Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60ADA430446D11F1A355A5F4CE1D38B0.roa
File: 60ADA430446D11F1A355A5F4CE1D38B0.roa (raw, json)
Hash identifier: zsUJPz65GQrfgSSyoYEZS6VX0YAUEwUPqNm8P5sSAOQ=
Subject key identifier: 33:44:25:74:AB:7E:D8:9A:27:2E:33:D1:49:CE:65:44:24:E4:19:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C7FD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60ADA430446D11F1A355A5F4CE1D38B0.roa
Signing time: Thu 30 Apr 2026 08:19:59 +0000
ROA not before: Thu 30 Apr 2026 08:19:55 +0000
ROA not after: Mon 30 Apr 2029 08:19:55 +0000
asID: 17561
IP address blocks: 154.207.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116733 (0x1c7fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 08:19:55 2026 GMT
Not After : Apr 30 08:19:55 2029 GMT
Subject: CN=69f310af-6db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1d:8c:a2:49:e5:35:d7:a7:73:6a:66:35:6f:
d4:4e:f1:4c:aa:eb:df:a1:59:ae:57:58:76:20:9b:
f8:11:31:d9:9f:0a:e0:52:63:6e:a8:cd:5c:94:80:
7e:0b:80:ec:f8:ef:5a:69:5c:59:b6:ae:08:52:76:
d0:de:61:e7:9a:bd:27:3e:bc:e9:b8:06:07:09:b1:
de:96:cf:9b:1e:7b:f0:1d:f5:46:8e:fa:84:c6:6c:
bc:3a:9b:11:a9:0a:39:d0:88:2d:99:c3:10:17:58:
65:88:7b:a1:3b:77:01:d0:8e:d7:a6:82:c2:f5:86:
89:25:d7:db:76:8b:37:26:60:5a:24:f3:c6:0c:a2:
be:02:1d:32:d5:31:dc:54:21:c0:6b:48:44:38:02:
d3:70:92:b6:04:98:96:ef:65:09:c5:fc:83:44:ff:
51:89:1b:85:30:c2:fb:3a:ce:d1:61:92:b6:55:06:
e0:22:8f:43:7c:6f:1e:31:46:db:80:ce:a5:50:a0:
c1:96:e6:3b:19:ca:fd:8e:4d:e4:b6:0b:cf:43:35:
39:e3:80:26:69:d7:76:4f:ce:d2:d1:91:18:09:9f:
7f:96:21:33:78:b6:bb:e4:94:e9:51:41:07:94:6f:
f7:a4:ff:d9:f9:4c:cd:85:5f:2c:08:76:c9:e2:f7:
5d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:44:25:74:AB:7E:D8:9A:27:2E:33:D1:49:CE:65:44:24:E4:19:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60ADA430446D11F1A355A5F4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.253.0/24
Signature Algorithm: sha256WithRSAEncryption
04:a8:e2:ff:6a:77:77:00:41:84:f2:6b:6e:99:de:f3:8e:d1:
03:40:b4:cb:57:ab:c1:59:03:4f:ef:d3:6f:4a:27:d6:8f:17:
2c:47:ba:47:ca:ba:5b:e4:60:6b:77:95:19:01:b2:23:74:09:
96:95:50:45:ec:a9:7b:52:51:4b:82:de:7a:e6:0a:6d:5a:45:
dd:c4:14:bf:cf:10:c5:33:c1:c0:eb:2a:36:71:59:1e:90:df:
2a:0b:10:a5:96:5e:8c:4f:4c:82:8a:91:28:2b:bd:dd:8e:08:
ab:60:64:50:ed:56:cc:94:08:84:e0:1b:e7:c9:4d:7e:f4:00:
75:5f:c9:38:7a:77:8d:e5:d4:23:e2:9c:05:25:01:8e:75:8c:
50:56:b6:95:f8:33:1b:00:0a:c3:c9:df:aa:90:9e:54:22:9f:
75:12:07:93:2e:c8:71:2a:50:79:46:a1:70:44:d8:eb:e4:df:
52:69:c2:c8:3e:7b:76:bb:57:a5:b6:17:5c:c5:cc:c0:46:11:
f4:3b:e0:0d:fc:be:d0:51:57:f4:05:4a:1a:98:93:f5:3b:53:
c0:7a:78:12:57:cd:52:39:41:1a:63:cd:03:33:ef:95:42:86:
fb:5b:9d:9b:6e:08:47:72:05:83:80:bf:46:d2:98:68:5e:b6:
63:be:e1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:49 2026 by rpki-client