Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C05F67C455DE11F18C969312CF1D38B0.roa
File: C05F67C455DE11F18C969312CF1D38B0.roa (raw, json)
Hash identifier: wU2AaY52S7KrZ1Pre+6dz73CljFoLbBiunikBNJOXUo=
Subject key identifier: 0C:CA:FD:D6:88:30:EC:55:64:67:99:C4:56:15:AE:86:DB:C5:57:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE0C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C05F67C455DE11F18C969312CF1D38B0.roa
Signing time: Fri 22 May 2026 13:04:23 +0000
ROA not before: Fri 22 May 2026 13:04:16 +0000
ROA not after: Sun 14 Jun 2026 13:04:16 +0000
asID: 147176
IP address blocks: 154.197.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 12 Jun 2026 00:07:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118284 (0x1ce0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 13:04:16 2026 GMT
Not After : Jun 14 13:04:16 2026 GMT
Subject: CN=6a105457-d057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ab:6b:b6:75:a8:75:82:54:61:b5:77:e1:de:
9b:2d:78:74:0a:20:8b:9f:82:e7:2c:cc:3a:f6:04:
cb:3d:b5:52:65:bf:9a:68:2b:20:10:0d:3b:b1:08:
a3:ed:26:6c:fa:23:14:e7:5c:0a:f0:a8:e2:83:7d:
ac:bf:2f:76:73:36:d9:3c:79:a6:eb:84:11:55:8a:
23:6b:77:9c:a2:35:f7:22:b4:72:84:83:72:da:dd:
d5:5e:36:06:1b:b6:3e:5a:50:e0:fe:11:83:6d:fc:
64:b3:6d:9b:61:0b:52:35:00:52:2a:56:2b:fe:5e:
f7:61:8e:b3:e1:b5:94:4a:53:eb:16:ec:f8:38:d8:
d9:43:99:ba:0c:1a:75:38:58:4e:4c:eb:56:98:6f:
bf:99:91:e2:73:ed:5a:50:78:29:83:1e:46:0f:59:
80:16:20:86:fe:3f:14:65:46:c8:ff:99:85:fb:5c:
5c:e6:39:1c:69:cf:eb:f8:ad:aa:d6:68:10:1b:45:
56:78:5a:15:5a:eb:81:14:01:fd:4c:5e:24:55:5f:
39:8d:a8:3f:55:4e:a0:18:86:20:a5:c8:c9:4e:13:
50:86:88:30:b0:d3:56:cd:dd:90:ea:44:6d:b1:94:
7a:22:20:32:6a:e3:8e:38:9d:bd:ba:e3:94:93:01:
62:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CA:FD:D6:88:30:EC:55:64:67:99:C4:56:15:AE:86:DB:C5:57:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C05F67C455DE11F18C969312CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.102.0/24
Signature Algorithm: sha256WithRSAEncryption
46:89:8f:66:6e:8e:3e:e8:aa:f6:d3:b8:c7:c0:9d:68:61:51:
97:c1:20:f7:6d:8a:e7:c4:3f:8a:5f:b7:ee:68:71:1d:99:2d:
db:90:cf:8e:a0:72:8f:50:12:09:56:12:b7:68:0f:76:9e:a4:
34:a1:95:c2:98:f0:67:a0:e8:57:f7:5e:ca:4f:86:af:4c:9a:
73:03:b3:9d:ac:31:7d:2e:28:ce:ce:92:de:0c:37:75:e1:eb:
04:6d:ed:ed:fa:54:87:45:c3:00:ff:e4:71:11:5e:7e:6f:b9:
2e:48:53:ca:84:bd:37:02:5e:38:d9:57:4f:10:85:4a:f4:b4:
b7:ef:ee:9a:c2:ed:88:41:bd:6d:76:1a:8c:a7:1c:8d:2b:1a:
bf:56:a4:b4:f8:a3:1a:05:c1:3e:be:66:a1:af:33:25:36:a7:
fa:04:8a:d5:ff:f7:b2:80:f5:e2:b0:bd:35:e8:ca:3f:bc:62:
5c:ae:82:4c:cc:34:cc:12:3a:9a:64:77:90:22:83:1e:d6:fa:
18:58:9f:0c:41:b4:2d:92:61:15:ca:9a:ac:46:3b:ad:de:f2:
b3:99:d2:29:73:b5:a8:2d:73:3c:90:73:a0:1a:12:79:f0:8f:
17:02:25:a4:8b:6c:06:d7:fc:d4:1f:57:9a:80:96:25:f7:f5:
9f:c0:42:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 04:59:08 2026 by rpki-client