B27CC560811F1A62E370ECF1D38B0.roa
Signing time: Fri 22 May 2026 18:04:19 +0000
ROA not before: Fri 22 May 2026 18:04:13 +0000
ROA not after: Tue 30 Jun 2026 18:04:13 +0000
asID: 32043
IP address blocks: 154.95.6.0/23 maxlen: 24
154.95.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 11 Jun 2026 00:07:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118346 (0x1ce4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 18:04:13 2026 GMT
Not After : Jun 30 18:04:13 2026 GMT
Subject: CN=6a109aa3-45a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f1:ae:b3:d9:37:1e:77:a2:37:92:96:ad:2a:
d8:ef:3c:cf:a4:4e:8c:6d:7e:89:29:5b:94:80:ba:
18:76:1e:96:d6:d8:f8:db:c1:9a:a6:e1:7a:37:24:
07:b3:c6:c7:ae:4d:ac:6f:f1:cb:94:6b:dd:68:c6:
68:b3:27:15:a1:27:6d:db:b5:8e:6f:4b:35:97:7a:
dd:8d:68:0f:be:aa:76:0a:43:56:9c:60:8f:d0:18:
11:05:c4:3f:01:10:33:24:cf:44:af:ed:33:d9:a4:
b9:0b:cf:47:49:ec:ea:ae:7f:da:9c:9a:54:aa:d6:
08:48:05:1e:0c:4f:59:c3:8e:cd:c9:1f:19:df:37:
74:02:49:e6:65:18:be:65:ea:bd:56:f9:5d:45:e2:
96:1c:e8:1d:0d:39:83:ea:2b:84:61:58:d2:5e:42:
fe:e8:b0:18:35:44:f1:b7:20:b3:fd:59:d0:b2:61:
63:52:b5:5a:a9:cb:60:6d:2b:4d:dc:cd:b4:e5:eb:
9b:aa:43:43:25:38:51:a3:00:ad:70:6a:4e:dd:d4:
59:29:58:91:06:42:53:cc:f7:74:e3:9a:c6:4e:10:
98:99:ae:dc:73:5f:a3:58:38:f8:b8:f6:a8:95:4a:
13:3f:ee:bc:b5:d3:d5:7d:83:9e:b4:58:21:58:21:
af:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:63:07:4A:26:2D:8E:84:1C:17:95:D3:49:FF:0F:4B:AE:79:49:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A73B27CC560811F1A62E370ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.6.0-154.95.9.255
Signature Algorithm: sha256WithRSAEncryption
07:85:5d:c9:64:f9:4a:0d:20:10:e3:d9:37:0c:36:c2:ff:f6:
26:1f:fb:ca:af:9f:0b:e6:b5:03:a4:1b:fc:66:bb:2a:71:f1:
5f:a2:58:09:8e:e2:45:a6:10:49:6e:e0:f4:be:be:f3:1d:c5:
08:27:d7:d0:f4:71:9c:1c:bb:97:3c:ff:4e:ae:d2:34:c9:d0:
d5:70:36:95:b5:f4:8c:d6:b3:c1:9e:74:29:12:73:60:8a:2e:
5e:3c:47:d1:90:bf:6c:eb:e7:d2:fe:fa:7d:f9:23:3e:9a:73:
11:ab:86:53:7d:aa:9e:39:27:55:b7:dc:42:3f:1f:9f:dc:57:
c1:49:fb:6f:51:b8:da:34:43:64:4e:ab:ba:b5:05:a9:df:31:
80:ff:cf:21:94:6e:ad:1f:93:36:ab:42:b4:d7:f1:66:44:33:
af:f9:e0:c2:96:65:c3:5e:c3:ea:df:17:53:d4:71:33:7c:7c:
9f:02:3b:61:d9:88:bc:78:8d:fa:ba:e9:18:9e:a8:06:c8:e0:
5d:ee:64:06:fc:be:6d:ee:e4:44:c4:a5:58:e1:b7:75:e3:71:
4c:a4:9a:ca:b6:28:77:10:17:e5:38:aa:e4:5e:6a:ad:29:85:
6a:86:db:16:d1:7c:3d:60:bd:bc:ad:97:31:bf:7c:c3:1a:b0:
6a:aa:ce:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 08:07:49 2026 by rpki-client