Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BAFF0BA866C11F199B6A7A3CE1D38B0.roa
File: 9BAFF0BA866C11F199B6A7A3CE1D38B0.roa (raw, json)
Hash identifier: g36jZnJteYuk9woHyHnTDjgVP/BVUaIzHJfuFGLRayQ=
Subject key identifier: DA:5C:9B:88:5F:87:4E:89:C7:EF:FC:3C:DC:2E:08:56:C0:49:7E:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB1B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BAFF0BA866C11F199B6A7A3CE1D38B0.roa
Signing time: Thu 23 Jul 2026 08:00:45 +0000
ROA not before: Thu 23 Jul 2026 08:00:41 +0000
ROA not after: Tue 08 Sep 2026 08:00:41 +0000
asID: 198243
IP address blocks: 154.222.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121627 (0x1db1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 08:00:41 2026 GMT
Not After : Sep 8 08:00:41 2026 GMT
Subject: CN=6a61ca2d-6fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f8:5d:89:be:3e:70:2e:a3:cf:76:b1:0f:6c:
92:b7:c7:eb:ab:c7:ce:91:08:fb:34:ad:28:02:9c:
b8:3c:66:9c:61:b5:d3:19:71:f1:20:b9:35:7a:e0:
1f:11:7b:54:a4:57:e8:bb:5c:6c:0c:1a:e5:75:03:
bd:02:38:5e:e6:ea:03:c3:6d:5a:53:ae:f2:ce:f9:
d5:24:66:a6:bf:5f:f3:8e:48:48:0a:55:be:55:41:
4b:f6:f3:ad:81:c6:7b:51:62:2a:a0:ae:c8:26:70:
d3:dd:37:12:8e:fa:1f:d4:b8:86:0d:1a:4d:97:d4:
f5:df:d7:2f:af:ae:75:17:85:40:36:0a:b9:45:8e:
29:0a:6f:e6:5b:6e:a9:f8:ba:a2:37:27:c3:34:b9:
72:19:3d:ea:0e:ef:a1:c9:d9:dd:32:36:47:f2:df:
70:fe:6b:bc:8f:43:f6:6a:1b:5a:07:19:ab:ba:1c:
44:d0:1f:5e:3f:5f:c3:c9:f3:7b:45:82:8d:cc:ab:
b5:93:51:5c:c9:0a:27:20:c7:7b:7b:e3:0e:85:1b:
3b:86:4e:5d:21:8c:d6:5b:c3:22:04:3e:9e:25:59:
bd:e1:93:e9:24:b6:2b:12:a7:83:02:7e:dd:12:25:
4b:ee:16:ed:c7:f9:2b:5d:8e:32:0c:31:92:b2:76:
c0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5C:9B:88:5F:87:4E:89:C7:EF:FC:3C:DC:2E:08:56:C0:49:7E:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BAFF0BA866C11F199B6A7A3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.86.0/24
Signature Algorithm: sha256WithRSAEncryption
04:54:a5:26:f9:19:e3:6c:81:d1:43:00:af:2f:15:bf:52:c1:
eb:b7:fe:8d:2c:b1:1b:26:0e:10:ad:12:23:4c:9e:be:8b:79:
34:e4:56:44:20:f5:c3:48:16:b9:30:36:79:84:2c:47:fe:6f:
ac:a4:4d:7e:b3:a4:3e:4a:ad:62:64:fa:f5:55:aa:30:3f:58:
43:93:1a:84:b9:4a:5b:a1:e9:a8:38:7e:af:0a:4e:5d:33:5e:
ba:24:ee:f8:03:16:7f:6b:7f:3b:d4:c0:ab:75:a5:08:4f:ec:
f5:97:a7:b1:50:5a:d2:62:4b:91:39:ca:cb:c2:6c:72:9c:b2:
03:48:1b:be:f8:b1:82:10:c3:86:f6:c4:fe:26:e0:c2:b8:f6:
8e:fc:63:6e:5d:9d:25:09:55:9d:5a:7c:f1:0c:b3:9b:1b:da:
a8:9d:a6:f7:74:14:d4:e3:ca:81:3a:a8:d3:22:f7:64:f6:15:
7e:eb:88:ce:ab:8b:fe:a6:3f:0e:2e:e2:9a:43:e8:c7:1a:67:
f4:02:eb:04:ba:11:d0:57:dc:8e:27:fa:7e:0d:04:62:18:70:
3c:41:fe:66:b3:ad:f3:87:8a:80:36:a9:cd:7a:9a:30:6e:31:
c6:da:ef:fc:52:a0:52:6b:1f:c4:cb:13:4f:49:8c:c2:da:fb:
1f:91:c4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:43:51 2026 by rpki-client