Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CF4189251ED11F19D9B830CCF1D38B0.roa
File: 9CF4189251ED11F19D9B830CCF1D38B0.roa (raw, json)
Hash identifier: e2w3HTZvm0DhNmU8O8YZbb0756sUO27mRb4JJkOQ2KI=
Subject key identifier: D6:62:B8:9F:F4:15:97:27:58:D8:C9:CF:6B:CE:B4:2D:68:B0:88:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CC3C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CF4189251ED11F19D9B830CCF1D38B0.roa
Signing time: Sun 17 May 2026 12:40:41 +0000
ROA not before: Sun 17 May 2026 12:40:36 +0000
ROA not after: Wed 24 Jun 2026 12:40:36 +0000
asID: 400619
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Jun 2026 00:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117820 (0x1cc3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 17 12:40:36 2026 GMT
Not After : Jun 24 12:40:36 2026 GMT
Subject: CN=6a09b749-7c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:63:d2:04:6e:42:fa:31:4b:f1:d9:ff:3d:7e:
90:b5:43:11:1d:f8:a3:00:ae:5b:03:95:a8:85:83:
97:ba:a0:b0:40:18:34:cf:c1:26:08:f6:b9:58:80:
ec:f0:22:a0:6e:c6:2f:e3:81:8c:fd:45:2c:5f:f5:
b4:a9:5c:9f:76:8e:5f:98:35:20:ee:57:5b:2c:d2:
fa:45:8d:56:a3:8d:81:8a:c2:29:ad:6e:30:2e:fe:
a1:fa:63:36:01:8c:fa:26:80:5b:49:54:20:34:54:
67:e0:90:cc:69:86:78:1e:04:13:a2:ab:a3:f5:2b:
7b:af:d7:55:8b:63:48:6e:68:83:a7:08:b1:71:02:
2d:1d:09:9d:77:e4:ea:ed:27:7f:4a:14:66:8c:6b:
5e:4b:dd:1a:00:51:df:65:96:69:82:d8:2e:0a:3b:
75:93:4d:17:2c:80:74:1d:00:16:ba:af:94:f6:8a:
2f:a7:fe:24:7e:e4:29:da:f9:62:d6:df:89:d5:e8:
da:38:86:0b:67:81:c3:c5:81:f6:b6:bc:57:d4:8f:
20:a2:d3:7b:89:f9:db:e5:35:bb:25:62:8f:82:aa:
c6:74:b2:bc:b3:41:20:6a:01:ca:dc:6e:ff:36:ac:
60:6b:45:a1:db:e9:94:ab:3a:67:24:9e:4d:26:d6:
07:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:62:B8:9F:F4:15:97:27:58:D8:C9:CF:6B:CE:B4:2D:68:B0:88:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CF4189251ED11F19D9B830CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:89:d2:fa:0d:91:55:01:a7:ee:79:eb:0e:09:cb:97:d9:35:
1e:ae:fd:25:9f:d8:a5:93:ee:ca:01:30:85:c2:0a:85:42:5c:
1a:c2:28:d6:23:4b:6f:36:50:ae:30:a1:d7:9a:30:a1:8c:d5:
64:81:55:c5:5d:d8:29:0d:34:44:20:01:4a:9e:26:43:51:ff:
10:b1:5b:c9:85:b3:e7:f9:33:10:20:6f:04:36:6f:38:02:c7:
66:ee:51:93:8f:2e:f2:42:96:f5:55:7d:be:80:0f:23:63:f7:
cf:28:66:da:89:15:76:b0:4b:e0:e6:a5:3c:b0:79:66:d1:32:
f2:56:ce:f4:f2:bc:41:c4:1c:70:f2:c2:46:29:db:48:2f:29:
f8:ff:04:e8:d1:88:eb:54:00:58:ae:40:07:55:b3:10:78:92:
39:c3:78:a1:1a:db:36:55:45:12:a6:20:d8:b8:6c:03:cb:41:
45:ad:e3:01:3f:4d:3c:f7:f7:81:05:e9:a4:b9:cf:77:be:2b:
12:e3:ad:53:d9:49:0b:8e:bc:21:e9:bf:47:13:b2:a6:e1:71:
02:fa:b9:00:0b:fd:30:68:83:cd:53:af:13:5c:1b:9d:30:c3:
59:0a:3b:ec:31:cf:e5:ef:f2:9a:db:9a:d2:1d:2c:c7:54:d4:
8a:5a:34:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:48:28 2026 by rpki-client