Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2607BE455FF11F195008BD8CE1D38B0.roa
File: E2607BE455FF11F195008BD8CE1D38B0.roa (raw, json)
Hash identifier: 6ao0i+wYhFKZWJwbyzNENXn2VWtwIjDHT0A0yC8zdrI=
Subject key identifier: 3F:FC:99:02:A7:CF:C5:BB:50:90:51:48:1F:AD:F1:88:FC:82:5D:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE3C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2607BE455FF11F195008BD8CE1D38B0.roa
Signing time: Fri 22 May 2026 17:01:33 +0000
ROA not before: Fri 22 May 2026 17:01:28 +0000
ROA not after: Fri 26 Jun 2026 17:01:28 +0000
asID: 154177
IP address blocks: 154.93.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118332 (0x1ce3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 17:01:28 2026 GMT
Not After : Jun 26 17:01:28 2026 GMT
Subject: CN=6a108bed-87f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:52:a2:29:98:79:1d:32:84:be:80:01:26:f2:
31:da:bd:55:88:6f:77:64:a8:37:48:8a:82:e8:ca:
90:d9:11:e3:2e:b3:dd:80:77:94:ad:07:2f:80:0a:
89:96:c9:06:5e:9e:f2:be:12:2e:f7:08:ad:ac:a2:
c0:fb:08:0d:d0:93:4c:7d:ec:90:56:9c:8f:e8:2c:
a8:9e:60:80:48:03:5f:37:69:81:b6:7a:69:71:83:
0c:21:18:f5:79:b9:44:1a:75:cd:5e:57:d6:3f:bc:
28:25:f2:4d:92:ba:ea:a3:f7:96:1e:63:bc:80:e6:
46:be:ce:0f:fb:94:e9:01:f3:a4:c9:84:de:18:c1:
bf:bf:3a:83:9b:d6:e6:df:3b:a4:f7:37:d2:15:e2:
c7:3f:d8:1c:70:3a:91:18:e6:2a:b3:70:53:59:1b:
45:7c:96:63:d8:20:4c:eb:86:9e:4b:ee:c7:68:78:
ad:13:60:f1:45:62:40:56:37:16:9e:4a:aa:01:29:
0f:1a:3c:42:f4:7d:4c:2e:10:92:fa:da:07:f0:17:
72:99:59:7d:07:64:1e:96:b0:26:cf:bc:27:42:3e:
f7:c7:eb:b9:cd:c0:f3:96:dc:32:73:b2:79:65:1e:
9f:34:60:93:d4:b0:ab:b9:d7:10:47:70:59:1d:cc:
17:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FC:99:02:A7:CF:C5:BB:50:90:51:48:1F:AD:F1:88:FC:82:5D:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2607BE455FF11F195008BD8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.104.0/23
Signature Algorithm: sha256WithRSAEncryption
69:df:53:f6:3b:0f:48:37:c8:be:69:b6:a0:35:e7:cd:a1:dc:
4b:bb:9f:43:96:50:36:ce:bb:1a:5a:5c:9e:a4:5d:70:a4:f0:
c1:87:52:eb:17:4c:99:e4:33:73:5f:ab:2b:13:ed:7d:a8:ce:
25:1a:0a:a6:08:19:cc:b7:81:4e:fd:f5:ff:cc:9b:56:20:d4:
22:b6:92:b7:82:42:ac:fc:62:4f:c3:74:e1:37:a9:7a:85:49:
29:89:6c:33:fe:50:0f:cf:07:7b:18:64:4c:30:7c:0d:1b:5a:
ba:a5:36:92:ac:68:2e:27:48:f9:d8:77:46:31:25:2a:7e:3f:
f2:74:95:d8:c7:09:89:9c:de:78:2c:c6:9b:b3:a9:95:a4:a0:
fa:70:84:ac:a3:0a:39:3c:0d:df:db:6c:1a:1d:ec:79:6a:95:
bf:8f:f3:fa:02:4d:7d:e4:58:02:6e:73:6d:cc:27:d0:58:f4:
96:94:7c:de:72:22:f6:ef:9f:e8:09:14:4c:b7:10:fa:ad:fd:
cc:72:01:4a:b6:cb:5e:32:d2:cf:8e:7b:b7:2d:23:3b:88:aa:
cc:d8:a5:95:60:2f:42:e8:d3:42:38:77:53:38:e1:a0:45:3d:
32:d9:59:8a:24:e9:10:9f:b1:51:7d:a9:ce:54:12:76:34:99:
27:d0:7f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:30:54 2026 by rpki-client