Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA62F7E090AA11F19A09A913CF1D38B0.roa
File: AA62F7E090AA11F19A09A913CF1D38B0.roa (raw, json)
Hash identifier: KSZp0tBTABXqnPOhHkKLfOvX50FoQDZwK/ibnkpEOug=
Subject key identifier: 6D:6F:7B:A3:DB:7D:3B:F6:5F:51:7E:83:4E:95:DD:DB:8C:F6:8E:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DCC9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA62F7E090AA11F19A09A913CF1D38B0.roa
Signing time: Wed 05 Aug 2026 08:50:11 +0000
ROA not before: Wed 05 Aug 2026 08:50:06 +0000
ROA not after: Sun 15 Aug 2027 08:50:06 +0000
asID: 36898
IP address blocks: 154.214.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122057 (0x1dcc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 5 08:50:06 2026 GMT
Not After : Aug 15 08:50:06 2027 GMT
Subject: CN=6a72f942-4e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:92:e2:98:41:11:87:28:44:c7:7e:3d:57:49:
e8:8a:67:5b:66:e6:a4:06:ac:73:57:08:06:f5:5e:
ce:b0:0f:72:d4:0f:2c:4b:a1:cc:0b:5d:92:fd:b0:
80:4d:70:af:be:cb:ed:e6:61:dc:2d:e4:76:f0:73:
49:4e:27:eb:0d:f1:05:2f:ba:20:2d:ab:86:54:60:
cc:19:51:8a:d9:d7:f4:09:62:0b:da:09:d1:50:30:
79:7a:e3:7c:32:3f:ad:9d:ba:e6:29:44:08:a2:bc:
34:cf:2d:f9:16:25:96:b1:93:70:a0:21:b9:eb:59:
12:55:cc:fe:eb:0d:07:b6:a7:84:02:f7:56:e1:34:
14:7b:dd:99:62:08:fd:ad:fb:00:26:16:4c:74:bc:
60:ab:48:45:ad:64:6a:61:88:bb:71:35:52:fe:05:
fa:88:b6:cb:42:63:a2:af:84:ee:33:fe:7f:56:00:
36:c4:cb:41:9b:78:c8:d9:67:e8:67:0d:37:0d:a5:
fc:e5:70:f5:8e:a7:9f:fa:33:15:ce:f9:69:a8:8d:
a3:4f:58:16:af:62:d8:bb:f8:d1:6d:09:dc:6b:65:
59:57:40:bc:d1:e2:90:7b:05:59:4a:da:1f:7d:80:
fa:de:93:dc:f8:2d:b5:b7:4b:bb:10:e8:7a:0f:e9:
34:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6F:7B:A3:DB:7D:3B:F6:5F:51:7E:83:4E:95:DD:DB:8C:F6:8E:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA62F7E090AA11F19A09A913CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.252.0/24
Signature Algorithm: sha256WithRSAEncryption
78:9d:07:ba:7c:f5:8e:6b:f6:f2:ec:9a:1d:44:6a:3e:7a:90:
44:e1:de:0a:8a:9b:ce:53:cd:14:dc:c0:5a:09:9d:60:bd:e0:
1f:f7:da:01:50:6d:5d:41:38:5e:6a:ab:a5:3a:0e:d0:51:90:
11:51:8a:bf:a3:16:54:9b:9b:36:67:c8:b8:6f:6d:89:9f:e9:
cd:95:b3:2d:fe:56:b4:86:6e:5d:72:6f:38:be:e5:bd:aa:83:
17:44:7d:76:20:33:b5:82:1a:8b:2d:ae:e7:c4:6b:52:14:08:
82:24:0b:52:a0:72:58:2f:6e:f4:83:30:2a:e8:c5:50:2e:59:
d3:ca:a1:b1:78:ce:24:6a:63:a0:2d:15:69:e9:4a:a4:e6:37:
ff:d0:3b:d0:af:63:fd:ec:7d:20:e9:74:90:2e:c5:f7:56:72:
ef:7d:e5:9f:7e:d0:3a:b1:3f:16:6d:dc:1a:6b:ff:02:86:84:
b1:b4:0c:d7:10:7d:13:2b:12:f2:7b:c1:cd:54:c2:dd:2c:8e:
1b:e1:74:cd:a5:93:5e:93:47:66:1d:87:6e:23:8d:a9:d3:1c:
b2:e3:e6:fd:02:d5:d7:02:b3:4e:3d:ba:c0:86:22:d3:e8:bd:
a7:c6:f4:5d:95:27:48:95:16:cb:9e:99:c4:23:40:ea:a4:e1:
c1:88:23:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:55 2026 by rpki-client