Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97D07056551511F19E13B2C6CE1D38B0.roa
File: 97D07056551511F19E13B2C6CE1D38B0.roa (raw, json)
Hash identifier: ZjriKvCXaBFxyiafiASwbr5mQQ6BKcnFZXOqw6KhKOk=
Subject key identifier: 12:5E:C3:6A:A2:F5:15:25:A9:3A:01:4B:72:80:FD:3F:C2:48:A5:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CD64
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97D07056551511F19E13B2C6CE1D38B0.roa
Signing time: Thu 21 May 2026 13:04:26 +0000
ROA not before: Thu 21 May 2026 13:04:21 +0000
ROA not after: Wed 19 Aug 2026 13:04:21 +0000
asID: 139923
IP address blocks: 154.210.16.0/20 maxlen: 24
154.213.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118116 (0x1cd64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 13:04:21 2026 GMT
Not After : Aug 19 13:04:21 2026 GMT
Subject: CN=6a0f02da-5673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2f:d8:99:70:2d:e6:cc:93:37:72:4e:2c:92:
8f:41:e6:ec:73:01:b4:d9:46:c5:46:f2:3a:33:84:
3c:86:25:c2:ca:ae:1a:db:34:a8:3c:15:04:79:04:
8e:d8:04:61:fe:ea:d3:f4:e7:55:10:1c:e3:a3:f9:
a7:58:e9:7c:a8:02:75:17:44:06:2b:cc:34:a5:1a:
c7:64:f1:30:b8:b5:9b:b2:e7:a9:bd:61:59:c2:93:
f2:e3:3e:92:cb:d0:46:86:5f:a5:cb:38:08:52:94:
c3:bc:79:ea:a8:4f:cc:86:ec:b9:08:7f:ab:88:15:
2b:89:ce:b9:12:29:c0:66:3b:9f:5c:bb:f4:be:49:
49:fa:68:7e:41:b3:12:9b:1a:79:ea:f9:7a:f2:30:
b7:cd:21:ea:cb:b3:b6:52:e3:19:1f:6b:a7:fb:21:
f1:fd:f6:e9:bf:1a:a9:3f:0e:1d:03:60:1f:93:a2:
04:c3:8f:a5:86:94:c8:e1:8d:a2:df:7f:df:69:3c:
b3:8a:51:97:a9:fa:f2:28:2a:d3:74:8a:2a:80:08:
81:7c:9c:ee:c4:92:bb:1d:d1:a1:9a:65:87:ed:1b:
03:c0:31:f7:7b:76:21:1e:5e:04:a7:0f:22:5c:33:
b3:7c:d6:25:e9:5c:98:48:34:8f:c2:dd:3e:c9:cc:
f1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5E:C3:6A:A2:F5:15:25:A9:3A:01:4B:72:80:FD:3F:C2:48:A5:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97D07056551511F19E13B2C6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.16.0/20
154.213.64.0/20
Signature Algorithm: sha256WithRSAEncryption
b2:6c:cb:03:03:03:94:01:de:c7:d7:8a:9a:fd:c8:93:fe:37:
14:01:a7:d2:20:b6:b3:79:97:73:c4:01:38:21:d3:ff:eb:f2:
cd:aa:23:38:cf:2c:0a:25:72:63:0f:08:c5:28:4d:aa:e3:9f:
c6:ad:b3:f8:4f:a1:72:05:0e:2e:dc:8d:0f:d0:e6:f9:23:c2:
7c:36:37:a7:42:74:c0:43:d1:bb:7f:e6:34:71:db:fc:85:ea:
98:1b:aa:7d:ff:d3:9a:91:07:7a:44:6f:84:f1:77:b4:78:fa:
e0:f4:7c:38:54:09:bd:1f:c3:cf:66:ec:7f:65:ee:2c:e0:65:
38:02:55:25:e4:d9:6d:2e:1e:88:da:c0:9a:8c:9a:50:a1:44:
7a:5c:42:d3:aa:ee:b2:23:c2:df:32:05:78:d1:e0:70:4f:1f:
7f:92:7c:d8:3c:b1:ea:c0:30:25:1a:a0:9e:21:a6:d4:55:1a:
e5:52:79:08:bb:1b:cc:fa:ef:45:5e:10:1c:fe:20:6d:7a:2f:
22:54:eb:18:7b:d6:1a:8d:84:f7:9a:82:c7:75:63:28:c9:3d:
a7:e8:1f:ed:f5:04:09:7f:70:5a:62:cc:f7:86:87:86:4e:ff:
8f:ee:46:ff:71:07:c8:44:1e:b6:c0:a7:0f:94:ba:6f:89:1b:
9d:f8:84:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:30:55 2026 by rpki-client