Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D903EA10577911F19C6F36DACE1D38B0.roa
File: D903EA10577911F19C6F36DACE1D38B0.roa (raw, json)
Hash identifier: texOlcBfqClYvz56SmWm9pp/k/42uAv3A57UvEP1xjI=
Subject key identifier: 22:24:91:CA:4D:54:D5:11:73:C2:CA:40:19:11:A1:EC:0F:B0:A5:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CEDB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D903EA10577911F19C6F36DACE1D38B0.roa
Signing time: Sun 24 May 2026 14:07:07 +0000
ROA not before: Sun 24 May 2026 14:07:02 +0000
ROA not after: Thu 09 Jul 2026 14:07:02 +0000
asID: 395793
IP address blocks: 154.83.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118491 (0x1cedb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 14:07:02 2026 GMT
Not After : Jul 9 14:07:02 2026 GMT
Subject: CN=6a13060b-2549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:52:68:29:43:60:ca:15:86:c5:cb:d0:b7:b9:
ac:51:dc:24:7b:5a:81:40:60:59:c0:98:e7:e5:14:
c1:9f:34:f6:84:e2:b9:d9:3a:62:79:3e:fc:f6:82:
99:5c:d8:f1:94:bd:26:b0:c4:0f:9f:bc:f9:8a:7a:
55:26:8c:21:3e:91:a9:a7:f5:f2:e9:43:49:2e:40:
77:b4:81:2c:d6:6c:ba:27:f1:2f:d4:df:4e:72:32:
83:e1:de:a9:9f:60:86:3b:e0:da:37:98:e3:70:e1:
15:5e:6f:47:6d:cb:68:5d:4a:2a:89:e4:5d:bf:5c:
81:3b:b7:d6:74:65:0c:72:eb:e8:c8:80:ee:2c:7d:
23:11:f7:f1:7b:45:cb:b6:46:18:97:ca:3f:c3:27:
45:8c:2a:1c:57:9c:2a:6d:32:69:50:72:33:40:51:
a7:2d:0e:b2:7b:f7:11:61:ad:57:58:8c:c0:a4:54:
97:cb:ac:e9:7d:b2:33:32:4e:b6:89:c9:69:2b:bd:
2a:ad:36:ad:47:35:57:79:49:bd:93:07:67:43:a6:
10:26:ba:42:0a:67:aa:c3:3a:2b:08:01:39:4b:d2:
a4:42:fa:c1:f4:cc:62:ee:50:91:8f:f3:16:e7:02:
ec:72:7b:b0:df:e9:2d:5d:e4:8f:16:30:7f:62:5f:
b4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:24:91:CA:4D:54:D5:11:73:C2:CA:40:19:11:A1:EC:0F:B0:A5:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D903EA10577911F19C6F36DACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.104.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:34:1f:03:d0:c3:a9:0d:f8:c3:5c:7c:d0:c5:93:5f:41:65:
87:99:a6:45:8a:ca:2a:ff:2f:72:b0:c9:02:64:8b:11:a1:e4:
ea:44:03:48:29:66:07:18:63:0c:ea:a0:83:da:7c:49:0b:a9:
77:c6:a1:ae:3b:f3:2c:ed:4b:25:b6:c5:ff:76:af:f0:b9:e7:
d8:be:4a:c1:6d:ef:cd:70:70:ed:35:0d:26:a2:3c:48:77:86:
39:9b:93:79:52:8b:9f:76:39:5d:e9:44:76:6d:dc:9f:85:0f:
3a:3e:67:51:bf:b0:d7:7f:ca:e6:ae:c7:3f:38:08:99:8a:aa:
55:88:f4:a4:6d:f9:fb:aa:b2:8a:56:f5:b9:6a:a0:f6:7b:a9:
f7:d7:c7:c0:dd:4c:4e:3c:85:31:dc:53:78:f8:ec:f1:0e:cb:
37:a7:1c:25:98:d2:12:21:6b:4f:21:61:66:57:32:1b:d7:fd:
14:45:ce:98:e7:ec:09:6a:05:76:89:ad:90:72:25:58:49:45:
98:8e:97:c2:33:dc:98:ed:f3:6e:55:3f:31:b5:48:47:a6:7c:
7c:22:c5:44:9d:6a:f2:85:77:65:31:72:4d:a1:af:7c:d8:6a:
f4:0f:83:d1:b7:e2:44:48:3a:2d:03:1c:86:ba:f8:98:f6:0d:
6c:f0:92:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:42 2026 by rpki-client