Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B68E83E843411F1BD9F980ECF1D38B0.roa
File: 0B68E83E843411F1BD9F980ECF1D38B0.roa (raw, json)
Hash identifier: aCS0pMG41zVOW5m1y7OD5PhSHY1new6wkMMNHXmyx20=
Subject key identifier: D3:C7:DE:AA:F5:2F:BF:D2:32:B7:3B:F1:1B:C8:2A:29:E5:99:F2:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA26
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B68E83E843411F1BD9F980ECF1D38B0.roa
Signing time: Mon 20 Jul 2026 12:10:49 +0000
ROA not before: Mon 20 Jul 2026 12:10:45 +0000
ROA not after: Thu 03 Sep 2026 12:10:45 +0000
asID: 63023
IP address blocks: 154.222.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121382 (0x1da26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 12:10:45 2026 GMT
Not After : Sep 3 12:10:45 2026 GMT
Subject: CN=6a5e1049-6c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:34:f3:d0:42:2f:34:09:85:dd:38:19:1b:40:
8b:c0:f0:0c:ac:9e:3f:5c:5f:03:7f:ac:3e:c5:ef:
c9:7c:f8:b3:ce:d8:cc:bc:d4:5a:0f:da:a0:68:a8:
72:42:56:7c:57:6e:c8:cc:7c:a4:0c:f9:ca:7e:dc:
92:3c:f1:d6:38:7f:d5:4e:b2:76:39:21:5a:37:56:
34:78:ac:6c:f7:92:78:59:5b:d8:65:df:c0:b0:b0:
56:61:34:36:a3:86:e6:b0:9c:12:45:2f:c4:ef:b5:
4c:e3:63:92:71:d8:ca:99:58:9b:8c:3d:a7:49:27:
be:59:c0:d0:23:a7:f9:65:1e:04:92:8e:13:69:07:
67:e7:a2:fe:df:2f:97:a8:d2:63:27:38:6e:1e:7c:
62:8c:98:3c:bc:9f:49:3b:b7:55:31:56:52:ff:55:
e3:73:27:a6:6b:c7:60:d6:f7:65:d9:a7:6e:8e:09:
e4:c3:3c:43:26:a8:e3:79:77:e8:b1:9f:40:e5:21:
2d:dc:6e:05:82:1b:f6:03:49:4c:f9:ce:9b:9a:c6:
4a:7a:7d:ac:5e:5e:02:82:e5:f5:9a:a3:a0:ad:a8:
b0:74:52:0a:35:ce:f5:b5:3f:e5:df:96:93:94:93:
79:e8:b3:03:4f:04:05:5b:ca:b8:ad:fc:e8:56:19:
55:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C7:DE:AA:F5:2F:BF:D2:32:B7:3B:F1:1B:C8:2A:29:E5:99:F2:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B68E83E843411F1BD9F980ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.11.0/24
Signature Algorithm: sha256WithRSAEncryption
73:af:92:aa:c8:16:93:af:51:9b:e8:ad:56:4b:7a:1c:65:12:
f3:45:98:79:7a:32:de:04:9e:9b:1d:f5:c8:e3:62:cf:a7:34:
8b:ae:77:c8:28:47:b6:5e:cf:6d:37:a0:c9:fe:9b:af:99:bc:
b3:ba:95:5d:fe:d4:18:12:8e:53:a0:1a:1b:d3:fd:b2:f0:56:
74:5b:7e:07:08:66:85:1e:37:a8:06:bd:a2:8e:71:f8:55:d5:
89:86:57:1f:9d:ff:1d:8b:73:cd:99:ae:f3:35:41:f3:63:e8:
75:3e:c1:08:8f:8b:58:6a:c9:17:30:ef:78:84:31:1b:1a:ef:
db:ff:2b:d6:dd:2b:5f:f6:0d:a3:e4:81:fd:bd:80:2b:66:56:
61:f8:df:56:51:c3:95:06:9b:a5:70:01:d7:b4:1a:eb:67:5d:
9f:ec:56:35:f6:dc:8e:e4:c7:ec:19:4f:8c:00:33:93:ff:57:
84:07:8e:c3:04:59:6d:9b:6c:6b:38:c8:f5:d8:1c:b1:eb:cc:
c9:15:2f:5d:2e:5d:2f:01:05:94:46:62:b9:84:97:4d:e7:09:
e6:3a:d3:d3:5e:c4:21:ed:bb:d8:d4:41:b5:4d:e8:8f:8d:67:
3b:bc:96:02:a6:6a:e1:17:d7:db:57:5c:98:39:7d:36:3c:91:
fd:75:46:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:26:01 2026 by rpki-client