Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B78F7C688E4311F1A9A09401CF1D38B0.roa
File: B78F7C688E4311F1A9A09401CF1D38B0.roa (raw, json)
Hash identifier: x8XYjhmgeB4iRptrHBKzcU6UnovCDKbHS6pyAJ7RwbU=
Subject key identifier: 69:F1:F4:B1:87:AA:33:85:7A:58:D3:69:64:F6:33:CC:86:36:C0:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC3F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B78F7C688E4311F1A9A09401CF1D38B0.roa
Signing time: Sun 02 Aug 2026 07:28:12 +0000
ROA not before: Sun 02 Aug 2026 07:28:08 +0000
ROA not after: Wed 09 Sep 2026 07:28:08 +0000
asID: 135377
IP address blocks: 154.82.22.0/24 maxlen: 24
154.82.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121919 (0x1dc3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 07:28:08 2026 GMT
Not After : Sep 9 07:28:08 2026 GMT
Subject: CN=6a6ef18c-d561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6f:ae:20:90:71:f2:71:11:e8:b9:60:d5:aa:
2b:de:8e:37:3d:10:46:47:e2:d6:a6:0e:5d:ec:c0:
48:dd:8b:95:bc:6a:1c:fe:b2:42:db:6d:7a:03:61:
27:c9:9c:4d:fa:bb:bd:e7:6c:bd:ce:bf:2b:ed:c1:
67:10:eb:65:32:96:ee:4f:f2:59:cc:04:e6:dc:8d:
38:1c:e2:86:f1:8a:ac:08:cc:56:a9:3a:5d:21:c2:
d5:a3:a0:f8:c3:aa:69:95:34:d8:ee:d8:c3:b5:97:
c8:ce:98:41:c3:a4:e3:1a:0e:43:01:88:a6:b9:53:
6e:30:f0:62:99:26:fb:9f:c3:f4:6d:30:b5:ef:79:
05:e3:3e:c0:c1:2b:5f:58:63:3b:72:bb:ef:2c:31:
19:d6:42:5d:e7:ea:2c:af:ba:ab:97:b9:47:aa:e8:
33:5d:82:22:69:8b:63:df:88:33:e8:a9:e5:50:1f:
ce:0b:60:75:9e:d6:c4:72:9f:39:0d:40:53:68:1a:
3a:0e:d7:4a:d8:c5:b6:44:ea:c2:e2:1e:42:7f:63:
f3:30:fb:ab:56:ee:80:7c:11:45:6d:00:40:fc:51:
d1:7f:a8:20:19:59:43:cb:ad:f1:48:33:72:57:fc:
e7:3a:ce:43:a6:09:ad:9c:8e:0e:44:51:09:27:1f:
85:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F1:F4:B1:87:AA:33:85:7A:58:D3:69:64:F6:33:CC:86:36:C0:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B78F7C688E4311F1A9A09401CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.22.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:4a:b1:f3:e3:de:e8:05:db:d8:d1:51:72:84:1f:61:43:f4:
12:ed:9e:18:b5:1c:36:c3:af:b9:40:43:cf:ca:1c:6b:7e:d6:
4e:b5:f8:d5:53:12:78:3a:0a:9f:21:c4:3b:4c:31:97:e0:9e:
a4:44:7c:bc:09:ef:41:05:0b:53:7e:c8:b4:72:2c:85:75:49:
fe:56:99:af:bb:35:47:37:f1:6f:ee:be:85:61:0e:03:81:0e:
bb:dc:de:d1:2c:ec:59:0f:31:40:ff:52:8f:e6:59:7b:bd:f7:
7b:88:3a:c4:15:8b:ed:68:0a:b5:10:3d:2d:3f:21:66:a1:15:
62:c4:80:b7:68:1f:f3:c4:fd:b6:ca:b9:b2:12:80:fb:fc:b5:
b0:f5:08:8e:6a:72:7a:f2:73:c3:7e:0a:a9:df:a8:15:9c:3a:
44:15:26:cb:e7:d8:08:58:5f:6a:bd:f4:71:6a:85:ae:9d:f3:
1e:91:94:20:00:33:66:0f:a0:30:0d:d6:b0:0f:10:b1:8d:55:
17:6a:52:1e:26:8c:3c:d2:7f:29:bb:8d:67:19:d5:59:e5:0b:
0b:b2:95:df:83:ee:fe:ba:1b:64:9f:45:93:5f:ba:50:10:8c:
8d:48:76:ac:43:07:50:41:ca:dc:1e:ef:63:1c:e0:b9:6d:8c:
68:a2:d3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:10 2026 by rpki-client