Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/029D0DDE614D11F1A16E570BCF1D38B0.roa
File: 029D0DDE614D11F1A16E570BCF1D38B0.roa (raw, json)
Hash identifier: 7TZMAwgqteNNA3NJQXcr938iUS7wzrxgzxJPS8iKBZU=
Subject key identifier: 10:13:C7:03:C5:EE:36:B2:04:79:55:EC:3E:28:2A:3C:F2:BE:E7:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D1D1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/029D0DDE614D11F1A16E570BCF1D38B0.roa
Signing time: Sat 06 Jun 2026 02:11:21 +0000
ROA not before: Sat 06 Jun 2026 02:11:16 +0000
ROA not after: Sun 02 May 2027 02:11:16 +0000
asID: 4809
IP address blocks: 154.83.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 15:58:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119249 (0x1d1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 02:11:16 2026 GMT
Not After : May 2 02:11:16 2027 GMT
Subject: CN=6a2381c9-5d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:aa:66:b4:22:5d:10:e3:9e:a2:f3:d6:8c:7b:
5a:8e:4e:e1:dd:1b:77:d7:f8:ef:c4:8e:be:05:5f:
74:05:89:23:9e:fd:8b:e2:9c:9b:30:af:61:c0:29:
ed:30:da:47:38:b2:d3:0d:1c:13:58:9f:53:f0:0f:
2c:4c:a0:9b:65:7c:1c:2b:5a:0d:7b:d8:fb:1e:a0:
df:07:06:d6:50:2c:65:cc:68:a9:c7:62:9c:95:39:
93:f8:34:78:65:ca:1c:1a:ff:81:f9:49:98:e2:2b:
47:50:b7:e7:2c:5b:5f:d9:d7:de:a7:1c:7d:64:ad:
9e:fd:65:88:fc:17:92:34:b6:13:b5:04:c7:3e:77:
7a:c2:88:df:54:49:3b:fe:7f:c1:90:bc:e1:f8:c7:
90:78:1c:19:04:60:9a:5e:52:64:91:29:41:aa:20:
5a:e1:49:e7:8a:d5:9a:f2:93:26:31:92:d6:cd:f5:
08:da:92:d1:e3:d5:93:ce:fd:0d:fd:ef:3b:3a:36:
91:73:75:08:5c:e1:99:6d:e2:fc:4d:40:14:5f:41:
9c:14:d9:a2:dd:b0:6f:b8:a7:af:be:24:45:b6:80:
a1:51:60:4a:52:83:9e:3b:1d:9a:9e:50:76:17:d9:
8c:3c:30:33:4a:65:c4:5c:57:ae:23:27:14:fb:18:
45:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:13:C7:03:C5:EE:36:B2:04:79:55:EC:3E:28:2A:3C:F2:BE:E7:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/029D0DDE614D11F1A16E570BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.28.0/24
Signature Algorithm: sha256WithRSAEncryption
36:cc:35:a6:aa:c8:cc:96:a9:3b:a8:76:a7:82:3d:b7:91:5d:
60:67:e5:ad:25:5a:ac:76:3b:0a:67:7e:82:46:20:d7:c0:80:
8f:73:0e:55:22:b1:1b:40:66:dc:0e:78:27:12:75:3b:8e:13:
67:46:90:69:be:9a:01:a5:0e:df:0b:4b:99:a9:72:95:1f:ad:
04:e2:bd:93:aa:5c:91:58:f5:bc:23:5f:d3:18:18:a9:8e:87:
fa:d1:a6:6d:01:d4:b6:ee:5a:79:6a:a4:88:c2:2a:14:3b:b0:
eb:32:14:4f:dd:4c:16:de:60:30:61:a4:a0:02:13:a3:81:fa:
6a:3d:26:72:24:7d:c1:85:fb:f2:2c:95:4f:50:d1:dc:df:aa:
be:8f:d1:d6:00:e4:e0:23:66:10:d0:c8:a0:15:6e:b5:29:1a:
31:6f:3c:ce:64:82:c8:ca:3e:b2:a0:70:82:41:e1:fc:1a:5e:
52:a8:97:dd:f5:05:8d:6b:67:5b:eb:2e:d3:6c:17:9e:c7:a9:
2f:78:60:07:6a:a2:eb:66:b2:48:be:e6:f4:b7:b5:37:25:41:
d0:0e:06:b9:d6:bd:a5:05:3e:81:6e:44:58:64:95:80:63:12:
e8:47:1a:e1:39:f0:67:35:1c:a7:3a:b3:cb:23:ee:2c:63:08:
55:37:5b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:03 2026 by rpki-client