Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8DC0A8A706E11F1B91B7DD9CE1D38B0.roa
File: F8DC0A8A706E11F1B91B7DD9CE1D38B0.roa (raw, json)
Hash identifier: D17aYW8FHdEdej0LAieEJ6lHC80Pg9CtvzUNGshBPG0=
Subject key identifier: 0D:54:4A:CA:7E:F5:FF:DE:5D:7D:A1:9C:5B:5A:BE:BF:62:A3:F8:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D512
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8DC0A8A706E11F1B91B7DD9CE1D38B0.roa
Signing time: Thu 25 Jun 2026 08:22:15 +0000
ROA not before: Thu 25 Jun 2026 08:22:11 +0000
ROA not after: Sat 01 Aug 2026 08:22:11 +0000
asID: 9009
IP address blocks: 154.90.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120082 (0x1d512)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 08:22:11 2026 GMT
Not After : Aug 1 08:22:11 2026 GMT
Subject: CN=6a3ce537-b959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:0b:6e:ab:b1:66:ab:0c:fb:80:8d:82:07:
ac:64:6d:96:ec:d5:34:20:87:48:1f:26:28:95:c9:
6a:19:5d:29:77:91:9b:5f:da:a2:6e:1f:14:e8:d5:
b9:28:4e:6f:dc:90:ab:6d:7a:7f:31:41:e0:a0:f5:
6b:e3:1a:c0:21:b8:9e:81:45:e2:ed:5d:c9:e2:de:
e9:67:64:2b:db:cc:eb:4f:43:62:23:3e:f7:01:53:
1a:a6:2d:76:28:f9:6b:ff:f2:89:9d:b5:a5:9d:3f:
81:3c:c7:85:52:26:f5:b3:b3:03:49:1b:ce:b3:ca:
6c:4f:6b:65:76:0e:1a:f5:94:32:07:e4:dc:b0:49:
6e:02:d5:0d:81:79:3a:54:b2:0b:8d:39:f9:73:c8:
28:9a:9d:af:92:bd:50:14:2e:97:f2:13:fe:16:bd:
12:88:74:b2:2e:cb:4a:a4:01:99:a8:49:5f:bf:45:
21:bc:66:65:a6:61:57:4f:e4:c9:06:15:b9:86:4c:
2b:29:de:a3:15:9c:ec:41:cc:02:86:f3:4c:a4:a5:
12:b8:f7:6f:8b:b2:9f:ee:86:25:88:ca:5a:dd:e4:
bd:cb:f2:17:12:1d:de:09:fc:63:18:48:1b:32:6b:
6a:d9:53:39:68:53:19:85:2d:91:a7:55:d5:33:5b:
5f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:54:4A:CA:7E:F5:FF:DE:5D:7D:A1:9C:5B:5A:BE:BF:62:A3:F8:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8DC0A8A706E11F1B91B7DD9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.188.0/24
Signature Algorithm: sha256WithRSAEncryption
12:b9:86:dc:9a:8d:b9:78:d6:51:6c:78:50:e6:eb:32:1e:ca:
61:c8:1d:ce:ca:b3:79:4d:21:11:eb:25:3f:f8:19:2a:91:e7:
60:0d:54:17:ae:dd:26:1e:0d:68:08:47:e1:12:f8:b9:3d:7f:
7e:26:10:05:a8:25:b6:d3:83:4f:70:28:29:01:16:be:a0:94:
b0:c5:a7:55:77:f6:cc:e7:75:b7:b2:c7:45:c8:87:31:16:3d:
ed:56:f8:8e:a7:17:ad:95:43:15:4e:c9:5a:01:54:24:fe:6b:
c6:f6:a3:c8:ce:0e:b8:0a:11:94:44:64:56:2b:ee:c6:53:5e:
50:1f:ca:5d:d9:ad:33:e2:46:41:b1:92:f4:2e:15:d5:c2:71:
17:b4:53:40:1e:10:eb:66:ae:87:a5:f8:2c:85:a0:3f:b7:28:
b7:34:3d:d2:15:e6:0c:23:fd:5f:3b:d0:b6:e0:db:b1:f8:97:
43:8f:0c:97:52:b0:a2:52:9b:8e:86:69:61:22:b5:31:ba:8a:
15:de:cc:c0:01:51:05:4a:36:f9:64:3e:e2:ff:28:99:cb:ac:
df:b9:a7:1d:12:4d:06:16:36:2b:af:fa:0a:3e:9e:d6:c4:68:
e0:73:38:e7:16:05:b9:27:8b:bb:54:c6:6b:71:86:38:da:04:
2d:4d:0d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:24 2026 by rpki-client