Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30D5838268DE11F189A47508CF1D38B0.roa
File: 30D5838268DE11F189A47508CF1D38B0.roa (raw, json)
Hash identifier: 5/5NkAABSQak+t9JUvfJEi38Fj1Itr2erIqbswk3fOo=
Subject key identifier: 1A:AE:2A:69:E7:C6:E6:EE:3C:4F:D7:98:3C:34:9F:B6:7F:97:6E:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D2E9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30D5838268DE11F189A47508CF1D38B0.roa
Signing time: Mon 15 Jun 2026 17:18:14 +0000
ROA not before: Mon 15 Jun 2026 17:18:09 +0000
ROA not after: Thu 16 Jul 2026 17:18:09 +0000
asID: 151407
IP address blocks: 154.88.64.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119529 (0x1d2e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 15 17:18:09 2026 GMT
Not After : Jul 16 17:18:09 2026 GMT
Subject: CN=6a3033d6-9943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0c:84:c2:5f:9d:bb:6f:b2:0f:b4:7c:6e:23:
19:57:5e:3e:42:85:fd:df:6f:24:9a:e8:8c:cc:1f:
f4:ce:88:15:03:b4:f4:77:a3:87:97:5f:84:80:87:
f2:07:31:d0:2a:45:7d:59:e3:f7:14:7e:4d:da:31:
38:37:7e:9f:05:9b:fd:03:16:7f:5b:2f:7e:9d:a9:
21:2b:d5:32:4e:7e:57:01:cc:fa:88:71:fb:15:b3:
96:94:5e:b3:9c:71:75:2d:6e:e9:59:fd:e4:92:1c:
1f:50:56:fe:ac:e7:ae:13:33:c6:8e:84:ac:a3:98:
d3:76:9b:7d:b7:83:3e:18:1d:e5:9d:4a:bb:c8:62:
64:cf:0d:d3:30:9f:a8:a1:c5:42:9c:65:5d:54:00:
a6:89:28:48:c4:de:9e:48:b4:65:9c:66:e6:a9:df:
1c:2f:d6:75:9e:47:82:51:33:7c:05:cc:97:b4:18:
96:44:64:a9:e1:e2:64:07:ce:34:f2:31:63:16:b0:
ef:63:5c:f3:42:64:0d:16:08:ca:bf:90:86:f7:1e:
1d:d6:c5:80:bb:8f:60:f5:09:25:a7:b2:b7:d6:7b:
0e:5d:1d:93:55:f4:53:a6:1d:8f:c4:de:54:3d:36:
90:bc:81:fc:5b:2e:28:44:69:bf:2a:44:d6:09:91:
59:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AE:2A:69:E7:C6:E6:EE:3C:4F:D7:98:3C:34:9F:B6:7F:97:6E:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30D5838268DE11F189A47508CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.64.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:c3:6d:3d:3f:43:08:d7:41:fc:59:98:22:0b:19:53:a4:29:
06:14:ac:b0:df:72:a8:51:92:8e:09:4d:6f:d4:d6:25:7a:48:
f8:10:07:3a:23:07:4c:ce:48:24:a4:b2:bd:5a:36:ef:0b:0c:
70:fc:2d:1f:84:ed:f7:d0:86:3a:27:7f:df:c6:28:0c:ab:f2:
b6:b2:45:c8:c7:f9:89:58:7c:e6:a1:31:69:90:9d:7c:2a:2b:
00:d3:6f:2a:a1:19:a1:45:5c:c5:57:c1:ba:f3:fb:84:af:1a:
e2:6a:73:92:8d:c8:81:ac:32:a1:93:37:9d:15:60:4d:5b:b3:
13:1a:88:89:59:cf:89:7b:46:f7:0d:ea:f4:51:ae:c7:16:16:
d9:e7:16:5a:f0:1f:d9:d8:52:4d:b6:a7:02:5c:38:09:a5:26:
21:58:0b:9e:7d:35:53:e3:51:70:0f:40:3a:37:df:db:54:ea:
2b:08:55:02:8b:fe:ac:e8:d8:1b:a3:54:0a:7d:51:47:4b:38:
85:87:fe:41:c1:e6:0e:2a:79:a3:b5:1b:53:f1:1f:f0:1c:b0:
58:c6:38:43:87:ca:df:f7:e9:24:59:e6:12:88:b2:db:16:ad:
c3:d4:dd:09:42:a5:a1:6f:fc:2a:c3:03:65:07:4a:4f:f3:a8:
cc:bb:10:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:54:55 2026 by rpki-client