Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D89A832843511F1861C4316CF1D38B0.roa
File: 0D89A832843511F1861C4316CF1D38B0.roa (raw, json)
Hash identifier: ayvIzQDffiuLHcXdzxiMfeHFPPeme+SYs5aruQxUJkI=
Subject key identifier: F2:79:75:29:FD:17:D2:7D:72:3C:50:CD:C9:1C:54:3F:49:55:5B:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA2C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D89A832843511F1861C4316CF1D38B0.roa
Signing time: Mon 20 Jul 2026 12:18:02 +0000
ROA not before: Mon 20 Jul 2026 12:17:58 +0000
ROA not after: Thu 27 Aug 2026 12:17:58 +0000
asID: 63139
IP address blocks: 154.94.86.0/24 maxlen: 24
154.94.87.0/24 maxlen: 24
154.94.88.0/24 maxlen: 24
154.94.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121388 (0x1da2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 12:17:58 2026 GMT
Not After : Aug 27 12:17:58 2026 GMT
Subject: CN=6a5e11fa-7e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:6e:52:d8:dd:6b:7b:58:8e:87:74:d4:ab:
93:86:f4:91:e9:fd:f9:03:2f:71:1f:bd:e5:55:b7:
69:04:e6:f3:81:12:15:7b:d8:64:35:c1:65:e8:3a:
b4:b0:ff:7b:93:64:85:ed:ff:a5:45:9f:c2:ea:81:
8b:36:12:a4:f2:38:68:38:c5:d1:13:5c:38:6d:3f:
dc:83:fd:73:d0:aa:2f:ba:e0:43:69:1e:04:cc:2b:
8b:d0:27:99:a8:c4:ee:63:bf:c1:d8:e6:9d:f9:fa:
31:11:87:99:7e:4a:8a:55:f1:e6:87:29:6e:ff:02:
e0:2a:69:d4:fa:e9:08:a4:bf:b5:e6:59:ca:c2:2b:
a9:5d:93:a9:b7:c0:06:d1:da:79:74:fa:ba:95:84:
f0:6f:bc:bd:0b:6a:85:7d:34:fc:07:e9:79:1f:0b:
78:ce:de:b9:ed:22:d2:f9:6c:50:a6:bc:c4:b7:e0:
d5:10:dc:78:64:f9:4f:08:56:66:c0:33:e4:ed:72:
8d:e6:01:81:84:66:84:3b:a9:6d:24:1e:1d:fe:5f:
14:95:66:2e:ca:57:30:2c:47:1f:a3:3b:b7:da:41:
01:8a:b0:c0:5b:09:e0:76:69:1c:31:1a:b2:6d:88:
6a:48:a0:82:d6:19:b7:54:e9:24:87:55:29:52:10:
9f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:79:75:29:FD:17:D2:7D:72:3C:50:CD:C9:1C:54:3F:49:55:5B:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D89A832843511F1861C4316CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.86.0-154.94.89.255
Signature Algorithm: sha256WithRSAEncryption
d2:a3:b3:d4:88:79:24:f5:b2:46:4a:1f:f9:1b:5a:80:06:d7:
d0:7b:83:95:97:57:da:84:b7:5a:72:ed:9e:62:8a:01:f2:cd:
97:7a:72:74:73:97:ec:d8:b9:c5:fc:b4:43:6e:8c:ae:74:86:
24:a1:04:12:47:e3:95:7b:6d:58:03:d6:2f:e9:09:73:9d:7e:
eb:44:03:f2:f5:75:ad:8f:c0:9c:fe:1a:a7:f4:1b:0c:03:73:
fe:c3:6e:0d:43:45:a0:2f:c3:95:16:ce:df:96:28:a4:89:22:
02:5e:36:62:a5:0a:39:93:3c:c9:b3:57:3d:8d:83:43:16:64:
89:31:e3:2a:1e:60:8a:35:96:8b:7f:82:bb:96:c0:bb:ca:60:
49:9b:76:da:08:64:3f:5a:42:74:2d:82:55:b9:a0:ef:80:68:
6f:5a:80:32:f0:d0:7d:9f:a3:c9:f3:1e:c0:5c:7d:f5:66:4a:
c3:b7:7f:db:45:d8:95:8c:2b:34:61:f5:a1:ab:45:20:dc:4c:
14:83:2c:52:69:30:06:3e:07:20:af:5f:ce:4b:5d:64:d1:86:
b6:8f:22:6a:b0:df:da:15:76:5a:21:3b:c7:de:8f:f1:dd:86:
45:ff:15:40:21:b7:ab:17:27:14:d4:c8:fe:ef:24:e4:a2:53:
27:76:53:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:56:50 2026 by rpki-client