Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/824BB108594011F18DCCD1A1CE1D38B0.roa
File: 824BB108594011F18DCCD1A1CE1D38B0.roa (raw, json)
Hash identifier: UsbyFbF1ERYpPy8+zaipizMWrdpoosqkBHuHUJXL6Ck=
Subject key identifier: 56:89:AE:EF:A4:29:97:F2:49:53:06:C3:86:F5:0B:CB:B3:95:9C:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CFD9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/824BB108594011F18DCCD1A1CE1D38B0.roa
Signing time: Tue 26 May 2026 20:21:43 +0000
ROA not before: Tue 26 May 2026 20:21:35 +0000
ROA not after: Sat 27 Jun 2026 20:21:35 +0000
asID: 147176
IP address blocks: 154.83.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 12 Jun 2026 00:07:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118745 (0x1cfd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 26 20:21:35 2026 GMT
Not After : Jun 27 20:21:35 2026 GMT
Subject: CN=6a1600d7-f2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:03:06:e7:b0:8a:20:ed:a8:83:c1:4a:57:8e:
4f:7e:66:ae:31:6b:f0:de:17:ff:28:f1:8f:ed:58:
94:d3:85:c5:bd:74:00:f2:30:cb:8f:35:3b:f3:18:
ea:16:4b:c7:ff:bf:c9:d0:70:64:4c:08:fb:88:06:
9b:be:e5:f2:ef:83:7f:ba:b0:04:11:d1:03:97:31:
fe:ff:c8:7b:32:5e:10:45:f5:88:c9:e7:6a:ab:13:
18:60:af:22:49:fe:92:d0:09:3c:a8:d0:3c:5d:7f:
04:1a:1d:ec:7e:33:59:f6:0b:d3:d4:b2:fd:e6:0d:
b6:6f:27:e8:a4:dc:cd:65:5d:84:9a:46:07:e9:5e:
f6:03:13:65:33:20:43:3f:fd:2b:97:81:d7:00:e5:
dc:91:a2:38:8e:27:40:ca:a5:1d:64:bf:0c:0b:95:
32:62:86:55:b1:02:02:4d:32:aa:9b:38:e6:82:ba:
92:04:3c:ee:66:15:bb:2d:e0:21:a8:69:b1:30:fc:
08:c4:e7:b5:bf:c4:e6:e2:06:76:d4:e7:b5:ea:20:
2c:34:b8:2b:a1:85:9a:46:86:6e:7f:c4:18:29:d5:
59:3b:25:80:c1:2a:30:1a:32:0e:40:f8:e0:4c:cf:
5b:3e:78:43:61:24:a1:33:1c:3f:dc:4c:ed:61:fc:
8d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:89:AE:EF:A4:29:97:F2:49:53:06:C3:86:F5:0B:CB:B3:95:9C:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/824BB108594011F18DCCD1A1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.25.0/24
Signature Algorithm: sha256WithRSAEncryption
72:86:48:87:da:0c:5a:4f:8c:fe:fa:5a:51:a1:86:f4:76:7b:
02:2c:a5:ec:03:22:99:52:0d:28:a7:dd:a3:a9:c7:19:26:44:
3b:d2:ac:b3:9b:dc:9a:37:91:cb:2b:3c:04:1c:04:73:15:fd:
0b:de:2d:59:92:9d:ec:ec:01:d1:c5:30:38:30:be:af:d5:3c:
b4:e5:f7:22:d2:b5:86:b2:78:04:2f:dd:fb:3d:71:06:0e:8f:
fb:28:92:51:db:33:88:f3:83:8b:8a:26:f2:27:a6:4d:0b:86:
64:27:7f:bc:0e:0f:6c:9f:4b:44:67:58:ec:0b:1e:34:93:33:
a7:c0:40:98:d2:c1:c8:41:7a:30:4d:d1:82:2f:2e:d6:8d:e3:
d6:ba:04:46:32:22:f0:de:65:bf:22:2e:25:03:30:33:ef:31:
c5:13:5c:b6:57:de:d7:e7:fa:95:d4:e0:0f:96:94:b4:c4:19:
19:47:9c:0a:36:7a:7b:9b:31:9b:9c:cd:c1:e6:81:c4:16:42:
43:d4:7e:d6:e1:cd:28:ad:d1:30:b3:4a:01:8b:87:f9:a8:bb:
0c:52:ed:2b:cc:c2:ef:da:a1:da:ff:3d:a6:f2:9b:51:1e:9c:
11:da:91:b4:90:c1:cd:26:c9:41:20:1f:24:e3:bb:2c:9f:54:
ac:76:36:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 04:58:02 2026 by rpki-client