Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C9E20524AAE11F1B45BC903CF1D38B0.roa
File: 6C9E20524AAE11F1B45BC903CF1D38B0.roa (raw, json)
Hash identifier: ZKRd8I8ULaSQWp3TKbXYESc85WQfP1BNhAbILW3cJCw=
Subject key identifier: AC:34:5D:AC:08:CD:EE:6E:19:0D:5B:35:30:1A:DD:4E:2D:8D:6B:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CA44
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C9E20524AAE11F1B45BC903CF1D38B0.roa
Signing time: Fri 08 May 2026 07:20:44 +0000
ROA not before: Fri 08 May 2026 07:20:39 +0000
ROA not after: Mon 07 May 2029 07:20:39 +0000
asID: 17561
IP address blocks: 154.95.251.0/24 maxlen: 24
154.95.252.0/24 maxlen: 24
154.95.253.0/24 maxlen: 24
154.95.254.0/24 maxlen: 24
154.95.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117316 (0x1ca44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 07:20:39 2026 GMT
Not After : May 7 07:20:39 2029 GMT
Subject: CN=69fd8ecb-0738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:c2:ad:89:9b:67:99:3d:a7:48:76:04:01:
15:84:05:3a:5d:1a:96:32:52:1a:a5:5b:6d:03:24:
f0:5d:7a:4c:0a:b5:ee:07:17:2f:cf:b4:d2:71:3d:
1f:9c:99:00:d9:43:ab:e8:68:5e:53:2d:12:af:ed:
5b:02:bf:3c:58:17:d3:36:d3:06:e8:4a:70:45:99:
72:bf:d5:fc:fb:7f:af:81:36:8e:5e:f9:8f:29:32:
49:e5:b0:05:8e:03:b9:83:d1:c8:4f:61:42:d9:d4:
8c:5a:41:c4:59:0c:a9:a5:82:d3:01:db:c6:35:fb:
cb:80:f2:89:dd:b5:7c:3c:37:4c:2b:c8:79:c7:fd:
93:cc:9e:a7:7b:21:e4:63:13:1e:c8:e7:6d:56:6c:
86:3f:de:0c:26:f2:3f:54:1c:06:98:85:91:dd:85:
d3:aa:1d:d6:50:e8:a2:b9:ff:1d:ea:44:84:67:8c:
36:47:df:b7:12:c4:60:76:ba:6c:13:c4:77:84:be:
1e:23:e8:00:20:88:b1:77:3f:d1:6d:fb:a2:0a:c2:
c1:19:30:68:d3:f1:f0:e9:24:22:fd:14:b7:f1:3e:
33:de:29:31:ee:b4:91:07:bf:41:5c:36:93:22:69:
b9:f8:3b:1e:3e:2e:50:44:6d:6d:18:18:f7:84:58:
16:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:34:5D:AC:08:CD:EE:6E:19:0D:5B:35:30:1A:DD:4E:2D:8D:6B:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C9E20524AAE11F1B45BC903CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.251.0-154.95.255.255
Signature Algorithm: sha256WithRSAEncryption
18:0d:03:bf:cd:6e:2e:c1:61:68:71:b7:a5:b0:2c:08:3d:39:
e5:19:21:14:ca:c7:b1:89:0b:20:54:90:64:a2:2c:57:f1:70:
d9:c7:d8:64:7b:7c:b9:1e:ca:07:04:38:25:d5:54:27:c2:83:
31:26:d4:24:97:db:dc:50:fb:42:e9:91:fa:9f:ed:39:82:5c:
87:a7:72:f5:45:c2:32:16:19:38:ab:23:61:cb:93:40:4b:10:
0f:80:1e:21:f7:92:d0:40:cc:4d:bf:68:ae:e7:57:3a:d1:75:
e3:7d:2d:b7:db:42:40:2f:5d:a3:07:5e:01:0b:70:35:ca:3f:
1b:0e:99:9b:e3:ce:37:60:5d:7d:e1:26:47:d5:1c:68:c0:42:
3b:09:12:ed:f9:4c:1e:a0:57:3d:2b:0a:38:ae:35:16:a0:a6:
0b:74:36:78:2d:0a:79:56:fa:b8:27:18:99:b2:fc:a9:af:36:
50:99:d3:2b:04:05:68:bb:26:36:9d:d1:84:3d:9f:d8:42:e2:
6c:f8:b4:00:bc:a7:ea:62:3d:d5:9a:f1:4c:bc:e3:d9:e7:f5:
dd:6f:87:65:cc:10:3c:b7:c6:29:aa:42:6a:68:0f:85:ec:cb:
82:59:c8:31:29:44:94:91:bc:f1:41:60:50:be:35:87:68:3d:
65:83:2c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:05 2026 by rpki-client