Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6420F65C841511F19DA381DACE1D38B0.roa
File: 6420F65C841511F19DA381DACE1D38B0.roa (raw, json)
Hash identifier: rPfU9dHupWmJ/BCzjGNQd/24kLO5mA6AU1eX4d800QA=
Subject key identifier: BF:9D:73:52:FC:01:FC:21:8C:E9:6F:52:5B:EE:68:D9:EB:C6:0F:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D9C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6420F65C841511F19DA381DACE1D38B0.roa
Signing time: Mon 20 Jul 2026 08:31:24 +0000
ROA not before: Mon 20 Jul 2026 08:31:20 +0000
ROA not after: Mon 17 Aug 2026 08:31:20 +0000
asID: 153671
IP address blocks: 154.196.170.0/23 maxlen: 24
154.196.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121280 (0x1d9c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 08:31:20 2026 GMT
Not After : Aug 17 08:31:20 2026 GMT
Subject: CN=6a5ddcdc-cc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:06:c9:00:c9:da:c7:1f:5f:20:d3:db:b0:
00:ad:61:d6:d5:d2:e1:26:34:46:5b:dd:63:8a:32:
e9:a5:b9:04:dc:05:14:45:46:aa:e4:5f:71:01:8e:
ad:4f:79:c3:91:5f:54:e8:51:a1:b1:bb:54:18:f8:
e3:e4:eb:c1:6d:ba:2b:cd:95:0b:2b:d1:36:ca:04:
45:88:3a:e8:4d:02:7f:15:6e:20:9b:2a:4d:4f:d5:
96:e1:a8:d3:e1:4b:a2:d3:19:41:b2:c9:09:3d:72:
11:ea:36:60:41:63:b8:01:6b:b3:df:25:a5:25:bd:
3c:8d:d3:94:28:6f:71:05:6a:42:4a:77:0b:fc:5e:
95:50:8a:1c:ef:21:3b:c9:5d:85:4e:48:3f:2f:f1:
06:9e:66:45:c3:52:67:2f:f8:4c:ac:81:21:8f:4a:
18:42:ba:51:d0:95:2d:42:a8:08:58:d3:57:f5:62:
c9:6f:42:80:71:04:24:4e:69:f2:c7:19:9f:7a:27:
6d:03:14:27:78:3c:55:00:fc:9f:bd:2a:81:3b:7b:
58:37:3b:6f:16:c7:09:e9:64:9d:28:7a:cd:b5:bf:
f6:d9:6f:38:e1:a0:d2:a8:b0:9d:66:62:6f:fb:e1:
07:12:29:8b:0a:38:e1:70:4a:80:ef:30:75:c0:ea:
e0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9D:73:52:FC:01:FC:21:8C:E9:6F:52:5B:EE:68:D9:EB:C6:0F:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6420F65C841511F19DA381DACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.170.0/23
154.196.248.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:89:13:e4:71:68:bf:30:5f:3e:7c:44:30:9d:63:6e:13:df:
77:41:ea:82:b6:ce:77:9d:ba:16:ee:3e:db:8b:b7:e6:fa:25:
38:47:bc:f2:cb:27:d9:71:de:09:9d:15:1d:f2:b0:b5:38:1e:
66:d0:6b:bd:d4:93:55:ee:27:70:7a:7f:75:f6:18:cd:8b:78:
16:d1:c7:3f:7b:30:a1:09:60:c9:a1:7f:48:2c:05:3e:49:82:
ae:a7:83:eb:52:4b:25:c3:71:45:71:cd:72:0e:fe:a4:84:72:
e5:a4:da:5c:28:a8:08:8d:f7:11:a6:71:7a:18:4c:56:a6:cf:
72:f6:c0:1e:26:b8:f3:76:b6:99:67:a8:65:f7:6f:89:b8:63:
23:86:ce:6b:4d:46:21:0c:8b:a4:11:4a:3e:75:fc:48:fa:57:
c1:5e:65:d8:bf:ed:84:7e:25:a9:b4:7f:c4:e5:56:aa:eb:ad:
aa:f1:35:05:b1:19:e6:fa:44:e7:2e:6d:85:45:ee:dc:3d:59:
7d:df:8a:44:c1:0e:78:48:a3:e7:4d:2e:c9:49:64:e6:93:5f:
46:7c:2a:62:12:d8:d0:d9:f6:47:77:09:69:d2:af:82:41:cf:
58:d9:95:ea:88:10:1a:c9:9b:0a:1c:72:a1:47:33:69:f6:17:
ea:da:de:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:25:25 2026 by rpki-client