Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9B4A7CE816811F1BFE25204CF1D38B0.roa
File: D9B4A7CE816811F1BFE25204CF1D38B0.roa (raw, json)
Hash identifier: ra0ysxzSsnX+HvDuSdQrQIk0t9ZJkuPJrSuAZLgNY10=
Subject key identifier: 54:26:E0:C1:17:0A:FE:4A:0B:70:E5:38:24:96:1B:A2:3F:C0:71:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D936
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9B4A7CE816811F1BFE25204CF1D38B0.roa
Signing time: Thu 16 Jul 2026 22:51:16 +0000
ROA not before: Thu 16 Jul 2026 22:51:12 +0000
ROA not after: Thu 20 Aug 2026 22:51:12 +0000
asID: 273155
IP address blocks: 154.200.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121142 (0x1d936)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 16 22:51:12 2026 GMT
Not After : Aug 20 22:51:12 2026 GMT
Subject: CN=6a596064-b66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a1:1f:70:33:25:ee:79:4f:d9:a5:a1:be:51:
8a:34:29:ca:8e:b0:5e:e0:40:ac:6e:8e:7d:d0:3f:
75:b1:3e:2e:f8:18:fb:3b:6b:54:d2:9d:37:43:d2:
98:3f:ab:2d:a0:00:fe:c8:c4:cd:fd:d8:57:32:54:
64:ee:28:42:5f:3b:ea:cb:c8:15:33:44:d9:ed:20:
8d:70:6b:3d:c9:f1:6a:21:ed:01:ef:84:81:0b:42:
1b:7d:94:ff:d9:14:bb:28:df:e3:0a:25:ea:d2:f6:
2d:18:d8:f3:bb:6c:1b:e6:07:86:fc:e6:e1:50:86:
25:30:c8:16:02:eb:16:10:8c:c5:b1:c5:d3:49:40:
73:64:be:9d:f1:d4:cf:81:27:b4:d6:d8:81:25:d7:
44:5a:6f:ff:33:ca:7f:7b:a4:7e:a6:0f:5b:7d:fa:
c0:00:7a:19:e4:67:a6:b6:2a:e0:92:ef:c9:a8:79:
b1:f0:3e:0f:e1:c8:39:76:3f:5b:5b:4f:3d:88:11:
f4:c7:50:23:29:c9:12:8e:c2:9f:bf:59:45:3c:d0:
02:85:36:6a:c6:91:0e:03:08:b1:fb:29:3f:1f:2d:
88:8e:3b:e0:44:a4:a4:19:ca:20:4b:a6:43:d6:29:
2a:51:5e:50:ae:d7:30:d3:c0:95:e7:11:b2:df:e2:
35:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:26:E0:C1:17:0A:FE:4A:0B:70:E5:38:24:96:1B:A2:3F:C0:71:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9B4A7CE816811F1BFE25204CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.236.0/22
Signature Algorithm: sha256WithRSAEncryption
10:db:fe:78:93:ae:a3:1a:ca:92:ca:86:a9:08:ce:77:a8:11:
71:74:d7:fc:2e:ad:92:7d:c3:c8:e4:93:6d:d9:e0:71:fc:5c:
a6:1f:d4:8f:77:bf:fd:1b:32:50:0e:93:a0:e3:53:df:68:c1:
16:33:c4:cb:8f:d8:ea:b0:71:50:4d:6c:de:93:9c:95:ce:38:
c2:06:20:98:d1:05:ff:4e:90:00:e1:8e:ba:05:f6:38:a1:a5:
0e:86:b3:aa:5b:5a:c9:6b:15:36:a1:e9:52:53:f5:9d:3e:eb:
fa:e4:5f:9a:2b:d2:00:2f:87:e1:d8:d6:4a:f9:b8:35:68:45:
3a:56:83:87:c6:87:9a:0a:e1:58:fc:08:24:48:3e:7e:85:bd:
1e:d4:c7:f6:50:63:f8:09:f3:8d:77:b1:fb:9a:fe:fe:d6:36:
41:00:53:fa:56:6f:c4:4e:5f:9f:10:36:0a:d8:93:52:f0:97:
fe:92:b8:16:b5:c9:0f:12:16:ee:73:2d:d3:51:9f:12:5c:e3:
b7:a8:6c:0b:e6:e2:56:f4:16:31:c0:11:b0:92:4c:0c:db:40:
00:07:b0:51:ae:b2:a3:8d:de:69:60:dc:4f:ca:ef:62:b6:58:
af:28:19:63:c1:f5:91:53:43:61:66:f7:ee:23:86:ca:f0:16:
58:19:b7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:19:34 2026 by rpki-client