Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B9DAAF0713011F18114E9F1CE1D38B0.roa
File: 9B9DAAF0713011F18114E9F1CE1D38B0.roa (raw, json)
Hash identifier: IYjs4LqvYodV9DR0kV6SsqDvOWnPT1BrrLpK6A2D+S4=
Subject key identifier: BE:6A:20:FA:76:E1:6A:4A:89:56:D9:80:F8:DC:52:89:C9:87:D4:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D53D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B9DAAF0713011F18114E9F1CE1D38B0.roa
Signing time: Fri 26 Jun 2026 07:28:21 +0000
ROA not before: Fri 26 Jun 2026 07:28:17 +0000
ROA not after: Tue 27 Oct 2026 07:28:17 +0000
asID: 20473
IP address blocks: 154.81.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120125 (0x1d53d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 07:28:17 2026 GMT
Not After : Oct 27 07:28:17 2026 GMT
Subject: CN=6a3e2a15-101f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:19:f4:ef:77:24:47:98:01:bc:d2:ed:d5:
0b:20:26:82:33:18:b2:92:8a:e1:cd:d7:14:95:88:
20:30:d5:f9:65:86:22:28:fe:c3:c3:fa:4d:d4:24:
ea:a0:82:46:ad:b5:e8:78:06:84:5d:15:c4:09:9e:
18:60:90:ec:9d:fd:90:d4:f0:33:40:81:ac:08:61:
b0:7a:fb:9e:90:34:1c:79:e5:af:6f:4f:1b:26:bc:
fb:66:03:46:e3:38:ba:dd:73:22:90:12:93:38:8d:
d7:b4:b6:7b:27:aa:ac:70:13:93:89:fb:83:e2:e5:
39:3e:40:44:fb:c9:d2:db:ac:89:9c:45:58:f2:35:
4d:97:9b:f8:82:ad:af:20:2c:c7:11:97:4b:b2:a1:
41:7b:ee:0f:e5:b1:50:c9:fc:d6:01:35:9b:7c:45:
d6:a1:21:2d:7e:fd:4e:46:aa:9e:63:26:40:4f:cc:
ce:23:f2:16:b2:9e:36:2b:a4:84:ab:0d:64:9d:9a:
0b:d8:b8:79:61:fa:be:72:2f:5a:bf:25:f7:66:d9:
c6:f5:d8:6f:4f:6f:ef:57:6e:f6:45:b6:75:00:2c:
4a:8f:5f:ba:25:24:22:6e:09:a8:78:33:61:f6:68:
38:19:17:a6:f3:b7:2c:f3:78:27:b4:ec:1d:2e:d3:
62:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6A:20:FA:76:E1:6A:4A:89:56:D9:80:F8:DC:52:89:C9:87:D4:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B9DAAF0713011F18114E9F1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.156.0/24
Signature Algorithm: sha256WithRSAEncryption
86:77:64:ce:aa:79:85:a7:99:4b:30:76:7b:2c:57:a4:a3:a1:
92:7c:8a:ce:39:c9:55:65:c6:79:d9:db:83:28:f9:15:72:ae:
9e:6a:9c:84:00:ac:53:11:6d:36:48:e7:79:22:69:7e:1a:56:
24:8a:9b:b1:c3:a3:85:3a:c0:27:c0:90:d8:cc:e4:a2:a5:ec:
b7:49:11:6e:1b:ad:ca:48:97:24:e0:0f:9f:c8:05:d2:02:02:
c4:e7:49:bf:9d:6c:47:b4:ba:40:36:1f:8b:00:bb:f5:bd:8a:
0a:5f:76:21:46:50:9e:3d:d6:d4:c9:67:cd:e2:ad:24:95:6b:
b6:dd:fd:0a:22:22:9e:46:70:95:a0:65:e7:d7:ca:87:00:71:
4a:a3:ca:a8:b4:cf:b1:71:ac:28:76:da:e5:92:32:98:03:3e:
08:cc:27:8e:0f:b4:76:ed:65:7c:5c:cf:33:5b:ba:26:53:89:
89:81:a7:0c:33:5a:0e:62:df:31:ea:0e:07:3e:08:d9:43:55:
8c:bd:34:66:5b:c2:1b:32:62:62:78:5e:b3:2f:3b:02:1e:04:
72:52:e4:8d:13:bc:03:64:d0:b0:c8:7b:fa:5d:85:8b:ad:9b:
20:3a:77:ea:be:a6:3a:88:66:b9:be:e4:fb:1e:b6:6c:21:c7:
ff:b3:87:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:57:39 2026 by rpki-client