Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/972679F0866311F1BA0273EFCE1D38B0.roa
File: 972679F0866311F1BA0273EFCE1D38B0.roa (raw, json)
Hash identifier: /RvpFhqM0Sq/r6GQO7DB/2RLcUTrXAwMs3saJdj8vBE=
Subject key identifier: 09:4E:EB:77:DC:17:2F:2A:CC:A3:D1:3C:BF:6C:F1:0B:CE:DF:9C:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB01
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/972679F0866311F1BA0273EFCE1D38B0.roa
Signing time: Thu 23 Jul 2026 06:56:12 +0000
ROA not before: Thu 23 Jul 2026 06:56:08 +0000
ROA not after: Sun 30 Aug 2026 06:56:08 +0000
asID: 395886
IP address blocks: 154.201.72.0/21 maxlen: 24
154.201.88.0/22 maxlen: 24
154.201.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121601 (0x1db01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 06:56:08 2026 GMT
Not After : Aug 30 06:56:08 2026 GMT
Subject: CN=6a61bb0c-ec44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:33:32:d6:27:17:dc:9b:80:82:ec:c5:74:4b:
59:3b:99:80:0a:25:03:1c:4b:68:83:a2:7e:fc:16:
90:bd:e3:22:10:09:26:cb:67:3d:07:25:dc:18:46:
ee:68:ea:79:a7:51:10:1c:c3:5e:00:c2:22:bd:17:
61:50:bf:c9:4e:00:95:2a:b1:81:07:c3:77:9a:c2:
3f:7e:6b:87:6b:6d:9b:5d:6b:98:9f:76:c8:8f:9f:
cc:63:ce:90:42:d3:1f:c9:01:a6:06:37:af:00:16:
f4:3b:23:fe:2f:e2:19:14:ac:82:00:c3:fc:69:38:
04:b4:fc:12:30:4a:23:30:45:d1:be:02:e0:44:c2:
92:29:bd:ff:df:3b:4f:dd:6b:ab:f8:a7:50:ba:31:
91:da:84:0c:6b:45:ab:73:95:05:2a:b3:2c:2d:e8:
3c:ff:90:af:14:91:25:2b:e7:02:f4:70:4e:10:62:
d4:f3:3a:eb:5e:cb:57:ab:30:99:67:fd:14:66:61:
b3:a6:de:89:f4:73:b5:93:5b:51:6c:9f:a9:86:7d:
1a:63:90:45:3f:c8:a5:03:dd:19:30:ce:dc:55:a0:
58:7c:a5:2e:3b:92:6a:38:54:2b:e1:23:0c:ac:57:
46:9a:2b:c3:ea:82:30:20:03:04:19:4e:81:08:31:
6b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4E:EB:77:DC:17:2F:2A:CC:A3:D1:3C:BF:6C:F1:0B:CE:DF:9C:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/972679F0866311F1BA0273EFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.72.0/21
154.201.88.0-154.201.93.255
Signature Algorithm: sha256WithRSAEncryption
d7:ce:f8:1d:46:8d:8d:40:31:05:f7:5e:23:7a:8f:55:5c:bd:
64:ea:d6:9c:44:6c:26:40:26:8a:3d:6c:c8:1c:d7:85:a2:ca:
5f:5b:c4:26:4c:c7:f8:b1:2b:7d:51:45:22:45:e4:3e:38:3a:
1a:e3:bb:09:12:1b:51:d5:d7:49:3b:69:ee:35:6a:11:c5:e8:
2d:23:99:91:3a:e6:f7:e2:e8:bb:2a:00:44:4a:e3:d5:ab:df:
8e:65:98:bf:bd:29:af:58:eb:9b:5f:3b:12:02:4c:74:9d:a6:
8f:05:b8:4b:59:88:51:e4:e8:05:33:31:ea:03:fb:45:9b:e9:
8c:e3:4d:ae:03:20:96:12:0e:5c:30:2c:45:eb:cd:16:de:9f:
fe:3e:b4:ff:a1:f6:6f:9a:2c:5c:7a:0d:ba:45:ce:1f:55:ce:
7a:fb:dd:4b:d2:26:a9:0d:5c:f6:94:8c:ed:51:01:7f:d5:f0:
ff:e4:20:06:fa:07:fd:0a:30:ef:66:18:49:2c:97:02:5c:d9:
5c:00:18:88:66:46:39:8e:77:02:d1:f4:ed:fd:46:81:30:0e:
3d:d3:90:54:45:e2:48:30:19:9c:e7:b0:11:04:1f:94:a2:c7:
49:54:57:f7:dc:b0:f1:05:09:54:14:d3:09:23:9c:bd:9f:cd:
e9:55:e1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:33:08 2026 by rpki-client