Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAF7AACA554311F1922D60DACE1D38B0.roa
File: CAF7AACA554311F1922D60DACE1D38B0.roa (raw, json)
Hash identifier: NS0vE+O5bYVLgQHRzftYp2eBanoXeO0w6QHqepxCbUM=
Subject key identifier: 13:9F:FF:90:15:CC:0E:D0:08:5E:37:59:DA:04:5A:24:A3:85:F5:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CDAB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAF7AACA554311F1922D60DACE1D38B0.roa
Signing time: Thu 21 May 2026 18:35:08 +0000
ROA not before: Thu 21 May 2026 18:35:03 +0000
ROA not after: Fri 10 Jul 2026 18:35:03 +0000
asID: 25160
IP address blocks: 154.81.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118187 (0x1cdab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 18:35:03 2026 GMT
Not After : Jul 10 18:35:03 2026 GMT
Subject: CN=6a0f505c-478d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:97:c5:9d:d2:d9:3a:ca:96:b2:0c:cb:dd:
72:09:0d:76:f9:fa:25:74:e6:8c:51:03:05:4b:85:
28:86:e9:44:bc:fa:0c:6a:dc:26:c1:12:9f:97:f0:
c4:7a:8b:7c:38:7e:43:5b:86:89:ae:76:81:a1:13:
44:a5:4a:b7:de:28:56:17:36:47:57:0c:b2:ba:d9:
19:a6:40:70:c1:4f:e4:28:5a:2f:c9:21:69:fb:f9:
7b:32:fb:22:df:4c:12:64:59:06:a1:b9:5d:ed:df:
4b:b8:78:f7:09:fc:fc:b4:6a:83:ac:6e:a9:ab:e4:
6e:c7:ee:20:f4:76:e1:ec:22:50:f9:c9:4f:c1:be:
b1:bf:7b:32:bb:60:ae:c7:7f:26:03:98:c4:6d:ae:
dc:1c:f5:2a:13:bd:d2:47:bd:5a:e0:7f:9b:0a:ef:
b1:ff:2d:42:ce:79:d7:c2:8a:5c:f9:7d:78:55:75:
c1:e9:37:e0:cb:e4:e2:75:eb:71:04:aa:1c:cf:1f:
e0:75:a6:62:25:30:c1:fe:be:91:e9:69:2e:d3:d5:
f7:33:f3:8a:ea:98:7a:5a:df:23:f4:79:5d:58:a6:
24:d3:fc:be:28:d4:5a:10:16:61:ad:6b:16:16:13:
c6:0e:b3:d9:95:d9:a2:81:a7:cd:4c:ce:69:da:62:
8a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9F:FF:90:15:CC:0E:D0:08:5E:37:59:DA:04:5A:24:A3:85:F5:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAF7AACA554311F1922D60DACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.50.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:50:c5:09:b3:70:67:6b:c9:78:51:cb:7e:b6:83:79:08:a7:
47:af:12:93:0a:50:fc:81:66:13:18:50:72:c8:c6:2d:4d:21:
96:13:d3:01:c0:cc:c2:c6:f2:18:3c:13:7b:d9:23:ea:4e:f2:
d9:f9:ce:11:da:2a:ae:e4:1e:35:a2:84:80:e9:ad:51:b0:46:
01:e3:89:d2:83:d2:84:bf:94:73:6d:6e:d6:d3:ae:8a:3e:6d:
b2:82:d4:58:9f:e5:ef:c4:73:a2:47:1c:d6:a8:24:78:2d:14:
61:d0:3a:13:7c:f8:90:a6:53:6f:c1:38:ce:19:9d:98:5e:a5:
c2:8b:62:5a:ed:31:3a:5c:c9:41:79:6f:ef:4a:e7:c8:d6:ee:
32:1b:28:02:84:4b:4d:4e:78:9c:12:24:c7:a7:fc:47:fc:2f:
fd:e4:58:77:01:74:cd:44:b5:50:84:67:db:e3:1c:a8:72:f0:
18:5d:95:59:aa:2a:f9:b5:b5:0a:0b:dc:d3:e2:2f:42:e9:22:
d1:ed:fe:0b:65:2b:0e:03:d1:9c:7f:08:27:20:05:2f:c2:7f:
44:03:91:d0:53:62:44:9f:a6:58:10:f0:98:0e:d3:2b:a9:46:
08:42:cd:25:66:c0:72:71:f4:5a:1c:f9:19:d1:69:31:0e:f3:
f5:91:b6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:26 2026 by rpki-client