Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AFE17FA706A11F191546CBCCE1D38B0.roa
File: 8AFE17FA706A11F191546CBCCE1D38B0.roa (raw, json)
Hash identifier: F+h5t+lV/0WHK1DJSt7DqY/SZDs9k7kSQB5GxRmiJyc=
Subject key identifier: B1:FD:6C:D6:CA:5A:CD:17:ED:D6:56:68:53:B8:5D:4A:4E:7A:85:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D50C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AFE17FA706A11F191546CBCCE1D38B0.roa
Signing time: Thu 25 Jun 2026 07:50:33 +0000
ROA not before: Thu 25 Jun 2026 07:50:28 +0000
ROA not after: Fri 31 Jul 2026 07:50:28 +0000
asID: 274930
IP address blocks: 154.95.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120076 (0x1d50c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 07:50:28 2026 GMT
Not After : Jul 31 07:50:28 2026 GMT
Subject: CN=6a3cddc9-4223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b3:a5:6c:74:ec:49:6d:26:89:c4:de:aa:44:
0e:0c:c7:d5:c3:77:ce:62:17:a3:3a:02:b6:d0:62:
c9:3b:22:a4:13:99:f2:38:c2:f7:26:be:22:e2:0f:
16:38:ca:2b:24:c6:42:3a:c3:88:30:54:85:56:ad:
51:42:50:7b:20:8e:ea:d8:7b:7a:c7:30:b9:e7:85:
e0:67:cc:15:3a:a1:f9:2d:c7:b1:9c:eb:bc:53:7e:
82:63:21:23:dd:e7:4a:9d:27:65:c8:d8:40:b4:03:
a9:18:1e:a9:24:14:a6:dc:da:9a:22:41:ef:a0:0f:
a1:f7:e7:37:45:73:cf:58:98:f4:b1:ff:95:38:60:
9a:04:18:79:2c:c2:0f:93:7a:90:81:cc:2c:20:68:
84:ee:56:b5:a1:84:32:43:a3:b3:41:de:50:c3:58:
33:c9:92:60:1d:40:72:37:32:9f:49:8d:d7:de:76:
bf:28:1a:f3:5c:2a:6a:17:ce:c2:fb:3c:7b:cb:db:
ce:ae:63:5a:9c:69:5f:a2:68:eb:ad:14:14:54:e5:
0f:d4:60:bb:a4:9b:cd:e5:dc:cb:19:0f:4b:47:64:
38:c3:97:c6:7b:7c:7e:cc:58:79:58:b4:bd:d4:f0:
d2:6f:7f:94:16:04:58:e7:52:b4:fe:f1:0c:72:7e:
d8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FD:6C:D6:CA:5A:CD:17:ED:D6:56:68:53:B8:5D:4A:4E:7A:85:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AFE17FA706A11F191546CBCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.25.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:16:82:32:a0:e4:37:65:c3:43:18:11:60:4a:14:06:db:3b:
56:ad:ec:8e:65:1f:65:8a:92:2a:58:34:c0:18:14:39:5f:5d:
f5:46:52:e7:66:2f:80:71:e3:b0:26:ec:1b:f2:ca:75:01:35:
87:c7:4e:f9:63:58:4c:51:12:47:bc:f6:5c:81:4a:2b:73:e7:
cd:2c:ce:04:21:73:91:db:8a:88:ea:d5:7c:fd:67:48:43:4c:
15:08:ca:9c:d4:a4:f6:65:64:8f:42:b0:e7:2a:2c:06:a6:f4:
4e:be:aa:c6:f6:8a:db:c5:be:5b:c4:af:b8:46:70:06:b8:1e:
60:b6:bb:7e:69:0d:f1:1d:38:c0:c7:9e:3a:32:f7:2b:8d:03:
22:c7:50:c1:e3:93:8c:5d:93:a0:6b:51:f1:0e:81:5d:50:c8:
a8:01:92:5c:86:f0:b7:ad:57:f1:f8:28:9b:af:18:99:15:ec:
0d:41:ce:e0:48:e0:98:13:c2:4f:03:3d:ce:7f:a6:c5:08:e1:
c3:a4:ba:ea:1a:c4:3d:0f:ea:2a:23:f3:47:f3:38:41:f3:7b:
35:84:00:53:b2:3b:c1:c6:bc:25:2f:67:4e:c9:4c:78:58:c4:
dd:d9:43:5d:01:63:dd:9b:f7:7f:8d:71:93:9a:69:91:a1:8f:
4f:c8:87:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:26:19 2026 by rpki-client