Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D4C7F5A535611F1977E89A2CE1D38B0.roa
File: 8D4C7F5A535611F1977E89A2CE1D38B0.roa (raw, json)
Hash identifier: Xg6hqZgAfKO1mGwR84AB+nJxFYleKON/5irbkaYZaE0=
Subject key identifier: 36:53:2D:2A:6F:80:2D:17:F0:A5:34:ED:F3:6F:70:36:4A:6F:81:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CC5A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D4C7F5A535611F1977E89A2CE1D38B0.roa
Signing time: Tue 19 May 2026 07:44:23 +0000
ROA not before: Tue 19 May 2026 07:44:19 +0000
ROA not after: Fri 19 Jun 2026 07:44:19 +0000
asID: 6079
IP address blocks: 154.221.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 02 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117850 (0x1cc5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 19 07:44:19 2026 GMT
Not After : Jun 19 07:44:19 2026 GMT
Subject: CN=6a0c14d7-6d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e6:72:17:b7:2a:97:50:d1:91:78:de:97:88:
5b:8f:ef:c0:6b:fd:53:86:c7:14:88:c8:f3:1d:24:
80:c8:d4:44:f6:f2:eb:7e:2f:ef:83:fe:52:34:af:
25:aa:02:2f:7e:e4:33:dc:8d:e8:93:d3:50:68:73:
54:f5:f6:21:6b:59:42:9c:74:2c:4f:05:a9:aa:ba:
02:4e:0b:a3:2f:78:df:db:66:88:42:ab:6e:a5:19:
8e:72:df:4d:14:8b:80:f2:d3:4e:dd:8e:c5:32:e9:
f8:6c:79:25:1d:36:64:d1:a5:37:7a:8f:90:52:5d:
12:5b:8d:a5:6f:86:48:68:f8:de:6f:01:51:3e:87:
06:bd:43:d8:b9:62:ac:72:73:b3:87:a0:f9:3c:4d:
99:ea:e4:e5:73:1b:46:64:b9:a3:df:6f:d4:a7:f3:
d2:af:34:a6:24:a0:4e:2e:83:d8:f7:c5:68:3a:e7:
2f:3f:02:ec:35:31:21:76:dd:db:08:a5:fa:4b:f0:
61:bc:b5:ef:58:1b:12:19:0c:97:2b:e5:80:74:ca:
09:ac:17:81:46:c9:66:32:df:1c:93:a0:51:e3:fa:
b2:ce:ad:17:4d:7d:d4:0b:a9:47:18:bc:7d:cd:31:
bf:75:31:13:31:66:6c:36:70:9b:d2:5e:44:87:51:
f0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:53:2D:2A:6F:80:2D:17:F0:A5:34:ED:F3:6F:70:36:4A:6F:81:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D4C7F5A535611F1977E89A2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.192.0/18
Signature Algorithm: sha256WithRSAEncryption
46:5a:a7:0f:6c:44:ea:f8:7e:5a:87:ff:6c:55:af:59:da:70:
31:f0:3e:06:98:a2:cc:dd:f8:0b:3c:4c:ed:1f:81:b6:9a:be:
6f:eb:a2:85:9c:d6:e3:04:c2:7f:f0:d6:e3:b9:60:a0:a0:e1:
da:ed:c6:fe:50:40:d5:6e:f7:d3:bb:e7:c2:9e:14:fa:7c:b1:
bb:ee:12:6a:0a:60:d1:f9:03:8e:c9:fe:b2:fa:cf:bc:36:92:
a3:a4:3b:b7:4a:c8:20:39:de:66:d3:eb:b5:f6:38:65:06:fb:
d2:5c:60:1e:5b:61:fa:ea:c7:54:34:2e:2e:4f:43:61:2e:7a:
07:c9:c4:1f:89:56:96:2e:48:fa:9b:65:48:b1:1d:6d:50:d8:
38:0a:6c:da:aa:e7:db:3c:47:a8:e8:d5:b8:ee:3b:8d:bf:88:
de:62:53:8a:e9:da:c6:b5:ce:ff:ba:a2:1d:f0:f1:e2:8b:8f:
9e:94:f3:ff:fa:66:0d:4e:a7:65:0c:5e:d4:73:8b:ae:1a:4b:
ae:50:0c:97:3d:2d:32:da:77:d1:39:da:e7:d0:4e:8e:b3:fd:
55:83:92:ae:02:98:6a:52:6f:4c:79:35:9e:a5:8f:89:de:de:
98:af:7d:89:9a:ec:15:4f:14:6a:ff:77:1d:b5:e7:ce:d6:5a:
6a:22:cf:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 06:53:33 2026 by rpki-client