Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68C2AFA64A7311F185F93207CF1D38B0.roa
File: 68C2AFA64A7311F185F93207CF1D38B0.roa (raw, json)
Hash identifier: OxO1Nk68TMZyQCyiPLmi/EKvBUcNZxjSCThZ1KMxpBo=
Subject key identifier: 8B:66:E1:1B:73:98:83:69:D1:05:19:1B:59:57:24:E8:9C:C7:15:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CA00
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68C2AFA64A7311F185F93207CF1D38B0.roa
Signing time: Fri 08 May 2026 00:18:17 +0000
ROA not before: Fri 08 May 2026 00:00:12 +0000
ROA not after: Sun 21 Jun 2026 00:00:12 +0000
asID: 401783
IP address blocks: 154.82.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117248 (0x1ca00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 00:00:12 2026 GMT
Not After : Jun 21 00:00:12 2026 GMT
Subject: CN=69fd2bc9-0844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:17:a9:7e:d9:2c:4b:28:cc:81:45:74:f1:
a8:74:5c:ba:b9:1b:36:8e:10:f7:0c:df:7e:38:e7:
17:a1:03:f0:7e:98:6a:36:35:4d:62:6f:ae:74:09:
d2:a1:9a:6b:6e:d1:46:02:b5:c5:f7:95:6e:9f:89:
a1:8d:77:d1:e4:40:c6:4d:e0:0a:7f:49:c8:46:ac:
d3:a5:65:f2:07:90:f5:38:9c:a8:f1:da:89:8a:de:
b9:1f:4b:cb:5c:b9:19:cc:5d:52:0f:2b:62:69:11:
9d:c1:45:6a:cf:33:1e:54:cd:81:89:ce:3b:1c:30:
82:87:9a:d3:75:45:f4:99:57:e8:d6:da:07:ed:8f:
0d:4d:8c:92:6d:f1:73:d7:07:31:a9:cb:45:f7:9e:
a4:15:fb:b1:86:9f:3a:31:3a:49:bd:e1:27:3a:19:
a1:e6:b8:ba:68:9c:f5:f2:80:0f:7e:f4:67:e5:4a:
3b:ee:cc:85:3a:b5:0a:11:17:18:4a:ec:76:d1:37:
57:67:4a:42:d9:1e:aa:76:47:2f:d2:2c:9e:a6:7d:
6d:c3:54:33:c3:2e:2b:6d:5c:41:8e:6d:8c:d4:a6:
35:37:9b:4b:12:fc:53:49:16:61:d7:08:71:e0:2a:
12:c3:92:1b:09:a0:67:4b:09:81:c4:3c:a3:3e:7b:
30:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:66:E1:1B:73:98:83:69:D1:05:19:1B:59:57:24:E8:9C:C7:15:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68C2AFA64A7311F185F93207CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.181.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:c5:f5:a4:05:eb:8e:d8:f9:70:0b:0b:ae:59:b4:71:c6:a0:
99:6e:e1:f1:a9:09:1f:4e:6d:52:85:6f:f5:25:9a:b3:58:80:
72:15:2b:19:96:64:e3:08:c6:09:40:c0:b0:8c:59:09:2f:34:
63:64:5e:73:df:bc:75:de:16:9e:56:f2:0f:db:4e:b7:9e:b0:
19:17:77:e2:c2:4c:ea:84:a0:d5:b9:ef:d4:c6:2a:4b:63:d4:
40:88:6a:fa:c9:21:3f:3f:6c:01:09:20:af:5f:fd:f5:86:38:
8c:59:46:e2:bd:26:39:cf:ee:bb:0a:4d:f5:d7:32:f1:8e:a6:
63:e2:e8:a7:ef:f1:fb:ff:98:b7:98:17:5f:cb:77:68:96:08:
f3:58:cd:f5:79:63:c9:9b:9e:03:54:aa:d3:a9:65:a8:2b:dd:
93:b8:28:11:27:54:f8:d7:5b:2a:59:36:6c:dc:ad:c1:ec:90:
79:e4:27:17:67:36:0f:d6:69:bc:8d:67:53:1d:c3:ef:83:d4:
c8:c4:26:f9:54:c7:28:34:f2:c8:fd:f6:6c:c6:30:d8:96:3b:
4e:c9:69:ed:19:92:f9:67:0c:1d:3e:5b:f5:59:00:3d:5b:e4:
62:6e:78:9c:22:a8:e5:d6:41:4b:0d:fb:d8:6e:67:38:c0:4c:
7a:b6:7a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:48 2026 by rpki-client