Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D716EB5456D811F1818C8B02CF1D38B0.roa
File: D716EB5456D811F1818C8B02CF1D38B0.roa (raw, json)
Hash identifier: wzwH93KY9JEhaqB2pJxNjr3roR/W0WjcLQmHWS8i4rs=
Subject key identifier: 2A:1C:16:DD:C6:F7:19:A9:9D:23:0B:1F:EE:85:70:46:26:36:AC:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE98
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D716EB5456D811F1818C8B02CF1D38B0.roa
Signing time: Sat 23 May 2026 18:54:35 +0000
ROA not before: Sat 23 May 2026 18:54:31 +0000
ROA not after: Sun 28 Jun 2026 18:54:31 +0000
asID: 52263
IP address blocks: 154.194.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 31 May 2026 06:35:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118424 (0x1ce98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 18:54:31 2026 GMT
Not After : Jun 28 18:54:31 2026 GMT
Subject: CN=6a11f7eb-e946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:46:14:78:c2:51:88:35:e8:26:a6:76:df:8e:
26:88:5c:53:35:ed:e9:d9:1a:9a:4a:de:79:f2:59:
a6:15:e0:13:7d:bc:29:02:5c:3c:99:bd:c4:e7:09:
6d:0f:7c:41:22:58:21:a9:25:46:bc:7a:ab:00:f5:
a4:ea:09:d8:d2:3b:52:97:43:5b:e5:3d:89:a2:51:
3a:6a:77:be:f4:9f:b6:e2:15:08:f5:77:50:49:03:
07:8d:68:c4:41:22:26:9a:2c:74:53:ad:9f:ee:45:
4d:a3:df:4c:e3:79:a6:25:6c:ed:4d:b6:a7:52:82:
9e:32:3b:32:71:1e:32:0a:ef:89:ef:db:78:9d:b8:
68:b6:38:e1:90:1f:0d:08:4a:15:57:b1:5b:ed:ba:
e9:2d:63:58:9d:a4:4a:d5:ff:61:d9:6e:01:63:76:
ae:ee:96:8d:ed:2a:c3:9b:20:33:68:9a:32:b8:da:
56:94:b3:48:29:e8:26:c2:c2:2f:04:c4:a6:d7:fc:
eb:9e:41:99:d7:79:a7:cf:69:c1:44:0d:cf:2c:d0:
6a:c7:1b:ef:6f:5c:18:ae:17:69:36:42:7a:8a:d6:
dc:ed:f4:af:bb:5b:02:30:f9:6b:96:ee:12:98:3b:
61:e4:8f:32:12:fb:50:a0:72:46:a3:59:d2:13:bc:
4a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1C:16:DD:C6:F7:19:A9:9D:23:0B:1F:EE:85:70:46:26:36:AC:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D716EB5456D811F1818C8B02CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.69.0/24
Signature Algorithm: sha256WithRSAEncryption
44:59:32:31:b7:eb:12:4f:86:35:46:57:fc:87:ec:54:79:9f:
37:10:08:bb:60:7c:e5:b3:b6:f3:92:e2:e3:53:29:85:60:6d:
e9:84:9d:bc:cd:17:ed:57:cd:f1:dd:f9:85:c3:de:7c:99:6e:
e5:5a:aa:cd:c3:21:f8:35:37:41:e2:bc:7f:0a:bf:94:e3:ff:
ab:53:20:f0:d9:a2:84:4f:ab:72:96:cb:44:8c:49:d0:61:6b:
25:90:5e:90:8a:1e:36:3f:ab:05:1a:08:23:3a:db:66:1b:e0:
e2:4d:0e:97:1c:b5:f9:65:a8:9a:d6:e0:2f:52:2b:ea:64:bf:
c4:0e:ce:41:2f:b0:52:28:ba:42:ce:74:40:9d:e3:65:10:f8:
b8:6a:e3:35:a5:12:7f:c7:f3:8c:b5:6b:aa:82:1a:40:81:81:
95:7a:e8:ae:91:9b:9a:2f:44:6f:47:55:ba:0b:8f:e2:fd:59:
d7:bf:45:22:bf:1c:e0:94:61:53:94:18:af:49:f2:de:9b:85:
d1:32:f1:12:ba:60:81:b6:ee:2b:34:e0:6d:00:aa:c2:f8:72:
69:ef:63:39:dc:2c:35:87:22:4a:cc:9d:58:98:e8:35:fb:7b:
00:6a:cf:98:16:1c:1d:be:81:c9:c8:9d:2e:c1:4f:04:a7:c6:
9b:34:08:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:12:47 2026 by rpki-client