Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/228627E0581D11F1AA596EC3CE1D38B0.roa
File: 228627E0581D11F1AA596EC3CE1D38B0.roa (raw, json)
Hash identifier: qBi5SPti0M6NpECO0nFXE2L1gaREWgqHudU28sObHsA=
Subject key identifier: 2F:5D:BE:CF:85:C0:2B:48:63:7E:5D:AE:66:D2:09:1A:D8:9A:35:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CF5E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/228627E0581D11F1AA596EC3CE1D38B0.roa
Signing time: Mon 25 May 2026 09:35:59 +0000
ROA not before: Mon 25 May 2026 09:35:54 +0000
ROA not after: Sat 06 Jun 2026 09:35:54 +0000
asID: 8796
IP address blocks: 154.86.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 09:35:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118622 (0x1cf5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 25 09:35:54 2026 GMT
Not After : Jun 6 09:35:54 2026 GMT
Subject: CN=6a1417ff-47ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:40:72:2f:22:18:c2:99:e5:e3:e2:10:e1:3f:
82:b4:09:b9:85:3a:47:05:65:a5:67:2f:29:a3:22:
e6:6a:52:ac:29:7c:34:ad:58:19:89:2d:95:09:0d:
df:78:e0:9c:ae:9f:e3:49:76:92:4e:a9:2f:55:83:
58:14:0f:eb:51:3c:52:ed:80:3e:40:cd:24:ca:8a:
33:74:31:d6:24:10:ca:59:cb:6a:12:0a:b7:fb:28:
3f:64:ca:ec:d0:01:37:51:cf:67:16:14:40:0e:e1:
3e:9e:59:85:d4:df:0a:67:1b:48:53:b9:30:16:ae:
e6:b1:c1:fb:95:a5:d3:03:81:ef:62:b4:c5:44:08:
22:98:77:f2:c3:ad:fc:5c:46:c2:b8:3b:6c:52:e6:
d6:5b:c1:8a:a5:f1:2f:59:b3:40:d6:c1:d5:3d:67:
15:95:9b:f1:22:62:4f:e4:93:d4:16:a5:a0:fc:33:
d5:2f:ae:5f:b4:05:28:6b:97:92:73:a2:8c:e5:1b:
9a:e7:90:a4:78:a7:5c:fa:31:77:9e:6f:ff:54:2a:
9d:70:c9:66:79:a1:d4:4b:43:f6:78:4e:e5:67:a9:
27:a0:b2:bc:4c:42:a6:a4:56:3b:ec:83:f1:ca:55:
b8:f8:f4:93:c5:e9:76:2d:a8:a6:3f:6f:56:d0:c6:
23:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5D:BE:CF:85:C0:2B:48:63:7E:5D:AE:66:D2:09:1A:D8:9A:35:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/228627E0581D11F1AA596EC3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:5c:74:5e:01:a9:ba:26:2b:cd:5c:48:89:3d:9d:ff:60:c6:
85:42:cd:28:03:28:be:1f:82:ac:fc:97:5f:63:61:ad:c3:0c:
a1:d8:d1:ab:5e:f0:a7:20:bb:e4:e3:11:75:a5:e4:17:4d:bf:
0d:b4:c6:29:b8:ef:16:89:68:5a:0c:e4:f2:f5:41:87:b1:3d:
50:de:7e:67:4e:7a:bb:62:a0:8a:ae:42:76:5a:5a:04:4f:7c:
1f:ad:8d:e6:ff:88:77:02:36:6b:4c:36:c9:10:be:1b:b7:70:
be:dc:12:36:75:ad:a8:d7:c9:88:86:ea:fb:62:02:12:97:ac:
11:b9:2e:32:82:d1:3f:f3:6c:f1:dd:de:cb:ca:f7:1b:ab:7d:
d1:0b:2c:f1:93:4e:b0:8b:2e:2d:e8:8c:22:1e:e4:ab:ac:29:
2e:1a:21:e8:ba:c1:ad:0c:0d:48:41:52:67:d1:e3:c5:87:4d:
d7:09:18:3b:d6:53:21:b2:7b:2f:c5:14:b1:01:a0:32:6c:59:
62:b0:a1:8c:8f:45:fe:9f:7d:d2:2f:4b:5c:d7:c2:c1:12:8f:
75:9a:b5:4b:cc:b2:ff:64:f3:d1:bb:e5:11:89:53:d5:70:9a:
63:ce:8a:a6:29:bd:b4:04:a7:aa:80:dc:61:79:29:1e:5f:2e:
b4:15:b6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:21:57 2026 by rpki-client