Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B293B3C45A6711F1A2B57FB1CE1D38B0.roa
File: B293B3C45A6711F1A2B57FB1CE1D38B0.roa (raw, json)
Hash identifier: 0LkiNjKbcPGErZ0mdMGqngFD4iNjNRdKQV0rBbN1YnI=
Subject key identifier: 43:72:54:1E:DF:5A:F5:91:9D:F6:68:16:15:85:AC:D7:81:FE:CF:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D01A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B293B3C45A6711F1A2B57FB1CE1D38B0.roa
Signing time: Thu 28 May 2026 07:34:45 +0000
ROA not before: Thu 28 May 2026 07:34:41 +0000
ROA not after: Mon 29 Jun 2026 07:34:41 +0000
asID: 61461
IP address blocks: 154.216.192.0/18 maxlen: 24
154.218.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 31 May 2026 06:35:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118810 (0x1d01a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 28 07:34:41 2026 GMT
Not After : Jun 29 07:34:41 2026 GMT
Subject: CN=6a17f015-4830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:35:f1:66:17:bb:c6:c0:ca:fe:fb:ea:23:
f4:fb:24:c0:cb:9d:7b:88:d2:65:5a:e7:4c:cd:98:
7b:54:96:e5:94:a9:15:23:e3:57:35:35:c7:72:cf:
cd:a1:2c:2f:d2:a5:95:02:2a:1d:6f:65:73:22:62:
ce:f4:d8:38:c3:8c:48:3c:e7:6a:e3:ef:e5:fb:b1:
2d:c0:42:77:ad:7c:48:1b:6b:90:18:fa:70:5a:22:
82:eb:81:37:d3:9e:fb:de:2c:e7:3f:68:fd:f0:e8:
e2:0d:de:63:38:de:f2:21:f7:6b:a9:53:ee:03:12:
8b:c6:55:19:cd:2c:94:ee:c8:27:08:ce:93:35:43:
ef:f6:e0:d6:b6:3f:bc:31:93:44:ef:df:e4:58:45:
48:3a:1f:94:38:0b:ba:b2:be:25:ea:42:94:c7:92:
1c:ac:50:8a:99:e8:5b:0f:8a:2b:2d:8c:12:b8:d3:
29:e1:26:f1:a1:1a:47:e8:b2:07:3c:71:2a:87:9e:
a1:6e:2d:95:96:6b:03:0e:e1:9c:df:4f:73:14:8d:
ca:51:3d:78:f9:cf:bf:53:2a:06:80:9f:04:72:a5:
a8:57:94:68:65:08:5a:64:cd:f8:9a:2f:34:5a:6f:
e6:a5:51:1d:25:ed:e7:fc:2d:78:9a:f1:93:20:3b:
b5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:72:54:1E:DF:5A:F5:91:9D:F6:68:16:15:85:AC:D7:81:FE:CF:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B293B3C45A6711F1A2B57FB1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.192.0/18
154.218.192.0/18
Signature Algorithm: sha256WithRSAEncryption
b3:85:eb:cd:04:67:03:6d:92:b5:76:05:20:d0:16:e9:3e:79:
18:68:7b:b8:f2:70:7c:26:77:86:e4:d5:97:5e:4e:d2:1f:dd:
02:2e:b2:c3:a6:43:b4:2d:0a:04:20:d6:93:c9:1b:cd:a9:3f:
58:a2:7c:16:9c:26:e4:ad:02:68:f8:5a:ad:7c:cf:88:76:2f:
40:d5:ee:64:16:17:1f:be:b1:8f:41:40:fb:a4:7f:94:db:c9:
d1:5e:75:f9:47:07:46:61:24:16:68:9b:b1:ae:ed:50:09:a9:
aa:e3:57:11:19:f6:c2:24:67:27:f7:ed:ed:76:1d:15:f9:50:
05:fd:27:4d:46:a8:2d:cf:25:e0:74:4a:08:41:d2:69:18:93:
40:8f:47:d7:5f:fe:36:91:70:1b:89:56:20:b0:b9:05:51:a6:
5c:35:b8:83:4b:3e:4f:92:72:c2:c1:2f:34:8f:17:12:ad:d0:
a3:89:7f:db:09:82:d9:9d:0f:f3:87:69:de:06:70:c1:3e:4e:
50:e5:fc:6a:92:23:be:ed:32:72:ee:c7:e7:bb:f5:a0:bf:81:
80:78:05:f7:90:81:e5:70:b0:8d:d7:3b:8a:2c:35:c9:9e:1e:
f8:63:1f:51:c8:c8:60:43:19:0e:0c:9c:51:20:3a:60:a6:13:
7b:1e:e7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:15:40 2026 by rpki-client