Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9710AFB6720F11F1B75C5FBACE1D38B0.roa
File: 9710AFB6720F11F1B75C5FBACE1D38B0.roa (raw, json)
Hash identifier: TX5ShEewCB7WsdWsD1GEHHd1HJU16I2Nv9Stn/9/LyA=
Subject key identifier: 75:89:CC:9C:D6:EB:6A:9E:5F:E0:F0:53:46:E8:6D:79:B1:37:D0:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D592
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9710AFB6720F11F1B75C5FBACE1D38B0.roa
Signing time: Sat 27 Jun 2026 10:04:31 +0000
ROA not before: Sat 27 Jun 2026 10:04:27 +0000
ROA not after: Wed 05 Aug 2026 10:04:27 +0000
asID: 204548
IP address blocks: 154.222.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120210 (0x1d592)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 27 10:04:27 2026 GMT
Not After : Aug 5 10:04:27 2026 GMT
Subject: CN=6a3fa02f-526d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:48:8a:ea:19:99:40:b3:0e:b2:a1:3f:ea:2c:
e8:fb:44:c5:b9:f4:31:60:c6:0c:2f:85:13:9b:07:
bc:77:d9:1b:04:9b:7e:96:bf:53:71:46:f3:55:f7:
a2:df:31:91:9b:55:0a:5f:9a:7e:4e:4d:72:60:65:
50:21:8e:88:16:bc:ce:67:6b:40:41:7a:06:6a:bf:
ca:ec:ef:1a:28:96:ab:a2:53:5c:49:bc:f2:41:81:
9d:38:62:29:87:9d:2a:75:5d:ef:90:b1:13:72:57:
1e:4a:c0:c5:5d:b8:a3:7b:4a:20:68:f2:84:73:93:
f9:6a:16:bd:98:39:69:a6:36:21:b0:24:78:52:a5:
39:55:90:7f:69:07:e5:22:a2:32:ed:db:5f:c8:be:
db:7f:fd:fc:30:d2:27:60:48:8e:c0:b2:3a:42:cf:
1b:bb:24:e0:31:55:55:4a:2b:c2:2c:08:4a:0a:b9:
36:12:3c:36:a0:b1:f6:15:f6:3b:87:49:dc:84:8b:
c6:c7:97:53:5f:c6:4c:cd:dd:bd:17:c7:0b:99:27:
ce:fe:cd:73:00:d3:ac:b8:d5:5a:9a:9b:84:da:30:
e5:51:24:cf:b0:f5:85:30:f5:55:19:e1:c3:0a:99:
c2:67:36:c9:40:7c:2c:14:43:26:83:7e:85:e3:f6:
4a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:89:CC:9C:D6:EB:6A:9E:5F:E0:F0:53:46:E8:6D:79:B1:37:D0:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9710AFB6720F11F1B75C5FBACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.133.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:50:7c:12:24:99:2a:2f:22:74:bd:ac:17:26:8f:1e:fc:6c:
b0:87:e0:61:06:a0:c4:84:9e:f5:63:26:fe:c2:c7:ba:e0:e4:
39:be:64:dc:fb:76:58:27:87:f1:75:89:84:6c:a6:36:e7:29:
4c:ae:11:7d:82:01:83:ac:b9:27:20:ea:8f:73:c5:eb:ff:81:
32:34:cb:5e:2e:66:a9:9d:9f:9f:d2:9f:77:8f:4d:1f:e2:5f:
30:50:58:88:97:b0:b2:3f:6b:dd:a6:64:6e:75:57:95:f5:3e:
48:52:56:d2:20:b0:0c:83:0d:66:00:c2:9d:f0:4a:d9:5b:c0:
29:aa:a0:af:cb:d9:e8:b7:8d:3e:6b:cd:83:9c:7a:d2:88:7c:
3d:6f:59:5e:62:a8:a2:77:73:ac:17:c8:e3:a6:ab:c4:46:01:
b8:fe:bf:99:d9:db:e6:5b:4c:bc:0e:fe:ed:99:cb:f6:0b:cd:
d9:34:93:bf:50:b2:64:1d:ad:f6:39:91:a0:dd:77:23:01:03:
be:c1:64:73:0c:0f:cf:73:d4:0c:f6:0a:f7:42:ff:32:89:76:
b9:f8:a3:d3:a4:46:bd:d9:19:b5:87:33:c6:86:83:35:17:b6:
7e:26:7e:50:ba:53:5a:45:19:1e:08:35:c2:b3:66:8a:4d:4f:
27:53:a7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:56:11 2026 by rpki-client