Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7623E8D2372111F19C4FB5A6CE1D38B0.roa
File: 7623E8D2372111F19C4FB5A6CE1D38B0.roa (raw, json)
Hash identifier: LgqE0IkxFNOI4zzLsCtZYTuCl2xBTPZvPVTKQb9Ags8=
Subject key identifier: E9:CA:D3:7F:73:B7:BB:4A:7F:CC:79:2B:76:2B:D1:9C:A8:F8:E6:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C4FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7623E8D2372111F19C4FB5A6CE1D38B0.roa
Signing time: Mon 13 Apr 2026 10:13:48 +0000
ROA not before: Mon 13 Apr 2026 10:13:44 +0000
ROA not after: Sat 16 May 2026 10:13:44 +0000
asID: 22773
IP address blocks: 154.82.12.0/24 maxlen: 24
154.82.13.0/24 maxlen: 24
154.82.14.0/24 maxlen: 24
154.82.15.0/24 maxlen: 24
154.85.12.0/24 maxlen: 24
154.85.22.0/24 maxlen: 24
154.85.23.0/24 maxlen: 24
154.85.104.0/24 maxlen: 24
154.85.105.0/24 maxlen: 24
154.85.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 15:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115962 (0x1c4fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 13 10:13:44 2026 GMT
Not After : May 16 10:13:44 2026 GMT
Subject: CN=69dcc1dc-0acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:18:6a:8f:5e:37:78:df:29:30:8b:2f:8f:34:
17:71:6b:13:6b:f7:95:59:d3:44:9c:2a:cf:19:9e:
fb:0f:8d:ea:d0:4b:1f:53:1d:26:07:01:4b:cd:25:
13:b2:16:71:89:7e:f2:57:11:e5:fb:3b:af:57:75:
78:89:07:f1:4c:05:46:e5:1b:c4:13:d6:d9:ba:d1:
0b:46:2e:b5:5e:cf:2d:0c:01:81:28:80:28:02:69:
ce:77:65:67:88:e2:74:2c:37:ab:07:75:e9:ba:b1:
7c:0c:f2:86:b9:ea:df:87:c5:11:17:8f:4a:1e:15:
b4:49:a5:6e:65:97:a7:7f:66:f7:5b:ae:15:39:39:
ed:5d:a6:0d:93:be:a6:55:2a:c6:22:83:c0:4d:2f:
2e:82:00:87:f1:85:98:98:db:8a:2e:9b:45:bf:c6:
cd:73:06:7d:1b:79:08:0c:c0:2f:39:a8:4f:53:e7:
56:67:f7:94:40:b9:ee:f4:2b:6c:7a:26:db:dc:03:
ee:0e:75:fd:f9:20:d0:93:92:32:08:57:ad:14:e0:
31:2d:d9:a5:f5:50:1d:45:2b:ca:05:b2:b9:32:dc:
f2:b9:04:f9:0c:a8:dd:3b:b9:a7:45:1a:a0:70:65:
b6:4c:bb:88:f2:d1:12:c2:7c:eb:6c:31:41:c8:6e:
34:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CA:D3:7F:73:B7:BB:4A:7F:CC:79:2B:76:2B:D1:9C:A8:F8:E6:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7623E8D2372111F19C4FB5A6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.12.0/22
154.85.12.0/24
154.85.22.0/23
154.85.104.0-154.85.106.255
Signature Algorithm: sha256WithRSAEncryption
8b:63:87:98:6a:53:44:25:d8:91:71:ad:c8:44:89:fc:e3:4c:
6f:57:c7:f7:72:82:ca:6f:2c:37:4f:b7:b3:cc:4b:ef:29:b1:
c4:d7:46:94:bb:df:1b:67:3c:4f:38:82:79:66:3f:10:b6:e3:
a4:48:75:08:f4:e9:97:8f:a6:68:d4:d3:a8:70:8d:27:c3:8d:
22:05:39:e2:a6:7d:60:03:a5:ba:33:82:ec:63:b1:ee:1c:7a:
5e:73:ce:1c:2a:53:eb:e5:40:d7:a8:bf:c0:38:be:8b:13:f1:
2a:b6:00:48:d2:76:f9:6d:97:25:42:a2:18:26:20:56:9e:d4:
59:6d:a2:e5:5e:cb:01:f5:3a:3d:51:df:ee:4c:df:5f:a0:19:
2d:1c:57:06:21:6b:d9:ac:17:c6:fe:8f:18:d1:86:8a:0c:88:
22:ba:ef:55:38:06:dc:dc:2f:5d:a4:fe:75:5e:4c:3b:47:ad:
82:36:ca:0f:99:0a:0c:59:a2:98:7e:90:f5:8d:ff:62:68:37:
4d:f7:de:d4:51:07:5c:31:3b:ed:d7:1a:37:4c:fe:a7:60:22:
a8:f9:d0:95:05:7a:59:9b:09:36:c7:c1:d1:ce:60:b1:5f:fb:
d0:01:eb:7f:91:49:04:0c:7b:a4:51:4d:f5:9e:68:0b:e8:0a:
1f:a3:46:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:22:51 2026 by rpki-client