Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66F88D1C5A6811F1887D92B5CE1D38B0.roa
File: 66F88D1C5A6811F1887D92B5CE1D38B0.roa (raw, json)
Hash identifier: oMgiFR+n1NyiV7VjSmlNOCnkp1KsbS0w76dkJqQGCoo=
Subject key identifier: 96:50:30:6D:4B:DE:7E:30:02:7A:65:57:22:BC:17:B9:07:CC:2A:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D01E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66F88D1C5A6811F1887D92B5CE1D38B0.roa
Signing time: Thu 28 May 2026 07:39:48 +0000
ROA not before: Thu 28 May 2026 07:39:43 +0000
ROA not after: Sat 04 Jul 2026 07:39:43 +0000
asID: 17561
IP address blocks: 154.198.8.0/24 maxlen: 24
154.198.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118814 (0x1d01e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 28 07:39:43 2026 GMT
Not After : Jul 4 07:39:43 2026 GMT
Subject: CN=6a17f144-db16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1c:14:8e:13:72:17:1b:8f:8a:5d:7d:fe:a8:
ca:c7:b7:42:f3:fd:aa:78:9c:d2:dd:bb:3c:92:ae:
04:ff:dd:d5:d5:a9:53:62:6f:c1:4c:84:72:4f:4f:
dc:29:40:cb:33:96:99:76:12:4a:bf:2a:13:5b:50:
72:0c:93:ff:8f:21:c0:54:ac:9d:35:e2:97:61:20:
59:47:3e:ba:e3:81:9e:26:1f:e3:52:6b:03:35:97:
ee:97:31:46:2a:fa:b6:56:4a:da:67:31:ed:83:53:
74:85:f0:6d:2b:97:1f:34:77:60:3a:a5:e0:13:06:
47:6d:ac:6f:d3:03:f4:2e:b9:8d:49:0c:25:29:31:
fe:9c:f7:a3:88:4d:73:ba:26:61:73:c6:11:e7:a6:
20:6f:3b:f3:61:eb:f4:db:c8:99:95:86:f3:95:be:
44:53:49:5b:1c:99:82:2b:68:e7:e0:81:74:3a:75:
cf:1d:bd:28:9f:3d:c2:1f:24:ca:9e:4b:2f:51:d6:
f7:dc:6b:b5:1a:28:65:45:37:1c:ac:5e:c3:3a:39:
67:ae:2f:6d:3b:3d:86:ee:77:2f:a9:19:b8:26:cd:
95:3c:d3:e2:d1:16:dd:44:85:72:b2:0f:6f:e0:34:
74:5f:c9:ec:d9:ec:17:20:fc:9e:6e:57:8b:d7:77:
fe:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:50:30:6D:4B:DE:7E:30:02:7A:65:57:22:BC:17:B9:07:CC:2A:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66F88D1C5A6811F1887D92B5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.8.0/24
154.198.188.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:1f:90:2d:7a:61:62:3f:ff:19:d5:5e:a7:25:4f:fa:58:46:
0d:68:bf:da:bf:53:c3:23:8a:ec:c3:fd:04:60:e3:fe:38:04:
e8:46:e4:7b:a0:ac:ff:6b:d3:57:85:51:22:7d:06:af:64:69:
1f:47:26:d8:b2:af:b0:3e:eb:3a:8d:53:d6:59:41:bd:c1:7c:
de:39:7a:53:9d:62:d7:d0:2a:b0:88:96:6f:2e:2b:25:61:1a:
77:35:83:c2:37:9a:dd:26:9c:f8:7a:e2:13:77:0d:21:c6:b2:
71:cb:24:5e:56:90:42:d2:48:f2:86:26:ee:b4:86:1e:f2:42:
e5:db:e6:29:82:6d:3f:9f:e6:71:7a:e8:d2:62:09:41:8a:f6:
af:86:81:99:2f:b7:d1:1f:67:ee:09:c5:4c:a6:08:dc:d6:5b:
ab:27:08:0a:cf:54:85:d5:88:0f:70:01:c0:31:b1:70:2e:5d:
3e:18:0c:a5:83:d0:c1:e2:d5:1a:82:82:15:1c:86:50:2c:fc:
92:e2:ab:f1:78:3c:d0:0a:ac:7e:25:07:2f:6d:22:68:44:de:
06:2e:47:b0:c6:2a:07:1c:ca:a8:6d:18:f5:92:0b:80:84:44:
1a:75:45:a7:9d:29:58:07:6e:21:45:be:d9:36:02:c7:2d:34:
52:24:c6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:40 2026 by rpki-client