Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8E3E6A46F0311F1B27FFAB4CE1D38B0.roa
File: F8E3E6A46F0311F1B27FFAB4CE1D38B0.roa (raw, json)
Hash identifier: iFguLca7GIaavbeN+jkJRmpLk/S3f5NNluPBeVyoLR0=
Subject key identifier: A9:85:E0:C7:14:C1:2F:80:5C:91:81:3F:7A:C3:63:7F:F5:17:58:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D4A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8E3E6A46F0311F1B27FFAB4CE1D38B0.roa
Signing time: Tue 23 Jun 2026 13:03:48 +0000
ROA not before: Tue 23 Jun 2026 13:03:43 +0000
ROA not after: Thu 30 Jul 2026 13:03:43 +0000
asID: 55286
IP address blocks: 154.83.192.0/24 maxlen: 24
154.83.193.0/24 maxlen: 24
154.83.194.0/24 maxlen: 24
154.83.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119976 (0x1d4a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 13:03:43 2026 GMT
Not After : Jul 30 13:03:43 2026 GMT
Subject: CN=6a3a8434-ffa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ce:5f:1c:e2:fa:fe:d3:79:e2:65:8f:df:b2:
ec:8a:74:86:5f:36:0e:fc:f7:ea:2d:dd:58:a2:3b:
49:ce:89:67:03:c4:0b:32:07:21:2d:98:13:55:35:
3e:3c:7e:6d:8a:e5:b3:6f:11:c9:9c:42:ed:aa:5b:
dd:ed:0b:de:27:99:cd:70:85:90:4f:15:53:13:8c:
f3:1c:aa:f8:1c:9c:f7:68:ee:6a:58:f2:a1:5c:2d:
53:98:da:0b:a2:6d:3b:a4:df:a1:03:6a:2f:e1:64:
0c:f1:12:e5:2f:76:a4:33:0a:53:a2:14:9a:ab:0b:
80:3c:86:8f:5c:df:8b:ea:dc:86:02:af:25:c9:84:
1e:14:3c:73:1f:61:28:bf:f7:04:cd:ac:c3:8b:f1:
00:15:f3:be:36:9e:46:cb:47:74:e9:de:07:89:fd:
2c:b3:b7:44:27:1d:fc:e8:12:63:6f:ac:5f:bf:b7:
48:75:5c:4a:9e:7c:ad:dc:7e:e5:a9:98:f4:45:9c:
fc:c0:c1:00:da:b0:c4:da:d8:bc:e1:89:6b:21:0c:
32:24:6d:4b:4d:96:67:a0:c0:71:69:ea:4f:81:1d:
6d:d6:10:f4:d9:99:4d:20:0c:91:d2:6a:0a:19:a1:
29:3d:38:5d:d3:fb:90:26:22:0d:78:71:8f:9e:65:
3c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:85:E0:C7:14:C1:2F:80:5C:91:81:3F:7A:C3:63:7F:F5:17:58:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8E3E6A46F0311F1B27FFAB4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.192.0/22
Signature Algorithm: sha256WithRSAEncryption
74:03:a0:3a:e1:b9:94:47:d5:31:da:70:d3:03:9e:2e:2e:43:
8c:ee:02:ba:e5:a9:09:0c:8c:7e:8f:02:2b:bb:11:d4:05:f5:
f2:63:f6:e0:bd:91:db:70:fb:92:e9:6a:53:6f:bf:7f:59:6d:
34:6e:17:87:b6:05:06:1f:d7:d0:4f:73:4b:25:9f:16:82:8d:
a9:86:d8:cb:86:bf:d0:b8:c7:fa:5e:e2:9e:6b:27:06:d3:2b:
c3:92:7c:f0:fe:a9:4e:65:aa:91:06:23:75:c3:8e:20:1f:99:
d0:1a:2b:e9:09:25:3a:4d:2f:47:6f:35:da:f9:3c:c7:96:58:
db:34:4d:9c:5e:c9:c3:62:1b:4b:5c:34:09:5a:13:5c:82:ae:
6f:e7:ef:8a:2a:07:4e:2b:4e:fd:2a:b2:76:94:e7:88:fb:e7:
df:46:93:3f:f3:69:14:79:d8:16:9a:09:ff:1b:fc:91:75:3b:
49:80:a9:cd:9b:bb:7b:b3:32:95:15:4b:4c:5b:62:cb:f8:c3:
d6:a7:11:6b:47:51:6e:97:91:95:5b:d0:94:ac:ca:f5:9a:53:
a2:63:a7:8b:69:c1:42:75:ed:20:62:7c:32:ac:73:c5:f1:79:
6d:63:92:af:c0:f5:19:69:dd:a7:aa:13:bc:7b:c2:0a:e2:1d:
92:46:fc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:52 2026 by rpki-client