Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34228B8451CD11F180D01BCFCE1D38B0.roa
File: 34228B8451CD11F180D01BCFCE1D38B0.roa (raw, json)
Hash identifier: UZDxjH2YsOViWGYstCoaqIPhaSVk5olnRw0Zz5r61LM=
Subject key identifier: 50:50:36:A5:35:57:81:1C:B0:3B:32:D7:71:4E:90:32:ED:72:CA:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CC2C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34228B8451CD11F180D01BCFCE1D38B0.roa
Signing time: Sun 17 May 2026 08:48:41 +0000
ROA not before: Sun 17 May 2026 08:48:37 +0000
ROA not after: Wed 24 Jun 2026 08:48:37 +0000
asID: 153706
IP address blocks: 154.89.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 May 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117804 (0x1cc2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 17 08:48:37 2026 GMT
Not After : Jun 24 08:48:37 2026 GMT
Subject: CN=6a0980e9-4d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:25:50:e8:b6:6e:94:ad:da:65:7b:9f:5e:78:
3e:7f:99:c2:e0:71:d3:5b:5a:24:28:e5:aa:b7:05:
2d:97:21:57:9b:ec:de:a2:14:29:e1:17:cb:97:41:
58:67:64:dd:b4:53:a5:09:db:81:53:c4:7a:00:3d:
a3:2b:93:73:72:28:3f:a6:22:ea:4f:80:2a:58:f6:
e6:ff:d0:e6:16:06:d8:61:ba:f9:b1:ff:ff:44:c4:
06:1e:03:ac:44:fd:8c:f7:26:32:0b:bb:33:82:8e:
1f:dd:15:8e:f1:0f:29:79:45:18:83:6d:b9:b9:e5:
f0:2f:87:cf:1e:26:83:97:7e:0a:83:20:6c:da:84:
82:55:e0:7e:58:54:9b:b8:bd:34:62:c6:72:53:c5:
34:3f:b7:1e:9f:3c:42:70:17:18:c4:c0:66:bb:e0:
6f:95:ab:c3:8b:ae:53:88:c4:89:19:3c:a8:dc:c9:
28:bf:e0:54:f5:25:75:70:ff:0b:95:c4:6b:2a:c1:
b7:6a:a2:c1:57:8e:a5:82:1b:58:95:05:26:34:40:
96:68:50:74:f7:20:0b:22:0d:95:43:11:42:34:c4:
4c:78:64:5f:79:f7:da:b2:e3:67:eb:f5:9b:77:c2:
1e:67:45:da:da:5c:d9:7f:c2:16:2e:df:e9:3f:8a:
12:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:50:36:A5:35:57:81:1C:B0:3B:32:D7:71:4E:90:32:ED:72:CA:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34228B8451CD11F180D01BCFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.194.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:33:d5:80:05:95:96:04:4a:e2:2a:75:7e:da:8f:94:fd:06:
36:ae:9b:cc:32:c0:9e:bc:44:e7:5d:ed:74:43:2f:05:7c:19:
8d:2d:73:82:8d:f7:2f:35:ea:ca:ac:40:30:60:20:85:6e:2d:
52:66:70:01:2a:1d:82:a1:91:f9:b8:2f:70:d2:a6:3c:62:28:
86:46:99:fc:61:57:cd:f9:d5:ec:cf:8d:7f:4f:ef:5c:f9:5a:
45:83:ea:d9:be:d6:e1:0e:7e:ff:d5:d0:04:4c:95:27:1d:67:
37:a6:62:30:87:b5:43:27:37:88:6a:1c:e0:4a:7d:43:18:19:
6f:a8:a9:27:7c:6a:94:d8:8a:17:b2:e1:bc:e2:1c:85:65:d2:
45:4c:e4:55:37:1d:c4:05:fa:bf:a5:5b:bb:62:66:12:9a:bd:
e7:5c:2b:3f:b2:a3:58:95:f1:84:b4:0d:8a:03:73:27:af:25:
cb:ea:19:dd:bf:d7:96:f6:41:57:ca:91:17:a2:b4:e7:2c:df:
c5:02:88:83:3f:98:a5:d4:d2:fe:43:5d:6b:43:7b:fe:5a:e4:
3b:70:ff:b0:26:bc:c3:e4:4f:70:de:bc:70:ea:4a:4e:c4:cb:
3a:02:b5:7e:3a:27:da:f2:db:ff:ac:98:89:3b:a7:5a:4c:ce:
9c:c6:65:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 06:24:27 2026 by rpki-client