Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C426AED66A4611F1A5E527A5CE1D38B0.roa
File: C426AED66A4611F1A5E527A5CE1D38B0.roa (raw, json)
Hash identifier: zJQ3KPVaZIjMzdrWu4/K826J9IXfglTht0sF62VxPKU=
Subject key identifier: 7C:66:BB:A2:C6:D7:53:D2:16:76:1A:56:20:35:BD:24:B4:CC:DE:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D3BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C426AED66A4611F1A5E527A5CE1D38B0.roa
Signing time: Wed 17 Jun 2026 12:19:20 +0000
ROA not before: Wed 17 Jun 2026 12:19:15 +0000
ROA not after: Fri 24 Jul 2026 12:19:15 +0000
asID: 58931
IP address blocks: 154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119740 (0x1d3bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 17 12:19:15 2026 GMT
Not After : Jul 24 12:19:15 2026 GMT
Subject: CN=6a3290c8-10bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:83:a6:89:7e:6f:fb:eb:3f:2e:b2:d1:3e:45:
a2:7f:5b:14:af:61:1c:e5:0a:90:54:9f:ab:ed:aa:
e7:70:20:b0:70:84:2d:c9:4f:8c:dd:f2:92:ce:20:
3b:f0:e1:f0:09:0c:ad:fe:e6:b1:fe:88:b2:5f:a1:
d3:64:38:d1:d9:f1:1e:b3:4e:b5:17:fd:4d:6b:ce:
e6:7e:55:c2:1c:25:81:52:19:08:01:86:a6:8b:09:
78:28:c0:91:59:72:73:a6:1e:5c:b4:f6:9b:6f:94:
40:0a:f8:b5:c0:e3:24:ea:39:ed:9e:bb:41:8b:58:
0e:50:cd:40:c2:e9:32:91:9e:87:73:23:a2:e9:2e:
85:57:74:37:66:78:b9:e9:46:71:7e:b4:f2:46:25:
12:9a:2e:51:5c:6c:d9:ff:26:8f:52:9b:0f:36:55:
75:60:ec:7d:47:e4:4c:79:8a:b8:cf:86:c3:f9:39:
89:aa:ca:10:fe:c6:43:ae:4f:c9:85:d2:49:0e:f8:
84:68:69:d9:1f:c5:9f:60:b8:9b:1b:07:3b:d3:b6:
82:58:6d:30:2d:91:6e:dc:c3:39:b9:b1:95:f6:c2:
3e:d8:fa:0c:6e:6f:5f:91:d0:81:d2:93:de:51:40:
5b:08:ad:16:f7:9d:16:82:24:7e:11:66:12:e8:ff:
41:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:66:BB:A2:C6:D7:53:D2:16:76:1A:56:20:35:BD:24:B4:CC:DE:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C426AED66A4611F1A5E527A5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
23:42:a9:d4:33:d3:d5:12:97:e8:d6:4f:83:90:69:7e:65:90:
2b:a7:f7:1e:00:58:87:35:c4:8d:6d:8c:1e:5c:c6:fc:10:a9:
29:8a:61:91:d7:0c:ba:5a:e7:c1:7d:1b:c0:9c:83:45:bb:e4:
3b:14:c4:0d:f5:08:f2:78:a2:f6:14:b5:70:7d:fa:07:66:d1:
0d:27:0e:f8:fe:76:01:d1:44:0e:d8:55:9d:bb:d4:5d:e1:d0:
b6:fe:99:65:5b:a4:51:5a:01:aa:81:20:f4:b5:87:9b:90:da:
09:be:16:65:8e:f0:49:b9:1d:18:58:87:f2:af:e9:9f:8c:c5:
33:bd:8f:b8:c2:a8:66:e3:79:50:d0:92:ca:18:1c:0b:e3:52:
40:56:fb:a0:d3:b4:c0:da:4a:ae:2f:b1:ed:2c:04:40:99:eb:
06:3e:af:23:ef:a8:78:d0:b7:70:fb:7f:89:a9:f7:af:07:09:
ef:b9:99:66:f5:99:51:c7:35:b7:1d:eb:54:92:8e:49:38:e2:
97:e1:a1:82:e6:14:81:68:1b:85:8a:95:98:2f:38:46:9d:29:
03:72:aa:c1:f3:dc:2a:12:fa:09:03:ef:52:60:20:56:ec:7a:
5b:f6:bf:d8:72:8b:75:ad:9a:20:b4:60:8d:37:b9:10:6b:c5:
85:b0:13:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:54 2026 by rpki-client