Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10AF16066FF811F1BDB24EF7CE1D38B0.roa
File: 10AF16066FF811F1BDB24EF7CE1D38B0.roa (raw, json)
Hash identifier: iOsVEpEXNN9TRcIwosHjlOLvOuiP9zU4XA2K0i4dsmE=
Subject key identifier: 60:A2:EB:1A:C4:E9:1F:97:20:DA:AC:CA:DB:02:DE:91:F4:EA:2A:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D4E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10AF16066FF811F1BDB24EF7CE1D38B0.roa
Signing time: Wed 24 Jun 2026 18:11:05 +0000
ROA not before: Wed 24 Jun 2026 18:11:00 +0000
ROA not after: Sun 09 Aug 2026 18:11:00 +0000
asID: 63099
IP address blocks: 154.200.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120039 (0x1d4e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 18:11:00 2026 GMT
Not After : Aug 9 18:11:00 2026 GMT
Subject: CN=6a3c1db9-b7c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:ac:97:3e:bc:b7:0f:89:43:46:8b:ec:f2:
74:6a:e3:84:87:d7:b6:4a:c0:6c:11:e7:f6:4a:79:
ca:44:f9:00:21:68:60:fd:9e:1d:83:d7:cb:08:70:
e8:e2:99:4f:98:82:84:fa:88:f5:28:8d:60:4b:d8:
83:2d:63:38:30:de:ed:c0:4b:15:17:99:46:ae:b1:
a9:dd:b6:d0:ed:5e:63:43:92:f9:f3:9f:82:e7:29:
58:a2:cc:9e:db:a6:9a:00:10:f4:c9:54:c9:73:7e:
4a:15:5e:f5:3b:6f:02:f2:b0:37:c5:ad:81:f2:f9:
6a:4a:1a:31:f6:77:24:42:d1:1c:d8:4d:39:e9:91:
0c:15:8f:10:98:1c:9e:67:b7:3b:97:0e:53:2d:a8:
1b:bb:16:f3:d8:30:02:f0:54:27:8c:dd:5d:73:33:
e2:13:cc:f6:ad:fb:99:99:ba:99:39:d2:54:09:16:
5b:7a:71:26:f5:7c:45:b2:53:44:58:14:81:51:83:
60:de:8a:8d:f2:a8:b9:6a:24:a1:80:1d:cd:b5:1d:
f2:45:fb:d1:40:c5:b2:80:ea:23:35:26:3f:e3:0c:
e0:bb:33:d3:23:b5:6d:de:dc:e6:d9:8e:7d:d4:32:
0d:fd:4d:68:d3:00:e4:44:25:dc:35:44:ab:21:f9:
77:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A2:EB:1A:C4:E9:1F:97:20:DA:AC:CA:DB:02:DE:91:F4:EA:2A:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10AF16066FF811F1BDB24EF7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:9d:bc:14:2a:67:0c:03:a5:02:49:a0:28:1f:93:86:4c:3b:
18:5f:70:b3:17:8f:ec:4e:e9:c0:8c:39:09:15:44:11:57:92:
cc:d6:d0:12:89:b7:be:85:f6:3d:a3:ee:2c:15:cc:55:ee:08:
8e:4c:70:e5:4b:a1:b3:ac:2f:a2:85:b1:b7:7d:1a:a2:b1:3b:
a0:d4:aa:52:5f:ff:f5:e0:a9:2a:56:a3:e7:4b:d8:48:08:47:
aa:48:ad:6a:a9:21:91:c0:eb:ad:30:b5:e9:f7:d6:2f:d7:10:
83:7e:c2:5d:df:21:fd:8c:f7:ee:4e:41:c1:f8:e1:61:ad:c0:
18:13:80:83:f1:d9:c9:48:01:b7:83:cb:fd:b6:fc:40:ec:c6:
a9:e9:55:0f:44:e7:57:ea:f0:35:5c:c8:27:bb:fa:39:33:f7:
18:42:25:2a:c2:ea:35:94:29:67:9d:cb:e9:5b:99:29:bb:cb:
91:19:fd:c5:2a:9c:e9:1d:44:39:20:50:97:d8:5a:19:a0:b8:
a8:c7:21:aa:38:81:05:a4:32:a3:86:87:3a:95:78:b7:8a:2f:
90:dd:8c:1e:00:38:33:55:d0:e9:57:ac:8f:6d:fe:05:d4:e4:
fc:1d:86:86:0e:9d:5d:26:55:a2:5c:1e:2f:ac:62:82:74:3f:
56:2f:c1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:08:46 2026 by rpki-client