Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C56534246D9E11F18E689CB2CE1D38B0.roa
File: C56534246D9E11F18E689CB2CE1D38B0.roa (raw, json)
Hash identifier: YuIUD7taX//9mShGknDski9FoA7PlNQOXcRA5bPEHqc=
Subject key identifier: 49:E8:31:CC:60:6A:4C:91:64:57:24:0A:56:5A:23:EF:A8:40:7A:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D448
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C56534246D9E11F18E689CB2CE1D38B0.roa
Signing time: Sun 21 Jun 2026 18:26:51 +0000
ROA not before: Sun 21 Jun 2026 18:26:46 +0000
ROA not after: Mon 27 Jul 2026 18:26:46 +0000
asID: 63023
IP address blocks: 154.94.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119880 (0x1d448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 21 18:26:46 2026 GMT
Not After : Jul 27 18:26:46 2026 GMT
Subject: CN=6a382ceb-18c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b8:e1:cf:46:0b:bb:3d:ac:5e:3b:1e:9a:45:
f8:6c:96:34:a5:71:ce:db:63:ae:08:10:c0:e0:55:
c5:f0:3f:e7:32:9c:9b:26:98:52:ec:e2:86:5f:d5:
45:b2:8f:68:2c:8d:39:1c:f0:73:c0:3d:f1:e4:b0:
c0:54:ba:14:0b:46:1b:44:7f:f7:9a:6d:7e:e4:cb:
0c:84:45:c4:a6:39:90:d9:90:86:0a:86:33:d1:e0:
89:bc:84:7f:52:87:ad:1f:57:55:20:d1:9e:88:f5:
92:5d:04:fb:94:68:af:3b:f4:d7:78:bc:b4:b1:52:
a9:f2:00:9e:3a:0d:d8:b5:c5:23:4b:c6:87:96:75:
59:d1:f8:68:8b:6c:08:ae:61:e8:c6:0f:24:08:53:
13:c7:2c:81:ac:bd:42:92:b4:aa:21:d7:29:5d:d5:
85:08:fc:cf:62:f7:3e:0a:df:a5:04:3e:d8:13:69:
1c:33:16:9e:5a:d2:8e:b4:35:5c:75:9b:84:0e:1e:
35:c7:61:aa:39:51:53:40:de:ae:c9:b9:e4:38:b0:
c0:62:a0:cf:eb:13:a2:b7:d9:90:5c:de:67:b4:b4:
3b:7b:3e:c7:ad:32:33:e0:d2:5a:a8:87:6e:81:e0:
66:3a:e5:2d:81:d5:e5:6a:e6:a0:8c:16:f7:db:db:
a4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E8:31:CC:60:6A:4C:91:64:57:24:0A:56:5A:23:EF:A8:40:7A:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C56534246D9E11F18E689CB2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.38.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:d8:0d:01:ad:e9:c5:18:73:b3:16:2b:f8:7a:b5:39:72:ba:
7a:19:83:0b:ac:0e:2b:52:66:12:50:72:0d:92:3a:dd:56:d0:
bf:b0:60:52:7f:cf:db:83:8a:a4:85:cb:cf:77:bb:1f:96:38:
f6:b5:20:1d:2f:35:ca:9b:46:68:66:2e:1c:2e:de:bf:3a:e1:
de:5e:e3:7c:de:31:66:ec:91:89:3b:a0:4a:da:ce:83:cd:ae:
7b:de:91:ba:73:26:50:b3:fa:c3:cf:59:4f:61:1e:0e:0c:ea:
88:64:9e:19:d7:cd:0a:18:95:76:f8:74:e0:41:ac:2f:ba:16:
01:44:97:f4:73:1b:70:22:d0:c0:8b:29:b9:9a:fd:89:14:d6:
35:fe:e3:96:cd:58:42:bb:77:2e:06:ae:a0:10:c8:8b:6b:93:
39:65:bb:6d:4b:0b:18:f4:4a:5e:45:95:43:8f:ee:40:8d:fc:
c9:44:28:2f:f8:f4:2d:b0:e1:da:a2:20:f5:e4:5b:e4:ca:ed:
25:b8:c0:f9:24:e1:40:a6:e6:f0:68:9d:00:da:f5:db:27:21:
c8:b4:2a:83:e3:cd:0a:29:80:5f:47:9f:29:7e:1e:73:16:33:
58:39:5e:c6:9c:6f:90:67:9c:0a:d8:58:ff:eb:a2:f6:a0:76:
dc:9e:e2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:31 2026 by rpki-client