Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D697C7D6647311F1B36B12B6CE1D38B0.roa
File: D697C7D6647311F1B36B12B6CE1D38B0.roa (raw, json)
Hash identifier: DOF1WoFVrhfs5KcjzCIlxWyAIoYq5UO9KZZo+kAMfj4=
Subject key identifier: 23:76:CA:A2:BC:84:A7:4A:69:DB:7A:75:7C:FA:A2:4E:94:A7:F3:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D252
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D697C7D6647311F1B36B12B6CE1D38B0.roa
Signing time: Wed 10 Jun 2026 02:26:51 +0000
ROA not before: Wed 10 Jun 2026 02:26:47 +0000
ROA not after: Wed 17 Jun 2026 02:26:47 +0000
asID: 401615
IP address blocks: 154.83.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119378 (0x1d252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 10 02:26:47 2026 GMT
Not After : Jun 17 02:26:47 2026 GMT
Subject: CN=6a28cb6b-9ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:29:b6:2c:1a:13:53:3e:6d:e7:f8:17:d8:43:
a6:71:60:0d:66:1b:d0:40:53:6f:e4:2f:41:9f:fa:
72:7b:12:be:a4:5b:3d:f6:f2:88:08:90:18:95:e7:
3a:f4:57:86:8d:3e:3d:fd:3e:ea:29:61:31:b8:14:
ac:d8:b0:dd:39:fe:64:57:77:03:66:67:4b:4f:ba:
4b:7e:f0:37:c1:c4:91:09:55:3e:0a:48:a3:a9:c3:
b3:16:be:46:6c:dd:5d:eb:78:31:2c:2e:8d:75:82:
7d:c3:f8:5d:d9:3c:78:80:97:ac:e7:ab:c6:f4:51:
87:23:b4:51:65:f2:a6:46:95:7c:50:d9:23:91:d6:
8c:37:1c:b5:bd:7b:7b:d0:33:f7:dd:01:05:4b:48:
78:da:14:a1:69:ba:f8:3e:2b:62:9a:b5:b6:12:51:
ef:f3:63:9c:61:8a:82:49:2f:a8:8b:0d:d2:2c:15:
d3:14:54:56:d2:ac:c1:e2:36:d5:c1:1a:f9:4a:7a:
f9:8e:2f:5e:fd:9b:6d:3e:99:bd:19:02:46:e8:0b:
48:06:8a:9f:b0:a6:9a:eb:61:37:05:20:60:d9:15:
b9:43:41:36:3c:63:a5:48:a4:9e:06:c9:bb:42:14:
bb:57:f0:8c:3d:c5:2e:ca:9b:d2:ce:cf:d7:54:70:
be:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:76:CA:A2:BC:84:A7:4A:69:DB:7A:75:7C:FA:A2:4E:94:A7:F3:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D697C7D6647311F1B36B12B6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.98.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:8d:50:1a:56:0d:0c:fe:ff:11:b1:84:e7:68:db:ab:80:00:
91:02:ea:e8:80:d9:8e:46:1a:5d:e4:6b:af:26:27:6f:b9:c2:
1d:6a:aa:91:af:17:0b:f1:9d:fa:2a:46:aa:1f:8f:7c:93:14:
b5:dd:d2:1e:72:2f:1f:97:dd:a2:05:11:e9:fd:2f:bb:46:2b:
3c:81:d2:ec:31:b6:d4:fd:f0:81:bd:ff:91:42:41:22:a5:79:
77:94:c3:5f:ac:b6:10:71:60:8d:33:5d:d5:53:39:a7:f8:2a:
26:0e:ad:ed:34:92:1b:00:76:fb:92:ec:4e:0a:a4:f7:85:ae:
a6:2a:d9:f7:c2:b0:9e:81:36:8b:f7:5e:0b:9a:01:33:c5:51:
59:a2:62:cc:f8:7d:69:83:0c:6f:b7:4c:d6:0b:a4:59:27:4a:
99:8e:70:4b:8e:42:c0:f9:f3:c9:43:97:ce:67:42:fe:6c:e4:
e6:18:d3:c1:e9:89:7d:49:dd:e0:b0:75:41:8c:84:03:b1:90:
af:e7:c7:42:23:01:e5:ac:e6:c2:35:96:aa:bf:18:ab:3b:7e:
12:de:77:9d:af:d4:99:2b:4f:4d:83:b4:75:29:62:2c:e6:6b:
cf:4c:ab:30:38:5c:f2:ae:64:72:08:4e:a6:c6:93:93:94:da:
5f:a8:b3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:54:04 2026 by rpki-client