Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A7717886FC311F18B65A8BECE1D38B0.roa
File: 9A7717886FC311F18B65A8BECE1D38B0.roa (raw, json)
Hash identifier: CtoDSgpbOtzpwG6uyJ7I9iq7nI63VCuPRpFtsWkcoAQ=
Subject key identifier: 83:AC:6E:54:F3:F4:6F:2F:95:74:27:B2:EA:B9:6A:5C:7A:FD:43:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D4C9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A7717886FC311F18B65A8BECE1D38B0.roa
Signing time: Wed 24 Jun 2026 11:55:33 +0000
ROA not before: Wed 24 Jun 2026 11:55:28 +0000
ROA not after: Thu 30 Jul 2026 11:55:28 +0000
asID: 401701
IP address blocks: 154.201.64.0/19 maxlen: 24
154.201.94.0/23 maxlen: 24
154.201.94.0/24 maxlen: 24
154.201.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120009 (0x1d4c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 11:55:28 2026 GMT
Not After : Jul 30 11:55:28 2026 GMT
Subject: CN=6a3bc5b5-4732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:3d:5d:26:17:1b:6d:3d:31:81:d1:91:65:
72:12:8b:cb:63:eb:a5:e3:05:3d:01:84:20:81:84:
c3:09:18:28:d9:dd:de:02:13:2d:01:4e:0d:4e:ac:
52:62:87:4a:d5:3d:88:9f:68:81:67:27:9f:b5:9b:
ad:25:da:f7:d8:88:4a:f0:3a:88:17:31:4b:fb:2a:
02:12:49:5e:9b:f3:11:17:5d:18:13:9a:e5:f5:02:
6a:70:ac:6c:83:ba:14:f6:a2:dc:c8:17:b2:f0:85:
dd:3d:3e:58:13:ed:10:94:a4:1f:13:3a:e3:03:72:
ea:71:11:43:c5:dc:01:2f:7e:f3:10:6a:db:b9:d2:
61:c8:63:51:0c:de:17:3f:ef:39:6c:e1:4e:3f:c9:
0b:a0:17:5a:55:21:5c:64:7c:61:33:59:bc:08:b8:
df:7c:82:9d:85:de:dc:78:a4:5b:dd:5f:be:af:d1:
20:4b:1e:4b:75:fb:c8:46:08:88:63:51:03:07:40:
3b:87:69:a3:6b:a8:0b:ea:d6:8d:f2:cd:84:21:87:
02:a6:95:46:c8:80:85:b4:79:79:f7:c7:74:70:46:
9b:f2:67:9d:12:8d:79:b4:7d:7d:7a:2f:b3:11:98:
5e:42:14:3a:bd:2b:89:24:2b:a5:01:03:62:35:b0:
36:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AC:6E:54:F3:F4:6F:2F:95:74:27:B2:EA:B9:6A:5C:7A:FD:43:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A7717886FC311F18B65A8BECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
c8:6c:e8:94:db:6c:77:17:42:bb:5e:f1:b7:be:c7:73:da:a8:
30:20:58:cd:59:22:1d:a4:70:5b:4a:0a:e1:48:5f:c7:40:43:
28:20:23:52:b5:9c:0b:d5:7b:07:a3:35:3b:cc:5c:38:38:7c:
25:cb:f9:16:b1:b6:6c:27:0b:d6:f8:ef:fb:57:d9:dc:28:3b:
34:cb:93:a9:fe:de:46:57:d9:56:72:5b:e0:64:6f:44:70:bf:
37:a3:4f:88:58:92:b2:42:8e:d1:76:98:fb:67:50:4b:bc:24:
4f:4e:c6:10:37:54:33:89:ae:51:dd:c5:ba:82:92:84:d9:8f:
6d:48:58:02:b8:9e:99:16:51:d4:1b:22:e2:b6:d0:3c:37:e6:
17:fa:0a:79:69:31:ae:7c:72:d5:cf:b6:27:f8:f0:b7:8e:17:
d1:41:bc:64:11:47:1a:5c:95:a2:bb:dc:ef:ae:a1:02:d2:1c:
57:b1:4a:9d:fb:03:cc:96:8e:eb:98:55:8f:1b:f9:7f:94:db:
00:44:c5:ee:19:b5:93:52:6d:48:71:f4:ff:90:7c:df:53:91:
19:98:cf:d9:35:16:88:da:5a:5b:68:9a:1c:74:3a:29:e7:f4:
a5:37:ed:2f:1a:9a:25:0c:ad:0d:47:83:a5:37:92:a2:f1:77:
90:e6:f8:39
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdTJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjI0MTE1NTI4WhcNMjYwNzMwMTE1NTI4WjAYMRYw
FAYDVQQDEw02YTNiYzViNS00NzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAySU9XSYXG209MYHRkWVyEovLY+ul4wU9AYQggYTDCRgo2d3eAhMtAU4N
TqxSYodK1T2In2iBZyeftZutJdr32IhK8DqIFzFL+yoCEklem/MRF10YE5rl9QJq
cKxsg7oU9qLcyBey8IXdPT5YE+0QlKQfEzrjA3LqcRFDxdwBL37zEGrbudJhyGNR
DN4XP+85bOFOP8kLoBdaVSFcZHxhM1m8CLjffIKdhd7ceKRb3V++r9EgSx5LdfvI
RgiIY1EDB0A7h2mja6gL6taN8s2EIYcCppVGyICFtHl598d0cEab8medEo15tH19
ei+zEZheQhQ6vSuJJCulAQNiNbA2OQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIOs
blTz9G8vlXQnsuq5alx6/UP6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85QTc3MTc4ODZGQzMxMUYxOEI2NUE4QkVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmslAMA0GCSqGSIb3DQEB
CwUAA4IBAQDIbOiU22x3F0K7XvG3vsdz2qgwIFjNWSIdpHBbSgrhSF/HQEMoICNS
tZwL1XsHozU7zFw4OHwly/kWsbZsJwvW+O/7V9ncKDs0y5Op/t5GV9lWclvgZG9E
cL83o0+IWJKyQo7Rdpj7Z1BLvCRPTsYQN1Qzia5R3cW6gpKE2Y9tSFgCuJ6ZFlHU
GyLittA8N+YX+gp5aTGufHLVz7Yn+PC3jhfRQbxkEUcaXJWiu9zvrqEC0hxXsUqd
+wPMlo7rmFWPG/l/lNsARMXuGbWTUm1IcfT/kHzfU5EZmM/ZNRaI2lpbaJocdDop
5/SlN+0vGpolDK0NR4OlN5Ki8XeQ5vg5
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:46:52 2026 by rpki-client