Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C09A4E005B3A11F19FF801B2CE1D38B0.roa
File: C09A4E005B3A11F19FF801B2CE1D38B0.roa (raw, json)
Hash identifier: H6SHuphSGxZaWU3VcUQQE19b5xw1aIf2VR/EXTUuDRM=
Subject key identifier: C3:6E:13:E4:1B:58:CC:CD:C3:FB:C6:60:8F:11:67:C6:9E:12:C1:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D054
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C09A4E005B3A11F19FF801B2CE1D38B0.roa
Signing time: Fri 29 May 2026 08:45:33 +0000
ROA not before: Fri 29 May 2026 08:45:28 +0000
ROA not after: Fri 04 Dec 2026 08:45:28 +0000
asID: 9304
IP address blocks: 154.89.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118868 (0x1d054)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 08:45:28 2026 GMT
Not After : Dec 4 08:45:28 2026 GMT
Subject: CN=6a19522c-57e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8b:cc:1f:22:1a:6e:84:70:6d:ae:3c:40:8a:
47:c3:04:6d:a0:59:a1:ae:c1:09:5b:c9:07:60:1f:
12:6f:59:99:e7:ef:c9:73:0f:63:81:dc:9f:ec:f4:
e3:de:b8:25:ee:d5:bc:06:82:06:d9:78:bb:f7:3a:
da:bd:de:53:32:07:33:78:25:e2:00:0f:54:b4:ef:
e0:45:58:87:d0:ce:1a:8b:31:97:e9:5c:fe:a3:91:
0b:3c:32:fe:28:bc:2d:e9:d2:4a:09:4a:c0:9d:29:
de:4c:79:f6:f2:4c:bd:88:bd:7a:5e:b4:f5:a3:c4:
f8:74:4b:5f:d9:ef:25:38:0d:5c:3c:d9:07:cd:33:
f3:21:1c:a6:de:6c:01:c5:38:de:cd:6e:b7:2e:5e:
d7:fd:1d:b3:c2:70:ae:a1:fe:37:0c:9d:b6:76:98:
5b:be:32:bd:3f:cc:33:9e:31:b0:6c:33:35:b2:e9:
29:d1:ba:d1:33:ee:bf:ec:05:f5:04:19:3b:a2:da:
79:fb:9d:27:cf:da:88:04:90:1c:be:d3:32:2f:cf:
3f:72:33:96:69:bc:f2:5e:f8:70:f3:4a:1a:96:03:
2b:c4:79:52:23:a2:0b:16:a9:7f:f5:0c:50:07:a8:
2e:1a:40:27:68:d3:dc:b2:c0:40:28:28:5d:0b:5d:
e7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:6E:13:E4:1B:58:CC:CD:C3:FB:C6:60:8F:11:67:C6:9E:12:C1:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C09A4E005B3A11F19FF801B2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.6.0/24
Signature Algorithm: sha256WithRSAEncryption
27:a8:57:07:b2:18:3a:78:30:80:81:a0:6d:a3:e1:10:e9:d9:
2c:06:cd:e1:da:d9:06:c0:68:ea:ed:90:98:f5:16:46:85:f7:
71:86:a1:6b:10:f0:91:ac:96:3b:7c:58:9f:22:3a:de:7f:80:
3e:e9:d8:ac:72:a4:dd:df:1f:3b:f6:c4:84:e4:d4:7a:b2:a3:
d6:20:68:4a:31:b7:73:0e:fb:77:13:48:4d:08:ea:47:4a:65:
0d:69:b6:13:fa:04:33:eb:45:8c:59:08:3c:38:ea:18:48:59:
21:60:f8:ea:1e:60:39:7c:19:e2:49:df:30:61:b7:b1:c1:11:
31:b6:30:5b:ac:e8:90:2e:e3:a7:0b:80:dc:e6:e2:ca:f3:9e:
bb:fa:74:a7:50:1f:e2:2d:49:43:51:15:21:74:9c:8e:6f:1a:
b0:26:8e:0a:1a:19:5b:02:67:cc:c7:8a:e5:63:37:1f:a8:1d:
7b:f4:86:e7:69:5b:b2:01:49:00:9b:e6:e2:1a:94:0d:32:c8:
cf:e6:de:83:a4:b0:53:dd:91:a3:77:6a:ce:6b:b2:10:82:1e:
5d:57:a6:e3:ff:02:68:d2:27:7d:43:da:87:3c:03:79:40:34:
2b:e1:c9:56:ca:a7:93:51:1f:41:26:13:f6:40:54:34:b6:f0:
6d:16:f7:f3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdBUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTI5MDg0NTI4WhcNMjYxMjA0MDg0NTI4WjAYMRYw
FAYDVQQDEw02YTE5NTIyYy01N2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv4vMHyIaboRwba48QIpHwwRtoFmhrsEJW8kHYB8Sb1mZ5+/Jcw9jgdyf
7PTj3rgl7tW8BoIG2Xi79zravd5TMgczeCXiAA9UtO/gRViH0M4aizGX6Vz+o5EL
PDL+KLwt6dJKCUrAnSneTHn28ky9iL16XrT1o8T4dEtf2e8lOA1cPNkHzTPzIRym
3mwBxTjezW63Ll7X/R2zwnCuof43DJ22dphbvjK9P8wznjGwbDM1sukp0brRM+6/
7AX1BBk7otp5+50nz9qIBJAcvtMyL88/cjOWabzyXvhw80oalgMrxHlSI6ILFql/
9QxQB6guGkAnaNPcssBAKChdC13nkwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMNu
E+QbWMzNw/vGYI8RZ8aeEsFCMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMDlBNEUwMDVCM0ExMUYxOUZGODAxQjJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlkGMA0GCSqGSIb3DQEB
CwUAA4IBAQAnqFcHshg6eDCAgaBto+EQ6dksBs3h2tkGwGjq7ZCY9RZGhfdxhqFr
EPCRrJY7fFifIjref4A+6discqTd3x879sSE5NR6sqPWIGhKMbdzDvt3E0hNCOpH
SmUNabYT+gQz60WMWQg8OOoYSFkhYPjqHmA5fBniSd8wYbexwRExtjBbrOiQLuOn
C4Dc5uLK8567+nSnUB/iLUlDURUhdJyObxqwJo4KGhlbAmfMx4rlYzcfqB179Ibn
aVuyAUkAm+biGpQNMsjP5t6DpLBT3ZGjd2rOa7IQgh5dV6bj/wJo0id9Q9qHPAN5
QDQr4clWyqeTUR9BJhP2QFQ0tvBtFvfz
-----END CERTIFICATE-----
Generated at Tue Jun 2 20:50:55 2026 by rpki-client