Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56E4FD2849E411F1AF5126B7CE1D38B0.roa
File: 56E4FD2849E411F1AF5126B7CE1D38B0.roa (raw, json)
Hash identifier: Z+TX+bVXAIbCFlW9JT5/ZDJqC+YtzaDe0v3J5mF3INU=
Subject key identifier: 83:85:72:51:84:F8:3C:1E:A7:C9:64:A0:C9:D4:10:2A:33:6B:93:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C9C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56E4FD2849E411F1AF5126B7CE1D38B0.roa
Signing time: Thu 07 May 2026 07:14:09 +0000
ROA not before: Thu 07 May 2026 07:14:04 +0000
ROA not after: Sat 13 Jun 2026 07:14:04 +0000
asID: 9304
IP address blocks: 154.92.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117184 (0x1c9c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 07:14:04 2026 GMT
Not After : Jun 13 07:14:04 2026 GMT
Subject: CN=69fc3bc1-f7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ea:c1:da:8c:6d:f5:91:f9:f6:2e:92:a5:ed:
26:9b:47:6d:7f:8b:ef:f4:ee:3d:d2:8b:9e:62:ef:
7f:f4:68:f7:d8:0c:24:c5:4a:82:da:ce:aa:24:b1:
b1:32:4c:09:48:13:39:6d:96:02:ff:2d:c8:32:fe:
c3:4e:89:76:45:31:a2:5b:86:c2:e9:91:11:4f:be:
9b:b2:68:8d:ad:8a:9a:19:13:6c:b0:3f:25:8e:f0:
1c:20:67:e7:17:b4:58:ba:33:d5:94:40:d1:83:26:
7d:2f:b1:77:0c:bf:3a:21:f2:5a:eb:8a:57:17:2a:
5c:34:1a:9d:0e:1e:15:bc:3b:0e:f7:d3:ce:1c:7b:
55:d3:bd:db:ab:e7:b0:a6:48:b4:41:1f:e5:f3:8b:
c8:6f:10:8a:46:ad:50:54:1c:5e:05:f6:31:d4:29:
de:80:be:d1:73:45:49:fe:67:c1:86:fa:53:02:20:
8b:b6:9b:95:d0:f6:45:e3:a4:67:d9:bf:c1:43:a5:
70:90:88:8d:50:90:ba:7b:34:4e:a2:52:ef:c8:9a:
14:6c:d1:2f:72:25:e0:62:e0:51:fa:0c:a0:88:f7:
2f:de:50:74:ea:5e:93:68:93:ea:55:4d:eb:b6:f4:
cf:ab:8c:f8:7e:ff:44:91:8e:ac:9d:b7:67:22:e2:
ca:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:85:72:51:84:F8:3C:1E:A7:C9:64:A0:C9:D4:10:2A:33:6B:93:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56E4FD2849E411F1AF5126B7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.10.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:fb:b5:28:a5:b4:3c:16:6d:b8:34:4b:73:f0:d8:f7:db:06:
c0:1d:68:d2:aa:5b:d8:c3:0a:c9:61:6a:c4:b6:0d:d9:ce:16:
fe:09:e5:3c:59:59:f5:53:04:41:3d:da:9a:af:db:b6:83:1d:
14:76:97:9a:9c:ab:ee:42:bd:0f:03:54:3b:42:2b:88:4c:64:
26:12:d9:fa:f2:2a:2f:e4:c7:ef:28:d8:b0:ea:82:be:4d:6a:
06:e0:d9:af:cb:69:44:2e:56:74:1c:e2:41:d9:9d:e9:62:a6:
9f:67:ea:eb:df:17:c3:3b:83:ec:b9:a5:86:ff:9e:7c:15:bb:
91:7c:bb:56:14:82:4a:e9:0c:3f:84:b6:8d:f3:40:40:9d:d7:
7a:04:d2:04:bb:a5:ff:06:60:c4:62:df:22:9d:70:ec:53:5f:
76:04:ee:76:a2:a9:e5:c9:8a:91:fe:e9:52:60:d3:96:3f:78:
e5:a8:8f:12:43:b2:d0:8c:67:82:96:8a:32:ed:4d:fd:6e:81:
38:26:2e:e0:85:a0:f4:88:f2:7e:97:34:bc:85:34:87:f5:e7:
de:7e:ed:b4:ff:d6:6a:5b:bf:f8:34:2c:a6:c5:74:63:b3:c8:
c5:ea:fc:d1:ca:4e:7c:75:d2:1f:46:77:8e:4d:12:04:fd:4c:
e3:6e:8c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:05 2026 by rpki-client