Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DFE8D584F6811F1A11FC5BFCE1D38B0.roa
File: 4DFE8D584F6811F1A11FC5BFCE1D38B0.roa (raw, json)
Hash identifier: 43c7GHZtFBxCmYqc1Kkc60sVfFHsUcyI+V2k8yt9qh0=
Subject key identifier: AA:6E:76:DB:F5:14:09:C8:23:3B:29:64:E9:25:2D:4F:7B:A4:0F:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CB97
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DFE8D584F6811F1A11FC5BFCE1D38B0.roa
Signing time: Thu 14 May 2026 07:41:23 +0000
ROA not before: Thu 14 May 2026 07:41:18 +0000
ROA not after: Sat 04 Jul 2026 07:41:18 +0000
asID: 63023
IP address blocks: 154.222.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117655 (0x1cb97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 14 07:41:18 2026 GMT
Not After : Jul 4 07:41:18 2026 GMT
Subject: CN=6a057ca3-cbeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:20:c4:29:ac:27:9f:8d:ea:7e:29:7a:6b:26:
7b:ed:a1:2a:39:c1:f0:f4:a3:b1:27:ac:a7:99:a4:
2b:86:8c:bc:5f:70:72:fb:ee:5b:e1:1b:92:d7:0b:
69:a9:7f:d7:59:b4:3c:07:c9:1a:54:e2:74:fd:76:
0d:ee:5a:f1:59:f5:2d:36:a5:8a:c8:cb:cd:5d:56:
48:f2:11:35:9b:19:2b:d1:ad:7b:35:bd:7a:ad:2c:
4a:09:69:55:a0:f1:b2:4f:c5:5d:b6:0a:db:3c:e9:
da:d0:04:01:7a:54:52:bf:e2:4f:dc:5b:48:46:7b:
1b:3d:56:ac:26:62:cb:39:bd:90:18:b4:92:c1:35:
83:1a:14:9d:d3:92:e5:91:7b:ef:ac:e8:4a:1c:51:
93:95:69:bd:83:45:b8:36:08:a4:f1:be:89:c7:ae:
52:89:67:87:1a:c3:53:b6:77:62:3f:99:da:11:60:
05:fc:28:8d:97:e3:c9:00:2f:d4:31:f3:45:7a:bd:
87:54:93:98:70:01:f1:ca:2a:38:e9:5a:09:61:a5:
0e:e4:8c:3b:1f:91:72:b5:28:84:5d:a0:9a:d0:c9:
04:2a:d2:5a:a0:3d:57:25:3a:d7:2e:a0:64:e5:78:
db:05:fb:23:5e:9d:90:a5:5e:95:54:79:6f:00:fc:
a5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6E:76:DB:F5:14:09:C8:23:3B:29:64:E9:25:2D:4F:7B:A4:0F:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DFE8D584F6811F1A11FC5BFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.11.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:9e:bf:8f:53:85:04:01:92:2e:3d:fd:30:f8:c4:03:93:77:
45:36:3b:38:32:38:ab:95:a3:21:e9:2b:a0:4a:c8:95:d2:90:
b3:d1:72:c8:ef:e3:20:89:54:b0:a6:17:3e:7a:47:cd:89:b3:
15:1d:e4:21:d3:69:a0:d4:e8:6c:60:12:7c:d9:8e:02:3c:70:
da:57:d8:1c:c0:2b:e6:b8:99:2e:df:9f:1c:ae:7b:03:b0:9b:
81:63:f5:44:41:53:bc:08:77:63:70:4e:c9:84:23:7f:90:ec:
64:e0:72:e5:c5:c3:7d:6c:c3:59:61:b1:6d:5c:33:d8:81:84:
9f:60:57:a4:16:3d:ff:96:b6:34:0b:38:24:62:77:d9:18:e5:
6a:84:54:c3:4e:d4:75:d0:56:5e:80:ab:ad:af:b3:d9:27:15:
d2:9e:36:3b:c8:c3:00:99:6b:40:84:dd:31:21:d9:c5:a4:02:
8b:e5:af:4c:99:78:8d:c4:56:a5:de:57:37:81:d1:0c:69:26:
26:85:c4:38:61:f5:c1:d0:24:1e:64:67:bb:0a:2b:2a:6c:fa:
fc:20:2b:ce:d8:f0:4d:10:14:2f:84:ef:d2:74:d5:9d:3f:bf:
22:d8:2a:81:8d:8d:7a:7a:a9:5d:b4:e9:da:93:71:36:15:ce:
64:a5:84:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:14:10 2026 by rpki-client