Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0C6715E7FAF11F1B55DD2C3CE1D38B0.roa
File: B0C6715E7FAF11F1B55DD2C3CE1D38B0.roa (raw, json)
Hash identifier: 2Sht1TQ6Az3NqQIU1aDiAy/3qYJriSFPzQdOoHRGpQg=
Subject key identifier: 13:56:63:5F:A6:0C:D1:2B:CE:57:2C:1A:0E:A9:CE:F5:51:F2:FB:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D8F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0C6715E7FAF11F1B55DD2C3CE1D38B0.roa
Signing time: Tue 14 Jul 2026 18:13:19 +0000
ROA not before: Tue 14 Jul 2026 18:13:14 +0000
ROA not after: Thu 20 Aug 2026 18:13:14 +0000
asID: 29802
IP address blocks: 154.90.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121076 (0x1d8f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 18:13:14 2026 GMT
Not After : Aug 20 18:13:14 2026 GMT
Subject: CN=6a567c3f-0926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d4:29:3c:d9:3c:56:d5:20:81:b2:56:8d:64:
f9:ca:c0:aa:d9:9e:26:e5:71:1d:b8:c3:e6:27:19:
21:b0:4d:31:e8:16:02:8b:54:20:33:ad:30:39:bb:
89:7f:ba:7d:d6:09:84:ec:4c:be:6c:54:40:85:05:
3e:6a:e8:59:43:c1:c6:18:3e:a3:df:c5:a2:9a:e4:
8f:6f:11:24:e3:f1:99:a0:d5:26:13:e6:4d:cf:b1:
a6:23:c9:f6:11:4c:7d:fa:ca:21:3d:49:bb:75:1b:
94:ab:da:76:49:7a:3b:b6:af:f1:f4:e1:96:4c:7d:
c4:40:cc:63:0f:93:4f:00:7b:0a:be:b6:b9:90:69:
c1:b8:c0:5f:27:70:e6:31:40:a9:df:69:cf:25:56:
60:e0:da:de:2c:fa:d2:b5:fe:83:7a:51:0b:24:8f:
f7:1c:62:41:5a:10:ac:3f:75:5c:6d:22:50:fd:8d:
21:cc:ad:c9:ee:df:42:b6:06:fd:ce:87:01:7b:3e:
fa:a8:a0:54:f3:f2:78:00:92:d9:b8:cc:2f:97:a4:
e9:fd:13:b6:ef:7c:8a:21:08:75:96:34:bb:df:b2:
d1:39:7d:aa:85:66:eb:99:3b:c8:92:b6:ca:fd:88:
b8:62:b2:c8:03:68:dd:8c:70:e2:d8:03:75:e7:3b:
84:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:56:63:5F:A6:0C:D1:2B:CE:57:2C:1A:0E:A9:CE:F5:51:F2:FB:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0C6715E7FAF11F1B55DD2C3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.71.0/24
Signature Algorithm: sha256WithRSAEncryption
66:ac:e2:56:a7:28:8a:7b:85:7a:34:0d:9e:72:97:2a:02:e5:
ed:80:d4:0f:22:60:12:92:ad:ed:7b:df:5e:c5:0c:83:72:8e:
0e:16:0a:52:09:c0:57:b8:c4:f3:d6:ee:fa:42:cd:3f:7e:d8:
bd:7e:18:c7:48:6a:3e:ac:f8:f7:0f:2c:cc:b9:47:7f:d4:ea:
5c:17:c2:08:40:d8:86:ac:38:8f:cd:da:aa:c5:cf:00:f5:01:
aa:f3:35:eb:28:d4:16:af:1b:58:c9:f7:c7:bb:4c:5f:6f:d7:
bf:49:d0:26:59:35:33:84:c6:8b:63:65:e4:ed:20:e9:19:fa:
bf:46:9b:c3:02:58:19:77:c8:37:17:b9:6d:be:16:76:be:28:
0b:6f:46:dd:e5:02:b1:75:5e:b7:b0:3a:c4:25:7b:ce:c9:ce:
50:f2:b1:94:11:88:5a:2e:65:9f:29:b0:22:71:f1:91:3e:24:
31:1b:07:90:85:6c:d7:61:37:3f:c4:c9:be:82:94:a7:06:2c:
3e:c7:01:ff:f9:ad:0c:f3:30:dd:0a:aa:77:92:21:81:38:e7:
41:0e:ae:40:45:e5:82:71:c0:5a:ba:fb:04:26:da:8e:6a:25:
09:09:7f:bf:36:a6:8c:2a:11:d5:61:c2:71:0b:7f:20:c1:db:
3a:25:46:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:33 2026 by rpki-client