Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13AC1F6A581B11F191B13EB7CE1D38B0.roa
File: 13AC1F6A581B11F191B13EB7CE1D38B0.roa (raw, json)
Hash identifier: S6MTXoQ+g9V4sH/FX3ObZo7KHuD1V2GYa4XT88Y+A2o=
Subject key identifier: A8:3B:7D:DC:DA:90:10:1E:E3:40:A5:52:64:2B:79:12:AE:E4:14:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CF58
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13AC1F6A581B11F191B13EB7CE1D38B0.roa
Signing time: Mon 25 May 2026 09:21:15 +0000
ROA not before: Mon 25 May 2026 09:21:10 +0000
ROA not after: Fri 26 Jun 2026 09:21:10 +0000
asID: 140666
IP address blocks: 154.93.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118616 (0x1cf58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 25 09:21:10 2026 GMT
Not After : Jun 26 09:21:10 2026 GMT
Subject: CN=6a14148a-9319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:e0:1d:9c:be:8d:05:3f:94:94:5a:55:11:
95:64:40:1c:96:1f:3a:a8:c6:b2:c2:26:05:5e:37:
23:b5:df:93:2d:03:25:81:27:89:e2:41:e1:37:75:
0d:af:2d:ed:b3:19:4d:3f:52:a1:29:12:a8:21:b0:
8a:cb:85:a5:6f:c8:5f:4a:98:49:f4:0c:46:f6:65:
3d:ef:fb:18:f7:8f:31:5b:53:ca:cd:32:a2:b3:cf:
c3:43:82:13:5a:ff:bd:a8:71:5e:9b:6c:b3:5a:f4:
3e:3b:a9:6a:6c:95:b1:b7:bd:e9:64:44:db:b0:8c:
8a:28:01:be:d1:ef:7c:75:aa:e8:f6:72:a2:26:c9:
09:f4:e5:23:5c:0a:db:86:b6:07:5d:7b:87:57:c5:
eb:16:bf:56:73:59:9f:47:0e:fa:cd:6b:c5:6c:9f:
04:bb:3b:e6:8e:d1:8e:bb:49:27:02:a7:61:e8:77:
ff:90:57:68:72:26:c4:56:9f:17:a8:da:c9:5c:05:
59:97:e5:23:e6:f6:3a:34:63:70:67:d3:1e:cf:b8:
49:e4:dd:1e:2c:60:1f:ae:f3:2c:68:f9:ea:bc:5d:
ba:7f:7d:10:94:73:ea:e2:8c:07:a5:e4:12:df:1a:
2f:bf:42:56:8c:50:4a:a2:27:0f:f0:45:cc:80:43:
a6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3B:7D:DC:DA:90:10:1E:E3:40:A5:52:64:2B:79:12:AE:E4:14:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13AC1F6A581B11F191B13EB7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.104.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:30:ff:3e:e9:9f:bc:d9:9d:a5:e6:98:11:30:87:7e:90:ce:
33:db:dc:4f:6b:10:23:4b:b2:3a:e2:57:a1:e6:21:de:11:4e:
13:d0:ff:4b:d2:a4:49:02:8f:c3:8b:36:7e:63:47:89:65:ee:
97:78:88:13:aa:38:a9:8e:9a:3d:6e:b3:85:1a:a8:da:38:05:
55:cd:8d:45:c6:99:5c:c0:49:6d:14:7f:72:78:ad:24:79:2f:
e1:f9:c6:d1:67:11:88:88:72:b2:bc:4b:20:3b:3c:83:5b:a2:
57:c5:1f:74:0b:cc:a9:41:cf:72:b7:df:0b:8c:ac:26:8f:ed:
ce:94:ca:23:ea:ba:1c:c2:a2:a3:8f:26:28:3f:3a:a0:35:9e:
8f:ad:f8:a5:a7:b4:3c:57:f9:ea:62:35:9f:69:67:b7:4b:c0:
d5:0a:ea:a5:e4:d3:9b:2c:0d:10:89:bd:21:65:3b:42:bf:e8:
db:75:18:64:6e:d3:51:5c:cb:5b:01:be:89:c2:0f:25:96:12:
52:fe:53:69:ad:10:0c:41:a9:1f:53:08:b4:9e:60:b7:0e:d4:
15:e8:81:7f:ef:2f:d8:11:0f:c8:ff:b6:db:1a:be:34:6a:b8:
c8:13:bd:42:f4:51:61:43:f8:d0:b1:b2:b1:eb:94:59:e9:41:
b2:95:ad:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:11:33 2026 by rpki-client