Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A826832E7D3211F19857E3A5CE1D38B0.roa
File: A826832E7D3211F19857E3A5CE1D38B0.roa (raw, json)
Hash identifier: Vo1v8OgAltmDgaS9k3aqhWhsX8a0jkzXTwqKkyQNTQU=
Subject key identifier: 55:02:A0:4D:F6:B2:46:7A:9F:9B:1F:24:83:59:72:D5:E7:47:AC:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D830
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A826832E7D3211F19857E3A5CE1D38B0.roa
Signing time: Sat 11 Jul 2026 14:13:15 +0000
ROA not before: Sat 11 Jul 2026 14:13:10 +0000
ROA not after: Tue 18 Aug 2026 14:13:10 +0000
asID: 62563
IP address blocks: 154.94.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120880 (0x1d830)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 14:13:10 2026 GMT
Not After : Aug 18 14:13:10 2026 GMT
Subject: CN=6a524f7b-054d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:06:df:2a:6b:8f:99:a0:d1:51:d2:94:04:c2:
df:04:6c:15:a9:eb:9b:84:43:63:5c:b6:4b:15:62:
83:c4:8b:3c:76:20:a3:89:59:e7:c2:bc:98:7b:79:
de:4e:8b:6a:6d:37:1c:0d:c3:5f:79:ed:f1:30:52:
0b:96:0f:a2:b5:23:16:9a:9c:5f:28:f4:6a:1f:e4:
65:de:06:a3:dd:a7:6d:6b:2a:61:f5:ca:c6:ae:71:
a6:9c:3d:ee:e7:6b:97:cd:a8:bd:2d:bd:df:f8:5a:
d9:bf:d9:d8:a6:54:b2:b7:05:c7:d9:24:64:50:e9:
09:15:79:6d:ac:ed:80:72:62:47:16:0d:d4:76:a8:
c1:98:97:1f:35:3f:40:7c:62:76:e9:7b:8e:a5:0d:
3e:c5:b2:a7:92:f1:e6:c3:95:7b:81:96:92:c6:94:
72:f8:28:8f:d6:c8:d9:97:84:4e:75:ae:72:37:e2:
00:90:e3:5d:b9:09:69:a6:23:3c:4e:f0:f9:ec:6d:
cb:fa:e3:95:6b:a3:92:5a:5a:2a:f2:f1:20:20:ac:
34:68:9c:61:7d:3d:4a:bf:d8:80:b2:40:64:8b:aa:
92:77:71:45:2a:f5:c0:77:f7:8e:77:48:b0:91:e4:
28:bc:63:f8:9f:d4:2e:0a:45:47:bb:c2:4c:a8:cd:
87:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:02:A0:4D:F6:B2:46:7A:9F:9B:1F:24:83:59:72:D5:E7:47:AC:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A826832E7D3211F19857E3A5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.41.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:a1:06:ad:bb:0e:ed:c2:cb:60:09:fd:d1:ba:1e:65:03:e0:
ee:6f:ab:26:be:2e:03:36:2e:f0:d9:4a:a9:b0:2f:2c:83:eb:
63:72:5b:d1:da:bd:e9:31:70:4a:ec:71:7f:51:94:74:56:d1:
91:75:9e:3c:16:55:ce:1c:66:26:ca:d5:58:ae:a7:32:cc:36:
bc:4b:c9:4d:72:38:02:68:8c:cf:df:37:00:4e:35:83:ad:37:
73:92:00:f3:c7:d4:7e:92:ae:10:96:90:2d:43:e3:16:12:4b:
c6:96:a4:92:4c:ea:49:ce:bc:6d:b5:e5:b5:a5:33:46:d6:bd:
2c:7c:1d:c2:c8:87:7f:97:f3:ab:35:70:54:32:83:3e:d9:d2:
31:b3:20:22:58:87:b2:02:0e:7c:2a:2e:d2:14:ad:97:d6:15:
e7:78:d1:08:52:b5:ae:96:9f:ad:c2:ef:ad:42:8d:0d:e4:eb:
d3:3a:94:50:1a:5c:c9:46:f9:e0:31:9b:a3:0a:af:2c:3e:f9:
99:89:98:96:86:fc:bb:7f:71:a0:98:b4:ed:92:0d:ac:75:2f:
85:8a:de:29:7a:37:4f:51:31:b4:fe:e4:e9:19:0a:2d:14:90:
ab:ef:05:a2:a2:bc:6c:74:59:df:3d:76:c4:27:94:26:97:df:
fc:3e:02:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:39:37 2026 by rpki-client