Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8726E10492511F1807A88ABCE1D38B0.roa
File: A8726E10492511F1807A88ABCE1D38B0.roa (raw, json)
Hash identifier: YuZkHnyjsDxWAIGS8NJj6z5jRCJTB0eEJzS4KucRRfw=
Subject key identifier: 25:7B:AD:F4:05:4A:67:1B:B3:03:54:A7:82:11:FB:D2:41:5E:FD:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C98B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8726E10492511F1807A88ABCE1D38B0.roa
Signing time: Wed 06 May 2026 08:29:12 +0000
ROA not before: Wed 06 May 2026 08:29:07 +0000
ROA not after: Mon 08 Jun 2026 08:29:07 +0000
asID: 151347
IP address blocks: 154.84.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117131 (0x1c98b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 08:29:07 2026 GMT
Not After : Jun 8 08:29:07 2026 GMT
Subject: CN=69fafbd8-6524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cd:35:91:35:95:a3:54:3c:c8:06:e5:f7:92:
c1:cd:95:f0:7d:4e:c2:1c:eb:c6:88:8d:56:a6:07:
55:0a:31:32:31:2a:3c:60:05:80:f4:b4:bd:1b:38:
2e:67:80:71:db:f1:4a:0f:0e:f8:59:54:be:6f:3b:
0e:29:77:b8:5d:c4:e7:53:8e:f9:44:3e:76:ea:0b:
81:d4:64:d8:62:80:dc:2c:c4:d8:48:64:b9:a8:28:
54:ce:35:f7:39:a0:74:1d:d7:40:df:e3:01:67:95:
2d:f5:15:25:9a:21:c9:2f:19:18:80:44:f2:9f:de:
23:fc:38:a3:b8:79:7f:0f:37:a3:fe:29:e7:cd:ff:
44:f5:f9:88:1e:c7:e8:f8:ce:75:7e:b5:c1:80:f9:
88:eb:fd:5d:95:c4:be:9d:ea:c7:89:a9:36:de:65:
70:40:65:2d:04:15:a6:65:6b:85:e9:10:29:da:62:
63:c9:a0:9c:ab:4d:2d:ea:3e:93:f6:fa:7d:ec:7b:
d6:1f:87:bf:44:87:4a:02:d4:d1:21:26:62:7a:95:
75:74:45:07:f1:af:e2:63:54:b1:56:11:d2:72:5c:
17:61:b4:a4:69:5f:32:9d:ae:ee:f5:18:9e:5c:c8:
fd:b7:59:3e:9a:4e:c4:d7:c6:21:13:fe:9c:a0:8d:
84:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7B:AD:F4:05:4A:67:1B:B3:03:54:A7:82:11:FB:D2:41:5E:FD:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8726E10492511F1807A88ABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.192.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:1f:38:d1:46:bf:b6:ba:c5:95:f2:12:d2:f7:2c:69:d0:d7:
25:36:2a:10:2e:f5:fd:0e:a6:81:0d:21:51:e8:f6:eb:5d:86:
83:3d:7f:98:94:02:07:dc:52:c7:9f:21:14:0e:55:72:1a:66:
bf:6e:2d:d8:f1:77:f9:58:ce:3b:58:14:3e:cc:77:54:63:2c:
5a:ae:0c:71:50:db:18:d1:cc:87:57:7b:37:44:1e:dc:0d:df:
6d:23:84:5a:5e:3e:4c:03:46:7b:40:b1:1b:65:c4:0a:d0:6e:
cc:0a:5f:ab:48:76:46:38:5c:e7:db:8b:48:38:2a:4d:0f:49:
2a:0f:fc:2c:e4:ce:27:f0:dd:37:56:71:0f:42:bf:c1:74:42:
c1:ab:b7:60:6f:be:37:dc:75:c1:94:d1:8a:ae:e7:11:77:07:
f6:f8:12:ef:27:c0:6e:a5:85:32:60:30:cb:c8:0a:4f:b6:94:
a7:11:2f:01:94:23:53:e3:6d:81:5e:63:9c:78:b2:66:a6:80:
3d:99:6c:66:ae:84:b9:97:ef:d8:6d:82:17:ba:43:4b:12:3b:
0a:7f:9f:9f:af:2e:31:99:96:a0:99:78:c6:1c:0b:ef:16:fd:
53:7f:40:59:43:42:a0:5e:79:9b:43:3a:b9:85:eb:78:d0:37:
55:ac:0c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:03:52 2026 by rpki-client