Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A975542A918D11F19E5CBCEFCE1D38B0.roa
File: A975542A918D11F19E5CBCEFCE1D38B0.roa (raw, json)
Hash identifier: rvus1Fy0CRfKJj2G1zoMcT+cvM3a8MX2PLowOWT3+Q4=
Subject key identifier: 1A:2F:F6:46:6F:A6:93:73:62:19:AB:AB:9D:63:CC:DD:46:87:2F:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DCFB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A975542A918D11F19E5CBCEFCE1D38B0.roa
Signing time: Thu 06 Aug 2026 11:55:05 +0000
ROA not before: Thu 06 Aug 2026 11:55:01 +0000
ROA not after: Sun 16 Aug 2026 11:55:01 +0000
asID: 140224
IP address blocks: 154.86.16.0/24 maxlen: 24
154.86.17.0/24 maxlen: 24
154.86.18.0/24 maxlen: 24
154.86.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122107 (0x1dcfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 6 11:55:01 2026 GMT
Not After : Aug 16 11:55:01 2026 GMT
Subject: CN=6a747619-985f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:09:c4:fd:76:82:29:08:68:f0:f0:1f:30:28:
87:a6:73:35:99:ac:33:ce:7b:48:35:2e:ed:04:52:
66:64:8f:dc:06:aa:71:d5:b6:d7:8a:7f:8d:4a:2b:
8f:1c:23:03:09:03:d1:2a:46:e7:4c:3e:b2:b6:d9:
ac:91:f9:81:38:ed:9f:a3:bc:e9:e0:54:36:5e:fa:
ca:bc:1e:fb:b3:63:39:04:23:1d:c9:f0:e6:8b:0d:
69:25:18:d4:12:bb:24:0e:53:07:ec:f7:70:20:cf:
83:57:5a:e4:06:20:27:5c:55:fb:29:bf:1d:92:33:
d0:e2:dd:b9:1a:69:bb:71:fe:01:50:db:ef:86:c2:
58:97:15:60:25:c9:d8:f2:2c:c7:18:2a:39:68:37:
36:a7:e1:44:fc:a4:d8:e6:9b:89:cb:6a:6d:13:62:
5a:a5:b4:14:52:e1:42:6e:f5:cd:20:c6:b4:56:ae:
4a:c1:52:ff:a1:bc:9d:58:12:4c:ff:db:6e:e1:a4:
20:39:bd:a5:48:83:7c:95:1c:35:43:60:d6:f7:63:
68:fa:1c:b4:05:d1:f0:4b:4f:4c:75:1d:c1:d0:af:
ee:4c:2f:35:64:4f:dc:65:29:66:9b:2b:fa:60:8f:
67:38:2a:65:eb:a3:76:b4:76:51:08:b6:ca:16:c3:
e4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2F:F6:46:6F:A6:93:73:62:19:AB:AB:9D:63:CC:DD:46:87:2F:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A975542A918D11F19E5CBCEFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:52:c9:21:b0:fe:c3:a6:ff:83:b1:e5:f2:1a:65:27:b6:4b:
99:b1:48:81:1e:19:c7:1c:d6:c5:14:d3:22:de:4e:c2:22:6a:
a2:ff:45:0d:2d:dc:76:6e:a9:6f:48:f4:d5:d8:33:15:02:2d:
cd:01:88:8a:db:e4:c2:62:6a:1c:1b:de:6d:0d:11:d9:49:43:
29:88:bb:07:0f:49:b1:98:b6:c1:62:bc:32:29:d5:ad:4f:c3:
d3:68:b3:0c:80:d2:62:e2:c9:9e:40:ec:b2:98:34:c1:82:39:
a2:93:2e:ca:b5:72:25:77:48:bb:4b:72:3e:ad:4e:ef:f9:ca:
8b:f9:e6:c9:38:8a:71:26:ff:63:6d:01:9e:c9:ce:17:43:01:
9d:ae:3f:b0:ca:17:fb:3d:0e:fc:36:d3:21:1b:45:99:4a:74:
d2:c6:d9:dd:ac:53:9b:05:dd:eb:1b:ba:08:82:ec:01:4a:06:
3a:bf:89:de:f8:60:d5:43:a0:b1:e8:c0:40:e7:51:08:73:98:
71:e4:6b:a2:51:bf:5f:0b:95:23:9e:75:43:e2:a4:e7:ec:c8:
92:c7:e8:d4:64:ba:54:5f:3c:37:3e:37:96:a5:ee:81:f0:8d:
a6:65:17:5f:ca:e9:1f:fc:63:97:35:f3:04:11:9c:a7:b3:ce:
14:ab:43:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:16 2026 by rpki-client