Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/928628986FCD11F1B0BC18FCCE1D38B0.roa
File: 928628986FCD11F1B0BC18FCCE1D38B0.roa (raw, json)
Hash identifier: S5Wl/eNh3XdWxAWl/EFtN8yKYCRK9HFyjn8D2Lj9p9E=
Subject key identifier: 76:49:2B:82:20:F7:9A:6F:BE:7A:F0:7D:F8:01:1B:1F:5B:66:93:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D4DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/928628986FCD11F1B0BC18FCCE1D38B0.roa
Signing time: Wed 24 Jun 2026 13:06:54 +0000
ROA not before: Wed 24 Jun 2026 13:06:50 +0000
ROA not after: Sat 01 Aug 2026 13:06:50 +0000
asID: 139880
IP address blocks: 154.194.128.0/18 maxlen: 24
154.209.160.0/19 maxlen: 24
154.214.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120029 (0x1d4dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 13:06:50 2026 GMT
Not After : Aug 1 13:06:50 2026 GMT
Subject: CN=6a3bd66e-68dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:08:ea:29:86:17:53:17:7b:1a:d0:65:04:c4:
b4:d4:e1:d5:e4:a3:5f:a2:bf:3a:a5:be:1c:16:1c:
e9:e6:84:08:6f:ab:47:7d:f8:13:ec:10:c6:20:fb:
25:44:08:fa:59:05:87:f4:21:8b:c4:74:36:fa:dc:
e5:29:84:3d:83:f9:3c:ed:31:b5:a9:48:f3:a5:86:
6d:b5:5c:3a:16:ff:00:f0:b6:12:66:6f:32:92:35:
22:ee:c7:1e:f0:85:c0:d4:0f:34:d8:5a:6b:72:37:
b9:f9:13:80:87:40:12:8c:6b:f8:d9:e2:cf:8e:ce:
03:db:e2:a1:8f:22:f8:ea:6e:dc:1a:7a:0d:cb:98:
d8:07:b6:13:16:87:d0:1d:96:dc:08:a1:39:b1:c4:
2b:b0:c0:0e:f0:56:f1:c1:68:cb:bc:d4:ee:71:b2:
8a:44:92:c2:74:6f:ed:32:23:06:d5:d4:d6:97:71:
ec:13:5f:a4:54:b3:01:3d:49:ee:8a:05:13:7d:9f:
60:66:de:e3:9a:dd:b3:90:40:f8:ae:48:61:b8:ae:
f5:d0:d9:93:c0:b1:c0:00:21:f5:27:6b:2c:d1:53:
80:e2:53:84:54:e2:2c:32:e8:5c:e7:b7:03:7d:c0:
ee:ea:b9:da:48:38:6f:8f:63:a5:16:85:98:77:ac:
e5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:49:2B:82:20:F7:9A:6F:BE:7A:F0:7D:F8:01:1B:1F:5B:66:93:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/928628986FCD11F1B0BC18FCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.128.0/18
154.209.160.0/19
154.214.64.0/18
Signature Algorithm: sha256WithRSAEncryption
40:aa:40:65:8a:8d:ac:19:b4:37:81:9c:22:52:f2:d0:39:3e:
49:20:bc:ed:5c:a1:47:46:7b:1e:2c:b1:bf:c4:3d:95:3a:74:
c8:e0:27:af:05:8c:e8:f9:d8:1f:a5:d9:3c:53:c5:d5:4c:97:
ae:ec:ad:9c:63:62:6f:c8:4a:3d:e2:88:e6:6c:ff:4c:49:66:
42:9c:00:19:f1:8b:4c:a2:28:a4:1c:02:dc:c1:cb:f5:a8:b1:
26:48:a8:47:3a:a4:3d:17:00:bc:cd:ee:9a:a7:49:6f:3a:97:
ba:af:42:13:94:17:a7:39:b7:70:14:30:ee:31:8f:a3:26:ec:
8c:66:67:af:a6:fe:1f:25:39:ea:27:ee:e0:d9:14:21:b1:eb:
6c:f8:0a:65:16:0a:b9:60:5f:12:62:b5:3f:44:18:66:3b:72:
b3:24:6c:64:ae:b0:0f:52:57:bb:85:c5:e2:a3:fe:65:50:2d:
ed:f4:6b:f4:e5:26:5c:9d:e6:66:2c:ca:e2:30:0f:41:c7:b8:
f2:e0:ef:32:6b:9c:47:ed:83:ab:5a:6e:ef:64:72:3b:da:a8:
84:3f:a9:f2:9f:81:57:10:82:8b:7a:cb:16:fb:1f:f3:25:74:
76:6d:a0:c6:66:58:7c:d8:fa:5d:cb:09:90:14:f9:e9:84:ab:
27:a5:2d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:13:45 2026 by rpki-client