Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA2D6DFC579811F1A4B8DB13CF1D38B0.roa
File: DA2D6DFC579811F1A4B8DB13CF1D38B0.roa (raw, json)
Hash identifier: EtuyQGJamyPWp+lzZJcgy6xSo35GgzaJ3MKJ1ag0OwQ=
Subject key identifier: E4:1A:3C:E6:16:B1:59:20:51:14:2C:F1:86:6E:42:A6:CE:6B:82:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CF01
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA2D6DFC579811F1A4B8DB13CF1D38B0.roa
Signing time: Sun 24 May 2026 17:49:03 +0000
ROA not before: Sun 24 May 2026 17:48:59 +0000
ROA not after: Fri 28 Aug 2026 17:48:59 +0000
asID: 401696
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118529 (0x1cf01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 17:48:59 2026 GMT
Not After : Aug 28 17:48:59 2026 GMT
Subject: CN=6a133a0f-9d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2b:ba:54:06:30:cb:83:68:a8:70:98:98:20:
31:37:fa:79:2e:bb:3b:1c:e7:e7:f0:c5:b1:e0:81:
54:a4:93:4f:58:d5:d3:14:26:8d:5b:a5:b8:47:c8:
1f:b9:61:a7:a9:c9:8e:2f:dc:9f:6e:f1:19:23:3c:
98:26:ef:37:b0:55:15:6c:8d:0f:f6:bc:65:d9:8a:
21:5c:50:09:6c:8f:17:8e:22:da:da:e5:36:22:44:
37:5c:40:c8:bd:1e:83:c9:03:1e:c1:00:44:10:79:
ab:13:a3:5e:2b:c3:3a:fb:58:05:ec:96:86:de:11:
04:21:66:3d:05:8c:ed:f9:bd:e8:b8:87:31:4c:5a:
c3:8c:a4:f5:76:fe:9a:0c:12:77:d3:58:8c:80:b4:
bb:89:5d:a0:ed:91:44:81:11:5b:09:ed:e9:05:35:
ad:89:b2:3c:18:bd:88:42:5f:b0:ad:6c:c7:ac:1e:
73:76:04:ab:f1:ef:d6:98:72:49:45:20:02:a2:90:
24:33:5c:a9:d4:15:a1:b8:28:40:77:d4:93:db:04:
d6:e9:0b:ee:e6:36:74:1f:50:d0:2f:03:43:28:81:
c6:88:e2:28:90:a2:71:ce:fc:ad:6b:3f:f6:69:fe:
a9:90:92:08:12:5c:5b:11:0a:e1:de:9f:0e:af:4c:
37:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1A:3C:E6:16:B1:59:20:51:14:2C:F1:86:6E:42:A6:CE:6B:82:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA2D6DFC579811F1A4B8DB13CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
91:fe:6b:fd:fe:ae:80:43:6d:89:80:88:e2:25:0b:ac:ca:30:
69:37:be:5d:be:7e:e6:2b:b8:9e:ea:b1:48:2d:4a:3c:43:89:
ca:6a:ee:a8:34:d4:62:82:80:fc:03:11:a2:86:73:87:81:73:
b6:ed:68:3b:1b:21:9c:e0:28:46:49:fb:f7:c7:31:1d:06:0b:
b0:a3:56:d3:d1:55:0c:44:56:d6:4b:ea:5e:be:5a:62:96:8a:
a6:40:80:eb:e2:eb:e1:ea:7e:5f:aa:54:62:03:96:ef:bc:e9:
de:d2:91:08:07:7f:68:96:df:74:8b:cb:7a:dc:07:09:53:f0:
e9:b5:8e:52:55:ed:b1:c0:60:6b:d4:16:22:c6:ab:f4:21:c9:
2a:63:fd:88:cd:72:ef:8b:3c:57:86:da:9f:05:be:70:85:25:
51:0a:75:5b:71:35:cc:d6:2b:06:6c:78:68:dc:06:34:99:38:
0f:81:9d:4d:e4:9d:b5:36:48:9f:a7:53:1e:d2:8a:e0:70:95:
af:74:b1:bc:71:1d:33:59:00:b3:b3:cd:44:b6:da:30:e5:93:
c5:87:ff:c3:fb:59:59:28:f7:02:5a:64:07:a6:d8:33:d9:24:
d6:88:74:58:d4:b0:95:32:12:98:17:01:a8:be:87:ee:0d:a5:
48:24:f3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:29 2026 by rpki-client