Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8D7DC2E68C611F1B875BDFBCE1D38B0.roa
File: C8D7DC2E68C611F1B875BDFBCE1D38B0.roa (raw, json)
Hash identifier: +DxeEgFlJ5RFwwmx44+MaUl1KDoyRgjzaFgiRytjk14=
Subject key identifier: 27:34:20:D2:2F:69:55:6C:89:8E:F0:51:F8:12:95:93:1F:1E:BC:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D2DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8D7DC2E68C611F1B875BDFBCE1D38B0.roa
Signing time: Mon 15 Jun 2026 14:30:41 +0000
ROA not before: Mon 15 Jun 2026 14:30:36 +0000
ROA not after: Fri 10 Jul 2026 14:30:36 +0000
asID: 1405
IP address blocks: 154.83.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119515 (0x1d2db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 15 14:30:36 2026 GMT
Not After : Jul 10 14:30:36 2026 GMT
Subject: CN=6a300c91-25ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:89:09:5d:0c:85:7f:50:4d:eb:47:18:6c:
84:79:a0:77:8e:76:f3:11:01:11:46:2a:e6:d8:f4:
01:10:6e:10:1c:89:77:bd:6d:76:0c:7b:67:1a:2e:
6e:2a:9f:4d:1c:fa:fe:3e:33:2e:de:98:28:01:ce:
a0:52:20:2a:50:ce:c5:25:29:88:5c:b3:ab:30:5d:
4f:75:fa:25:ed:ce:8f:d7:2a:45:62:9f:1d:07:54:
1a:24:3f:77:41:b7:85:83:3f:5b:ab:ce:aa:22:4d:
b6:df:d3:fd:5a:34:ff:a5:63:98:91:54:d4:e5:b2:
07:36:48:49:47:0e:bc:9d:b8:76:a3:14:a6:64:81:
12:c1:02:6f:40:ef:13:e7:a4:8a:55:dd:82:6f:ef:
46:18:a7:e1:32:d9:7b:c5:a6:56:8e:c9:07:4a:de:
98:d3:12:03:b5:f3:03:7f:1c:20:8f:8d:4a:a4:33:
ba:85:16:0b:9f:7d:40:f5:c0:64:2b:fc:9f:d8:2d:
76:a2:1b:a3:b2:95:49:52:1f:34:7a:fb:81:c7:8a:
4d:bb:1b:b9:2c:2e:0c:96:1d:bd:e4:23:d2:9e:8c:
4f:dc:27:76:8f:d1:b8:f5:ea:f2:ad:60:6b:fc:a7:
53:44:ef:dd:78:f4:3c:2b:1f:c3:2e:cb:f6:0a:d1:
69:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:34:20:D2:2F:69:55:6C:89:8E:F0:51:F8:12:95:93:1F:1E:BC:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8D7DC2E68C611F1B875BDFBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.88.0/23
Signature Algorithm: sha256WithRSAEncryption
75:9f:57:46:f9:fb:b3:79:7f:8c:02:a1:c6:32:bf:4c:ad:35:
23:57:68:83:b4:46:44:8b:50:4d:c6:d1:db:1e:d2:a2:bc:30:
1e:c6:3e:ef:77:6f:19:00:d8:a3:7a:5f:4b:59:4d:ad:1b:74:
db:ad:55:f6:da:cf:3c:46:1a:ed:60:af:71:59:89:18:36:b6:
94:00:73:48:39:54:b2:59:9c:69:b3:c3:b3:84:3b:35:b1:95:
b3:34:7e:f8:bf:b3:85:52:21:c7:49:78:a4:3d:6c:a1:d5:53:
e4:e4:a5:e0:6c:e8:81:e4:2c:32:94:05:b9:2c:07:07:14:8a:
69:d7:fe:0a:33:d1:6b:c1:d7:8c:74:5b:1c:72:dc:d5:03:b1:
e6:d2:98:77:47:9e:58:f1:f5:bf:18:bf:51:a3:aa:f3:00:02:
f3:bb:fc:0b:ed:0a:e4:52:73:f1:d3:af:c5:80:c8:14:d5:01:
e9:4c:fe:5a:f5:83:3c:51:39:4e:39:8d:7c:e0:9f:2b:f4:b8:
40:d3:6c:82:29:5a:b7:02:5e:29:fc:27:21:9e:5a:c5:8b:4b:
c7:89:83:0b:8e:84:53:04:5d:df:bc:1d:f2:cc:6c:10:29:48:
8f:c4:4f:e4:97:46:b8:9d:34:8f:4b:21:c6:a3:43:43:1e:3a:
ea:66:2e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:16 2026 by rpki-client