Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/401546284D4C11F1988C1EE2CE1D38B0.roa
File: 401546284D4C11F1988C1EE2CE1D38B0.roa (raw, json)
Hash identifier: tYA0K7yrlIXzxeA6ed6KHKHiv+1d89ASQvu9PrN1ph4=
Subject key identifier: 6E:22:FF:E8:F8:BC:96:C7:AA:0B:4A:14:0E:56:3D:CA:EC:54:D7:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CB17
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/401546284D4C11F1988C1EE2CE1D38B0.roa
Signing time: Mon 11 May 2026 15:15:32 +0000
ROA not before: Mon 11 May 2026 15:15:25 +0000
ROA not after: Thu 18 Jun 2026 15:15:25 +0000
asID: 199037
IP address blocks: 154.82.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 06:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117527 (0x1cb17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 11 15:15:25 2026 GMT
Not After : Jun 18 15:15:25 2026 GMT
Subject: CN=6a01f293-ece5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:06:f6:f4:89:c7:3f:cd:a2:89:bc:31:0a:24:
84:9b:eb:5d:26:7b:be:f1:ee:1f:ad:95:0c:57:9b:
90:38:bc:2e:c8:7b:d1:f8:16:f7:ef:bb:54:88:cb:
10:48:09:7f:b5:2d:00:06:29:81:d9:e2:cd:c4:10:
ca:26:43:bb:fb:a6:ee:01:40:f0:20:30:cb:7b:ae:
d5:c7:b7:c8:2d:e8:1c:1f:d5:67:10:ef:ea:bc:f2:
e9:7f:b3:ca:a3:af:7e:4d:32:0c:43:d9:a1:41:73:
f1:cd:bb:fd:cc:fd:d0:73:2d:84:0c:5e:63:51:b2:
6b:44:0a:0c:98:a0:bd:d9:87:60:b3:92:21:94:55:
9a:75:f1:10:31:eb:aa:ba:ba:e1:17:70:14:1a:01:
38:eb:00:93:ab:bd:df:a9:bf:d4:48:93:6d:77:8e:
60:3a:a1:26:ca:cf:d6:f1:63:f9:1a:b9:27:86:15:
a6:75:a2:5e:33:ee:9d:75:d6:b3:df:36:fb:77:d2:
ab:b7:35:7c:1f:79:44:d1:4a:77:8f:93:d3:9c:cb:
20:09:c2:fb:ae:7d:a3:c9:62:87:af:59:78:cd:34:
ff:26:40:6e:db:9f:ae:ef:d9:43:66:e0:b8:a0:48:
70:f5:9b:c0:5b:7d:14:bd:94:ba:e4:d9:03:b6:be:
8f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:22:FF:E8:F8:BC:96:C7:AA:0B:4A:14:0E:56:3D:CA:EC:54:D7:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/401546284D4C11F1988C1EE2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.24.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:b3:24:44:99:cc:be:b3:bd:18:a5:bd:f9:7c:af:ff:8d:99:
e9:8e:a6:ee:c2:3d:cc:b6:52:e0:9d:68:ee:3e:47:87:69:70:
32:a1:de:08:f5:8e:88:b2:a2:7a:7e:d0:ae:03:3a:6f:18:4e:
d8:a5:10:ae:20:c5:11:2e:56:72:b2:7b:d9:48:93:35:3f:2d:
f1:37:4e:0e:c6:67:33:7d:66:74:50:3b:4b:3f:09:73:83:14:
40:31:52:2b:3b:28:03:38:7f:cf:b7:61:e8:d0:45:2e:21:37:
fc:3f:09:a2:18:a4:bb:58:21:28:0b:1e:c6:67:8c:bf:1f:49:
39:05:78:16:6f:65:36:f3:1e:34:eb:ea:ca:f3:af:21:bf:1b:
2f:9e:38:b9:ba:33:ff:ee:2b:81:fb:73:51:da:e1:3f:d4:55:
b5:20:21:e3:95:d7:35:e3:cd:79:4b:79:a1:32:d0:71:5c:b0:
8d:f8:84:ec:3b:db:06:58:e2:c2:a3:72:bb:6b:72:46:ce:19:
67:f0:61:bb:1b:d5:e8:75:a6:54:3b:37:b3:e4:fd:72:52:c7:
9c:e7:b6:5b:4a:5e:58:ff:ac:a4:13:6b:30:ba:2a:25:0b:d5:
4b:c0:cc:e9:61:d1:37:a7:18:86:a8:51:6a:b2:a8:4e:9d:86:
e3:ac:27:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:39:34 2026 by rpki-client