Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B20A0644EDF11F1844C3BF4CE1D38B0.roa
File: 4B20A0644EDF11F1844C3BF4CE1D38B0.roa (raw, json)
Hash identifier: h+9YL8U/OJGXjMUlq7hT51R8aiN7eoqsUktuNZiYFs0=
Subject key identifier: B0:3F:F2:DF:1A:27:15:9C:E2:9D:96:F7:7A:BD:EF:87:86:6C:97:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CB7B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B20A0644EDF11F1844C3BF4CE1D38B0.roa
Signing time: Wed 13 May 2026 15:20:37 +0000
ROA not before: Wed 13 May 2026 15:20:12 +0000
ROA not after: Sun 23 Aug 2026 15:20:12 +0000
asID: 132825
IP address blocks: 154.93.24.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 08:36:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117627 (0x1cb7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 13 15:20:12 2026 GMT
Not After : Aug 23 15:20:12 2026 GMT
Subject: CN=6a0496c5-8129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:75:5d:ec:74:62:1e:fc:24:bd:14:3f:1b:2a:
c6:95:2f:a3:9e:a4:3b:88:d3:c1:ac:16:ea:10:a1:
e2:99:cd:0e:80:23:49:37:5f:da:90:82:e6:e9:30:
81:70:2e:be:42:71:9c:be:80:f9:85:a1:46:bc:81:
62:f3:16:d7:d4:23:ca:93:42:69:a6:79:0d:33:c4:
63:97:c2:2d:f0:ae:bf:52:74:da:8d:67:34:b7:4e:
36:e6:24:80:09:48:ed:d2:ab:90:8a:00:a6:e9:bb:
c1:70:fe:f1:fb:8b:59:b4:56:49:e7:68:c3:a1:2c:
7d:7a:82:34:31:13:11:c7:84:9b:bd:9f:75:86:5b:
bd:b9:27:e7:75:cb:e7:12:88:c6:ed:a6:c2:8a:0f:
83:40:d6:dc:46:07:b8:3e:30:a1:ea:b0:ce:14:eb:
26:08:01:44:ae:1c:b0:c2:71:79:15:aa:43:2b:38:
9b:59:22:4e:c0:83:94:ca:26:9a:6b:47:1c:eb:43:
9b:1e:fe:78:8e:97:8a:d9:0e:5a:1c:c1:ad:a6:98:
4d:2c:6d:00:c1:38:c8:ee:84:72:24:8f:a1:9b:9d:
f9:72:b9:cf:07:ce:98:15:8f:72:19:df:df:e4:6a:
51:a7:6b:84:47:13:e9:9d:64:88:37:8d:8a:f8:ea:
7a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3F:F2:DF:1A:27:15:9C:E2:9D:96:F7:7A:BD:EF:87:86:6C:97:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B20A0644EDF11F1844C3BF4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.24.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:72:31:f1:44:25:45:d2:79:c2:19:f4:7e:4e:19:01:38:db:
c5:75:15:09:62:d3:b8:e4:e1:c1:88:82:df:78:56:0f:90:1f:
20:f9:52:06:27:d7:95:40:9b:7d:fc:64:70:98:54:db:7a:05:
a8:9c:bc:aa:91:ce:76:c5:4f:7d:97:05:9f:bd:83:f2:68:ee:
af:75:75:93:6a:57:b3:af:47:7d:38:73:11:51:62:ae:d2:d2:
b2:00:cb:97:69:28:61:2a:dd:12:85:ef:2a:c2:ce:be:a7:4b:
48:3c:b2:1e:48:ac:af:7a:a5:34:01:ee:78:0f:b9:fd:db:ea:
e6:d1:5f:07:83:a3:d9:22:42:ce:e3:91:fd:ef:bb:33:f5:3c:
71:e2:bb:07:26:97:f9:04:4c:18:87:4b:c5:f4:cd:94:ae:5a:
7e:aa:48:0b:d2:b5:3e:a8:13:01:66:19:67:0e:a8:67:9a:58:
57:9c:6c:b1:56:7f:42:68:4b:fa:5d:19:50:68:3f:db:3b:07:
65:91:46:dc:bb:e2:d5:02:5b:d0:01:52:a1:b6:b5:01:26:fe:
f3:f7:a0:1a:40:5a:52:49:59:4c:80:a1:ad:48:af:84:33:aa:
d2:17:fa:c0:69:8f:69:8f:7f:b2:7d:ad:96:f5:88:92:4d:d9:
f1:c1:9f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:11:17 2026 by rpki-client