Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAEB6B2650F811F19939DBC0CE1D38B0.roa
File: AAEB6B2650F811F19939DBC0CE1D38B0.roa (raw, json)
Hash identifier: 0WHlGnno0/d3/SVqitvruPdvToIj+lYt6h9Dq0BqH0U=
Subject key identifier: C7:C9:02:7C:67:4E:9C:AB:0C:27:D1:47:57:E1:92:1C:2F:8D:37:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CBDB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAEB6B2650F811F19939DBC0CE1D38B0.roa
Signing time: Sat 16 May 2026 07:27:18 +0000
ROA not before: Sat 16 May 2026 07:27:13 +0000
ROA not after: Fri 12 Jun 2026 07:27:13 +0000
asID: 147176
IP address blocks: 154.84.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 12 Jun 2026 00:07:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117723 (0x1cbdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 16 07:27:13 2026 GMT
Not After : Jun 12 07:27:13 2026 GMT
Subject: CN=6a081c56-2ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b8:b7:f1:f0:5f:cd:42:a3:82:b5:78:37:0c:
cf:8f:77:36:35:20:ff:69:4d:43:8e:64:c1:49:49:
73:94:6f:1f:52:fa:21:c3:77:f8:97:ef:51:d0:59:
2f:09:13:bd:52:81:b8:35:6e:c6:cd:85:b0:05:25:
cc:e7:94:36:dd:f9:01:41:15:b1:f6:23:9b:a1:18:
63:0d:8f:6f:c7:05:89:48:cb:e8:87:be:aa:2f:f1:
22:36:2b:87:0d:5b:20:56:dc:14:e0:89:23:89:25:
01:d2:ee:b2:70:8f:24:e7:32:e2:44:4a:6c:4f:ab:
76:d5:6c:2a:6b:24:f7:84:33:1e:e9:f7:ca:95:1b:
dd:55:88:5a:42:2a:a4:5a:81:3f:17:29:8e:84:ad:
4e:50:e3:7b:75:21:a3:d8:e1:3f:31:12:80:3c:e5:
2e:cd:79:62:b0:f1:74:6a:e5:df:04:72:13:c9:c8:
1e:53:b2:02:8a:f7:6d:81:62:ff:21:c3:78:73:98:
ef:d4:3b:98:2f:e4:d6:db:3d:6b:90:cd:fa:2b:25:
5b:7c:f1:ce:ba:46:65:a3:f1:2a:27:c0:e8:d7:94:
70:19:dd:17:c5:9e:57:52:dd:45:ef:f8:01:71:27:
ae:e2:ac:16:33:8b:9f:a8:01:8f:0c:f5:21:63:f9:
c8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C9:02:7C:67:4E:9C:AB:0C:27:D1:47:57:E1:92:1C:2F:8D:37:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAEB6B2650F811F19939DBC0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.153.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:8a:3a:41:e8:4f:12:5f:6e:83:ee:48:5a:7e:c1:6d:25:a5:
37:54:7e:01:06:2b:26:d3:8d:3f:59:7d:00:17:dd:ea:9a:76:
2d:07:38:a3:a7:90:8b:84:05:ac:53:b0:88:14:78:4e:73:d2:
98:47:52:8b:e5:cf:be:a3:85:ae:07:be:0a:25:4a:24:d4:a4:
31:f9:cc:ec:64:2a:db:2e:ae:be:e9:f4:6b:1e:9a:27:15:53:
e1:b6:99:04:e9:69:b7:ac:21:c0:12:61:b3:32:79:f5:91:82:
b4:65:ec:5e:75:01:fc:37:80:4f:c4:ec:e1:5e:d1:9c:09:74:
98:34:b4:4a:52:26:d0:28:a2:60:11:e7:4a:d2:a8:8d:8b:0e:
1c:73:4a:68:e9:d1:14:78:99:90:7f:56:25:39:9b:3a:fa:4f:
f6:68:3d:f7:de:90:2e:00:c1:fb:9e:c7:14:0d:38:33:81:3e:
3e:c2:f8:e1:cc:8f:a7:8c:b1:cb:6d:ef:64:4b:7b:a7:54:3d:
9f:ad:c6:00:d6:d5:24:25:0c:0b:38:f4:7d:02:90:bc:e0:a2:
14:be:01:d6:23:db:44:31:4e:3a:9a:e7:bd:1a:23:63:42:28:
56:75:f0:6f:04:83:98:7b:ca:30:71:5c:ba:1b:6c:60:14:d4:
57:83:04:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 04:58:29 2026 by rpki-client