Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DEACF68553F11F1BAB2B9C1CE1D38B0.roa
File: 7DEACF68553F11F1BAB2B9C1CE1D38B0.roa (raw, json)
Hash identifier: krpDzQ4az9l92n5efCxug44T2JXSksM/c3fPtCiPPeQ=
Subject key identifier: 2C:D2:99:7F:86:DC:6C:CF:F8:9B:10:B5:76:E8:8F:86:C0:AE:D8:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CDA7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DEACF68553F11F1BAB2B9C1CE1D38B0.roa
Signing time: Thu 21 May 2026 18:04:21 +0000
ROA not before: Thu 21 May 2026 18:04:16 +0000
ROA not after: Fri 10 Jul 2026 18:04:16 +0000
asID: 63099
IP address blocks: 154.82.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118183 (0x1cda7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 18:04:16 2026 GMT
Not After : Jul 10 18:04:16 2026 GMT
Subject: CN=6a0f4925-abfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:51:ef:3a:38:41:ee:e2:1c:c3:e6:b9:93:06:
2a:69:36:d2:a3:db:87:8b:4e:e5:ee:c5:cf:9e:b9:
1f:64:db:8e:d8:b4:11:9c:de:eb:f7:10:56:e4:77:
b6:88:e1:1b:6c:c0:5e:b2:8a:53:d9:97:6b:b7:5e:
7f:74:38:5c:cf:07:c6:e1:74:bd:f6:bd:1b:76:8c:
87:01:c8:d7:a9:75:c6:3e:85:8a:28:8b:d4:6a:ec:
22:87:cb:11:ea:f5:d3:ed:4f:27:1e:93:fe:9b:06:
59:a9:7f:79:5f:5e:8d:f0:6c:0f:0c:05:54:a1:69:
2b:fb:ae:5e:1e:35:8c:1a:87:e4:9b:0d:24:7a:dc:
29:2b:57:2d:e2:93:26:e0:eb:8a:04:b1:25:0a:77:
d2:f2:01:c4:1d:ad:a7:75:c8:95:8e:1c:57:4f:de:
97:5d:1d:fd:b4:76:6c:15:e1:6f:71:32:a8:75:54:
b5:f5:99:36:dc:d3:f1:b0:00:de:0c:88:b5:42:98:
6e:07:8f:6b:90:c0:6a:09:4c:12:25:d6:86:f4:5b:
ea:95:41:11:04:a4:a7:46:e4:73:0e:73:47:ea:a9:
5c:1c:6e:f1:1c:e4:34:09:43:7f:f1:67:24:6b:46:
c5:9a:76:ef:3c:8f:ed:68:88:fc:1d:4e:1e:64:df:
3e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D2:99:7F:86:DC:6C:CF:F8:9B:10:B5:76:E8:8F:86:C0:AE:D8:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DEACF68553F11F1BAB2B9C1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.163.0/24
Signature Algorithm: sha256WithRSAEncryption
43:b3:58:2f:16:1b:20:8b:35:17:bd:1c:62:3f:2d:d9:4a:72:
83:a2:79:09:70:c0:d7:93:f2:0b:95:66:5f:af:4f:da:5c:a5:
a5:96:58:96:18:8e:b3:9e:25:4b:bb:a2:63:47:0a:f0:43:68:
e8:c5:16:d4:0e:47:65:bf:6d:1a:cf:f6:7c:8e:62:2a:f3:71:
e2:63:2f:d1:40:98:43:11:4c:b4:5a:0d:5b:1b:0c:62:62:52:
fd:77:a6:5b:3e:50:90:17:ed:de:b7:cd:b7:e7:a1:19:d7:52:
d2:9d:51:72:c2:6f:5b:39:ca:0a:f3:94:89:db:45:7c:0d:39:
f4:07:01:25:ff:81:eb:4a:78:39:69:66:4a:90:6c:56:f0:1a:
1c:5a:7c:d3:8a:15:15:7c:95:36:88:7b:83:18:ea:f7:c8:c5:
20:dc:be:28:99:5f:0c:68:8c:4d:38:37:b2:f6:8a:db:d8:ac:
da:12:52:73:55:d5:da:80:11:90:aa:ab:c0:b3:7a:31:24:a2:
44:33:31:ab:eb:bb:88:c0:df:5b:e6:6d:38:c2:a3:d7:7e:94:
d8:11:74:d6:14:39:51:ff:76:b4:ea:da:57:53:8f:93:33:3f:
fe:e6:40:7f:59:1c:07:f3:cf:ae:3b:ed:d8:21:11:48:74:5b:
85:20:33:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:41:59 2026 by rpki-client