Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60D2A6AC4A6411F18F92FFAECE1D38B0.roa
File: 60D2A6AC4A6411F18F92FFAECE1D38B0.roa (raw, json)
Hash identifier: 7m5/Bks/NyEMbOPpbaKSuAdiYGTqKTQpjwXl0P/CGg4=
Subject key identifier: CB:51:7C:98:42:A4:89:00:00:C7:B0:92:26:5D:39:16:8A:AE:43:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C9F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60D2A6AC4A6411F18F92FFAECE1D38B0.roa
Signing time: Thu 07 May 2026 22:30:41 +0000
ROA not before: Thu 07 May 2026 22:30:36 +0000
ROA not after: Fri 22 May 2026 22:30:36 +0000
asID: 142032
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117236 (0x1c9f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 22:30:36 2026 GMT
Not After : May 22 22:30:36 2026 GMT
Subject: CN=69fd1291-2380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:8a:5a:c1:12:a2:df:e3:fb:0e:0d:0d:c7:34:
20:50:d9:f6:58:24:4d:32:8e:95:f4:6e:aa:56:87:
41:db:17:1d:51:e4:2c:c1:80:13:82:ac:98:52:76:
92:9c:99:d9:43:f9:bb:39:75:54:f6:06:4e:f2:25:
01:99:e3:5f:c9:65:64:9d:b9:0e:13:43:e5:f1:c6:
e8:86:c2:90:3f:2c:dc:df:31:4c:28:ff:09:1c:50:
96:16:bb:17:ee:58:89:4e:a0:f1:82:ca:a8:1f:00:
78:3c:7f:5b:58:41:7b:c9:f3:d7:91:1b:89:7b:d2:
ba:54:37:c2:c5:c9:05:f3:03:b4:7a:0b:8c:ec:bf:
57:d0:c5:53:13:8b:2b:54:06:4a:fc:4d:6e:51:d8:
56:f4:a3:8e:34:0d:03:d7:cf:d5:8c:90:57:e1:a6:
bc:87:ac:f7:4b:ac:2b:a7:92:72:46:f8:df:c4:d5:
57:c2:4a:b4:f3:2d:b6:a1:3b:c3:92:e7:f5:b8:a4:
aa:a1:30:2a:00:12:4b:a2:f2:9d:a3:b7:a0:71:f4:
af:24:c5:73:c7:6d:c8:fc:14:a2:5f:9b:a6:77:a8:
72:51:99:b2:06:46:3b:ad:26:51:d3:aa:fa:ea:3d:
2b:0d:8a:e1:be:62:41:67:84:39:a9:8c:67:8e:34:
c5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:51:7C:98:42:A4:89:00:00:C7:B0:92:26:5D:39:16:8A:AE:43:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60D2A6AC4A6411F18F92FFAECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
43:1c:98:84:2a:04:ce:98:98:7d:75:be:9d:04:82:91:93:50:
fb:f1:0e:2e:1a:b6:43:ab:d7:1f:4d:e4:8e:51:e4:af:70:2c:
a9:00:53:f4:56:c5:95:bf:81:48:48:a7:a8:74:ab:84:1e:99:
b3:d4:0e:92:66:2b:41:f7:4b:f7:b3:86:27:45:bb:da:c9:81:
b7:ea:7c:7c:91:a9:d8:ee:03:3e:56:0e:67:b7:b9:61:26:77:
75:95:22:3c:eb:b7:87:4a:5a:ec:26:87:14:05:0b:29:17:c9:
8c:8b:89:1b:78:dd:55:11:f0:60:9c:5f:56:c4:fd:b9:d7:fc:
09:f6:e4:ea:1f:70:1f:27:cc:7c:b4:b0:5d:a1:b2:69:bb:41:
c2:e0:52:04:6b:5d:06:02:3a:0e:19:36:74:fa:d2:88:c7:d8:
6f:7d:cc:5c:d3:7f:c7:c8:7b:6e:26:fe:45:07:77:2e:46:60:
ca:f3:0f:a6:0d:db:ba:48:3b:71:39:d4:82:8c:00:30:3d:fa:
d3:f3:33:2d:e5:87:f6:84:0b:f7:d2:45:41:ce:c4:95:7b:5b:
55:b1:8a:64:99:55:64:e7:61:1c:51:1f:af:5b:d0:91:60:bd:
b6:b6:aa:f7:68:64:44:ab:1a:67:67:94:b3:1d:53:3b:d7:dc:
26:ea:0e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:00:43 2026 by rpki-client