Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/723C81F6810511F1B4A1B4B3CE1D38B0.roa
File: 723C81F6810511F1B4A1B4B3CE1D38B0.roa (raw, json)
Hash identifier: aj94mzjrUcmCaKnorArxNFI74GqnktM9zXj7bJ87nac=
Subject key identifier: 4C:C8:83:3C:85:14:51:CB:8D:D1:37:72:DA:32:0B:F5:D6:42:EF:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D92C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/723C81F6810511F1B4A1B4B3CE1D38B0.roa
Signing time: Thu 16 Jul 2026 10:59:42 +0000
ROA not before: Thu 16 Jul 2026 10:59:38 +0000
ROA not after: Mon 24 Aug 2026 10:59:38 +0000
asID: 212238
IP address blocks: 154.222.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121132 (0x1d92c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 16 10:59:38 2026 GMT
Not After : Aug 24 10:59:38 2026 GMT
Subject: CN=6a58b99e-3a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a6:c0:cc:76:80:fe:5d:65:52:0b:ad:59:05:
d2:41:f1:18:00:5d:b4:5f:60:38:09:29:e6:d3:f5:
50:55:15:ef:bb:54:6d:ea:c9:b1:52:55:4c:7b:66:
70:a5:c4:d3:28:55:bf:87:95:0d:ef:0e:5a:5b:ff:
a3:d9:b2:1d:2a:b5:77:a0:98:ee:4b:4a:fd:3c:67:
ad:56:72:0f:d6:b1:61:65:d0:85:3c:b8:aa:49:c7:
67:cd:48:cc:27:77:b0:4c:8c:21:f0:3d:aa:8b:22:
1f:83:bb:56:79:43:85:cd:ba:cd:6a:fd:a1:35:10:
3c:50:00:76:03:4d:b1:43:1e:1c:2f:5e:ec:fb:ad:
3e:c2:9c:19:69:60:23:30:cc:f5:60:00:ce:d0:d4:
6f:46:d1:94:a1:08:17:03:f7:00:49:3f:f2:e1:45:
1b:a5:f5:cd:3d:b3:fe:1b:a5:84:73:57:63:0d:4f:
4a:8c:1e:a6:1c:f3:81:81:4e:57:1d:17:5e:c0:bd:
bb:50:b3:69:4c:da:12:2d:c9:f0:28:6b:e3:fe:d7:
da:1c:60:ab:57:13:51:10:3b:f9:a9:8e:47:ff:c1:
47:90:9c:64:67:6a:bb:85:92:a8:f7:f1:47:ad:dd:
f1:e0:1f:59:74:74:57:f3:23:6d:8d:60:9c:b5:7a:
7d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C8:83:3C:85:14:51:CB:8D:D1:37:72:DA:32:0B:F5:D6:42:EF:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/723C81F6810511F1B4A1B4B3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.9.0/24
Signature Algorithm: sha256WithRSAEncryption
27:5e:67:4b:a8:d8:a1:59:de:cd:90:15:17:e6:35:43:82:89:
09:d1:80:f8:aa:4d:16:61:5a:b1:64:a4:28:aa:c0:7c:6f:4f:
16:3b:c9:2f:b2:51:d5:5a:b2:6f:cc:d5:ad:31:fd:da:ed:b6:
11:db:b1:7b:29:48:c1:04:a2:df:15:e2:0e:65:3b:26:89:d0:
07:e2:37:58:33:97:5a:46:40:ce:f4:ea:99:2f:93:82:94:6e:
8c:f4:8d:71:e1:3d:b3:87:89:2e:54:c0:62:4d:01:db:0e:c9:
33:f6:dd:99:24:7c:e0:d6:a6:c0:a4:93:80:ed:03:33:b8:92:
d8:93:eb:13:3e:82:53:37:c0:63:6f:cc:59:b8:73:d8:89:02:
bc:2b:8c:c1:45:88:fc:57:a2:3c:a6:a5:88:51:16:45:a7:14:
2d:c4:db:28:19:74:43:86:12:81:bb:90:a5:bd:12:fe:07:20:
bb:07:76:0b:4a:e4:c2:67:28:ee:dc:3d:e5:3c:a9:10:4a:68:
f8:c1:78:bd:b1:56:c7:c5:28:af:c1:bc:86:f7:16:4c:ae:be:
5d:ba:31:bf:f4:34:36:6f:75:6a:14:4f:41:1e:eb:3a:6f:28:
81:6f:9b:90:18:3c:99:2e:35:e3:ae:5f:d0:34:de:12:61:46:
bc:78:bd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:16:30 2026 by rpki-client