Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C30E1B7860CE11F1BD10FA17CF1D38B0.roa
File: C30E1B7860CE11F1BD10FA17CF1D38B0.roa (raw, json)
Hash identifier: wzQmCTH6JOYDvhiCELt8pbkb8njQPJAxH6xqeK0WdRg=
Subject key identifier: ED:9B:36:3E:A6:D7:D3:9C:A4:DC:66:F8:2E:7E:87:AE:EE:74:6E:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D1BB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C30E1B7860CE11F1BD10FA17CF1D38B0.roa
Signing time: Fri 05 Jun 2026 11:07:38 +0000
ROA not before: Fri 05 Jun 2026 11:07:32 +0000
ROA not after: Tue 07 Jul 2026 11:07:32 +0000
asID: 147176
IP address blocks: 154.197.116.0/24 maxlen: 24
154.197.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 12 Jun 2026 00:07:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119227 (0x1d1bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 5 11:07:32 2026 GMT
Not After : Jul 7 11:07:32 2026 GMT
Subject: CN=6a22adfa-bf7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7b:bd:d8:b2:8a:5e:29:0c:bc:73:12:8a:be:
60:da:33:8c:07:37:98:8e:d0:a7:68:a0:4a:66:e1:
9c:ed:17:cf:2e:e6:d0:6b:bf:30:db:d5:64:f8:28:
1a:c8:9a:d3:5e:d7:5b:2a:0f:a6:fb:a8:4c:3b:5e:
4c:88:b6:49:06:23:fb:d7:3f:b3:a9:3c:79:cf:2c:
fc:18:e3:b6:1f:de:e3:f5:92:2a:42:38:a5:33:54:
75:2a:79:cd:0e:66:68:c5:17:c5:38:20:8f:5b:90:
9f:42:ba:d5:a7:93:22:6c:a5:1f:cc:94:de:63:85:
07:75:ee:4f:4a:bf:a5:14:d4:ea:8c:f5:c6:95:a7:
17:8a:9d:b7:71:83:bb:9a:4a:80:0d:e1:4f:ce:d4:
5a:6e:77:63:c6:5a:bc:0b:1a:c0:14:2e:f8:60:ca:
a2:46:f2:64:05:4b:e9:c5:d1:f8:67:c7:70:dc:f3:
a4:1a:7a:2c:42:7b:7b:fa:42:1a:bb:88:9e:9d:aa:
01:5e:d4:65:b2:a8:ff:b5:db:23:c6:2d:c0:4e:35:
1f:5f:68:1f:07:33:2d:eb:b8:53:e8:b3:9f:de:5b:
7f:8a:b6:5c:53:ea:e0:e2:b3:0d:e1:5a:cd:08:e1:
d6:9c:50:f6:a1:93:74:23:bd:13:35:74:44:ef:9c:
2b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9B:36:3E:A6:D7:D3:9C:A4:DC:66:F8:2E:7E:87:AE:EE:74:6E:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C30E1B7860CE11F1BD10FA17CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.116.0/24
154.197.124.0/24
Signature Algorithm: sha256WithRSAEncryption
09:c2:d2:73:3c:60:f5:6f:7a:c2:db:a3:4f:55:88:ac:3b:43:
61:b6:bd:8f:12:e5:be:e5:89:86:6c:27:c9:55:22:62:75:53:
d4:a1:08:85:39:62:8b:4c:74:ae:5a:f1:4d:93:36:92:d8:15:
1f:dc:f5:39:80:0b:58:c6:07:d7:9d:52:4f:a1:2a:a7:54:52:
ae:6f:10:c5:32:69:61:4b:fb:a8:fe:ef:47:63:3a:94:8f:e5:
48:b1:39:9d:fe:27:a3:86:29:60:07:33:8f:70:79:2b:4e:75:
8a:4b:92:7d:d6:71:b1:e0:56:79:8e:c7:3a:47:a4:83:81:c6:
d9:e9:91:79:a2:83:e2:ec:08:e9:6c:8b:36:db:e6:8e:f8:4b:
48:87:3f:0f:49:92:ec:ba:06:87:74:cf:64:37:65:5d:f3:5e:
a1:4e:00:75:1f:71:78:3f:e9:7c:36:10:65:3d:4f:0c:4b:e2:
02:40:9c:72:77:45:3a:39:c6:c7:8c:f5:f5:6d:72:b8:7e:b7:
fb:ab:94:99:e8:ee:c6:35:27:40:fd:b5:e5:b6:be:aa:20:48:
28:da:d7:26:fd:24:89:dc:34:68:b3:72:85:84:f4:ee:8e:1e:
07:4c:6f:18:6f:61:41:33:19:3f:76:c8:e1:10:4f:0a:5f:ae:
97:d2:d0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 04:59:41 2026 by rpki-client