Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4D7C6B68C0611F1A43911D7CE1D38B0.roa
File: D4D7C6B68C0611F1A43911D7CE1D38B0.roa (raw, json)
Hash identifier: 3CjpVIbH2s3oZRMJ/PYRp3rnfooceIIuvcHxCvxd8v8=
Subject key identifier: 74:02:D4:2E:EE:74:59:9E:C5:42:E6:2F:6B:3E:CE:EF:8A:5D:E9:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DBEC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4D7C6B68C0611F1A43911D7CE1D38B0.roa
Signing time: Thu 30 Jul 2026 11:07:20 +0000
ROA not before: Thu 30 Jul 2026 11:07:16 +0000
ROA not after: Sun 04 Oct 2026 11:07:16 +0000
asID: 131267
IP address blocks: 154.222.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121836 (0x1dbec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 30 11:07:16 2026 GMT
Not After : Oct 4 11:07:16 2026 GMT
Subject: CN=6a6b3068-064a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e9:64:91:63:c1:9e:da:9e:c9:4b:20:5a:95:
cd:f3:0a:53:39:d7:c1:49:81:4f:79:9b:a4:1b:b8:
20:fd:c0:a4:b8:ab:44:26:97:d2:c8:59:c1:7b:f3:
af:ae:17:85:7c:a1:d7:e4:10:7a:ed:02:5c:79:40:
58:22:d2:54:ab:2a:ea:e5:20:a6:8a:65:41:0c:e6:
68:50:c1:e5:d6:9a:1a:b1:95:0b:e5:e5:7f:81:33:
0c:f1:33:0b:61:10:f7:dd:25:e1:f4:2b:b7:94:5f:
a2:4d:22:5e:62:de:f7:20:4f:cb:b4:7e:37:36:3b:
0e:0b:5b:68:6d:8e:71:ba:03:fa:1f:e6:90:60:4e:
30:7f:24:a6:75:a2:dd:9c:58:71:44:e3:db:8f:36:
9c:5f:1d:55:22:ad:b9:30:15:a5:0f:4f:74:f4:3b:
36:ae:6e:56:f7:cc:90:b7:ec:be:1c:b5:e3:1b:48:
24:b1:6c:7b:f5:30:28:7e:61:4a:2e:f2:eb:15:03:
ff:20:d0:f6:8f:2d:04:a0:ba:30:c8:ed:90:63:d1:
27:ee:8c:11:e8:d7:47:90:d9:de:2c:13:a3:10:83:
33:43:03:30:e9:e2:f3:d3:45:8c:35:67:62:ca:f7:
cb:64:99:4f:29:56:08:b1:30:f0:fd:05:e9:dd:06:
5e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:02:D4:2E:EE:74:59:9E:C5:42:E6:2F:6B:3E:CE:EF:8A:5D:E9:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4D7C6B68C0611F1A43911D7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.4.0/24
Signature Algorithm: sha256WithRSAEncryption
24:5a:56:b9:4c:65:79:0e:6d:a1:5a:47:cf:76:37:6b:8a:5d:
6c:25:e6:5d:b1:cd:bd:ab:a5:0d:07:5f:ca:3c:b7:ee:11:f2:
2f:82:ee:20:f5:8f:f6:3a:bc:d1:94:09:a1:20:72:04:53:f5:
ed:77:c6:5f:c5:07:b7:ba:47:fb:0a:51:3b:07:87:73:0d:ac:
17:94:01:94:be:44:f9:c6:01:52:6f:53:15:76:ff:66:33:43:
ba:53:9b:79:ae:83:1d:9c:c4:c4:ee:d2:4e:d6:b8:24:64:18:
6a:eb:b4:52:cb:40:7b:58:b6:07:21:1f:6b:f0:8f:48:43:43:
2a:02:27:f5:35:0a:1e:40:25:c5:d5:63:41:91:67:4b:10:c9:
86:60:92:3e:b1:4f:4c:ac:cc:c0:f6:f7:7b:25:98:91:88:9f:
fd:ac:2e:18:2c:04:b7:35:35:1d:19:64:79:fe:db:56:32:d1:
d7:71:01:da:c0:3c:4a:15:a3:20:6a:91:b5:bb:d0:28:94:4e:
4a:34:40:3a:98:a9:d3:65:14:c9:ba:db:41:a7:1a:99:72:2c:
e9:81:cb:a2:a0:9f:16:f5:32:71:00:12:91:d6:62:c6:95:8c:
b2:93:e3:ac:e5:56:79:fb:28:d9:55:40:ff:e8:32:ee:37:9f:
a1:c0:90:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:39 2026 by rpki-client