Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC7D749669B911F1B1576CC0CE1D38B0.roa
File: AC7D749669B911F1B1576CC0CE1D38B0.roa (raw, json)
Hash identifier: ORK6C4UE1k+VyjY+Txq2sP9SYDmYlZLPVl1yFSJ5FUI=
Subject key identifier: F9:D3:BE:BE:C8:D6:E4:10:DB:20:58:D9:88:BE:02:60:68:4B:20:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D393
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC7D749669B911F1B1576CC0CE1D38B0.roa
Signing time: Tue 16 Jun 2026 19:29:21 +0000
ROA not before: Tue 16 Jun 2026 19:29:16 +0000
ROA not after: Fri 17 Jul 2026 19:29:16 +0000
asID: 197574
IP address blocks: 154.83.149.0/24 maxlen: 24
154.86.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119699 (0x1d393)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 19:29:16 2026 GMT
Not After : Jul 17 19:29:16 2026 GMT
Subject: CN=6a31a411-b573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e6:64:61:04:f8:00:d4:04:fc:15:15:a0:27:
ef:9b:d1:ca:40:8d:06:87:31:0c:19:1f:ef:20:5c:
01:c2:a2:8d:43:32:e1:16:48:fd:5b:2c:50:13:33:
dc:d1:97:60:9b:ea:8b:29:24:6b:39:ed:00:bc:8d:
88:9c:f6:51:ec:7d:f7:16:6c:4c:07:28:5e:0c:d3:
46:0f:56:41:97:30:ed:84:16:64:f0:f1:38:35:c9:
46:8b:e7:24:bc:44:1e:f9:13:54:9a:9e:7b:b4:d6:
09:e9:be:5a:71:17:7c:5e:be:24:00:db:ce:8f:7c:
23:9e:70:26:5e:f2:c4:87:a0:e1:e8:d8:08:67:b5:
df:86:14:1e:c6:be:ee:96:fb:1c:c8:37:98:28:3c:
2d:f5:67:36:12:6f:4d:55:73:08:27:24:59:2b:d3:
71:f8:3a:ec:1b:3a:eb:85:79:f6:94:7a:e5:74:85:
62:a2:b5:57:cb:c1:7e:90:5c:05:e1:a7:53:ad:f3:
51:17:21:a8:7a:be:f1:d8:8c:5c:22:0d:9a:c5:09:
4e:1e:f2:0b:7e:d9:4e:99:ec:bd:26:b0:40:e0:be:
61:06:ee:12:7c:f3:97:99:bd:f1:e2:f2:8b:18:b7:
a3:04:53:52:1a:8a:39:3c:ba:ad:24:b1:54:dd:0a:
82:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D3:BE:BE:C8:D6:E4:10:DB:20:58:D9:88:BE:02:60:68:4B:20:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC7D749669B911F1B1576CC0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.149.0/24
154.86.119.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:bb:2f:8a:74:65:22:aa:22:81:e4:17:dd:b6:31:fb:7b:5f:
3a:10:3b:31:d1:68:87:18:16:ed:11:42:1d:08:28:16:5a:d9:
83:d3:21:e5:a3:c6:01:0b:03:88:c6:cc:42:bc:ef:32:73:29:
2e:cf:c4:f1:8a:b4:4a:d4:6b:35:64:d3:a9:b6:35:a3:19:02:
65:8a:6c:af:fc:99:8c:f2:94:52:d6:46:8f:61:1d:84:15:3f:
98:a5:5c:53:71:81:8e:17:b4:f6:c0:d4:a8:58:3c:eb:24:b1:
25:95:da:38:a9:5a:56:a3:18:f5:09:d7:49:3c:4c:5d:08:4e:
af:5d:f2:93:e3:fc:2d:d7:76:b3:76:92:b0:4d:d7:a3:eb:b2:
45:44:84:01:fb:20:1f:0a:b7:1e:f1:3e:b6:e7:cc:76:3c:26:
63:1a:b0:b5:59:3d:b9:b7:24:3e:8d:b4:d9:45:26:b3:94:71:
ad:df:36:99:16:3e:f9:f6:bd:13:98:a5:04:01:a8:b6:aa:b4:
4c:1e:30:69:85:e1:a4:d6:a6:1f:6a:08:8e:37:9e:e1:8b:46:
3f:64:94:0d:bf:97:92:84:32:89:02:b4:82:67:1f:f4:60:e9:
60:8a:ee:70:e7:2c:02:a8:a8:02:30:38:7d:c3:5a:8c:6d:4f:
3f:17:a4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:52 2026 by rpki-client