Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A76DE490916E11F18A086EB7CE1D38B0.roa
File: A76DE490916E11F18A086EB7CE1D38B0.roa (raw, json)
Hash identifier: ixOwwQtUglpPY1CPjfeUESt+ewyZ6Ae6pSIWgI5jiWU=
Subject key identifier: EB:1D:D4:54:1B:1B:F5:7C:55:19:81:57:3E:32:02:F4:D4:20:F3:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DCE5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A76DE490916E11F18A086EB7CE1D38B0.roa
Signing time: Thu 06 Aug 2026 08:13:07 +0000
ROA not before: Thu 06 Aug 2026 08:13:03 +0000
ROA not after: Sun 16 Aug 2026 08:13:03 +0000
asID: 137990
IP address blocks: 154.197.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122085 (0x1dce5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 6 08:13:03 2026 GMT
Not After : Aug 16 08:13:03 2026 GMT
Subject: CN=6a744213-0cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ee:cb:9d:60:11:eb:9d:b8:f2:6c:9d:d8:57:
c7:de:4b:e8:56:4d:e5:86:f2:00:04:48:c2:7c:9e:
bf:b7:67:17:0b:68:22:54:18:25:78:e9:41:5f:16:
a4:3a:ca:ef:e3:1f:8c:00:a1:46:06:ea:03:82:f0:
2c:f3:18:c1:f5:36:76:82:7e:26:7e:8d:8e:5b:b9:
18:bc:a7:4f:ad:68:45:93:06:16:19:9d:e5:be:71:
45:80:1d:e3:8e:6d:9d:f3:a6:48:e2:d4:ca:4a:93:
c1:fd:0f:f3:c2:90:7e:f7:af:fe:c0:ec:7d:87:c9:
cf:7e:40:de:dc:20:fd:db:b2:34:ca:c9:56:0a:22:
10:7e:6f:ea:f5:8a:a1:b7:0f:53:94:c9:8f:f6:e2:
da:ce:ff:07:79:41:2d:e4:0a:4b:ec:d7:be:41:e3:
ad:4f:77:65:ff:e9:b2:c3:60:36:4e:c4:f0:43:e8:
34:63:c4:46:c0:85:fb:4c:53:df:1e:e6:c5:4b:bc:
01:00:df:2d:75:77:1b:0d:4f:df:b4:5c:48:9f:22:
32:fd:da:db:e5:9b:b5:ce:9c:91:08:62:a7:f1:63:
62:e7:11:34:b1:c3:f8:3a:c3:a3:7d:26:e3:e7:81:
80:42:71:0d:c3:e6:15:08:f5:b6:b6:d4:ff:22:44:
df:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1D:D4:54:1B:1B:F5:7C:55:19:81:57:3E:32:02:F4:D4:20:F3:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A76DE490916E11F18A086EB7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.28.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:2f:27:8b:34:e1:7e:ca:31:76:68:fc:a5:98:01:1a:13:4d:
a3:f7:bb:83:2d:c4:bf:12:bc:4f:4f:5e:ce:37:41:d2:18:07:
fb:6a:10:99:44:2f:95:1c:1a:3a:23:a9:7a:99:e1:e7:95:2e:
71:96:ee:93:bb:6b:33:c7:f7:aa:08:4d:01:95:fd:48:10:3f:
ae:c4:0d:90:32:3a:12:64:5a:5e:87:8f:35:6c:8f:da:44:8d:
fe:b0:86:2f:de:e7:03:62:8c:90:ef:43:10:2d:a6:ad:a1:f5:
43:c1:8a:15:49:cf:97:c2:bc:7f:75:bb:cf:1a:e1:af:b6:b0:
db:c0:d3:9d:0e:1b:e2:ad:f5:ce:f6:f7:de:3d:91:c8:5b:09:
93:23:84:11:43:a0:29:a1:7f:f6:15:9a:25:29:11:a0:2b:bd:
f8:55:4d:bf:8b:3a:a6:c6:74:ce:7c:2f:1f:5b:a1:0f:28:6c:
fd:b9:b8:56:65:60:4b:ce:b7:cc:30:d3:da:e7:05:68:19:e5:
fd:2c:81:6d:fa:3f:9e:1f:c9:be:4d:26:11:f1:d5:c0:da:bf:
26:88:3c:4e:b5:ad:1f:59:94:f5:53:87:a6:9d:97:44:57:10:
fb:ec:0d:d8:16:d8:b3:49:09:ed:ef:19:69:b0:19:f3:cd:c7:
14:98:7e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:58 2026 by rpki-client