Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2718962544B11F199DF0BF2CE1D38B0.roa
File: E2718962544B11F199DF0BF2CE1D38B0.roa (raw, json)
Hash identifier: Dj721M4CNDbyWtrynt6NoOnp1/yytZX9327SfZ/HY18=
Subject key identifier: 3D:11:39:F6:A2:FE:49:A9:42:58:09:4F:0A:3C:BD:BB:D1:72:F6:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CCD4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2718962544B11F199DF0BF2CE1D38B0.roa
Signing time: Wed 20 May 2026 13:00:33 +0000
ROA not before: Wed 20 May 2026 13:00:28 +0000
ROA not after: Tue 25 Aug 2026 13:00:28 +0000
asID: 13335
IP address blocks: 154.194.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117972 (0x1ccd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 20 13:00:28 2026 GMT
Not After : Aug 25 13:00:28 2026 GMT
Subject: CN=6a0db071-4ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:93:2b:c2:c8:78:67:2b:c0:b4:27:4d:c0:ab:
36:4a:55:14:91:95:70:45:95:84:32:cd:4f:59:7c:
97:fc:c0:cc:09:1a:6b:93:af:8b:b8:b3:a9:3d:81:
c0:0b:db:42:c0:cf:80:a2:5b:b8:8c:ac:f5:ff:80:
f5:c2:dd:2e:86:b4:12:24:4b:ec:43:23:45:78:ca:
93:35:71:22:24:20:43:f0:3d:9a:96:1c:8a:2d:dc:
1a:2c:81:41:d6:3d:03:58:9c:6f:df:46:5f:84:6a:
de:fc:6a:3e:2c:4c:0f:c1:31:35:ac:ec:55:11:dc:
7d:4e:e2:2c:d6:ef:5f:73:e8:b7:41:92:5f:9c:6f:
6c:86:f7:e8:b8:64:cd:40:9b:ab:65:70:f3:0a:fa:
2e:76:6c:39:06:8d:d1:63:b6:e8:25:d7:a6:2f:11:
9b:c2:bc:13:ba:ff:77:08:40:8d:87:2b:c0:e7:fb:
f4:2b:1c:c3:e6:ce:eb:f0:67:d1:a3:ba:e3:0e:14:
09:f6:ad:ae:52:0d:47:3a:f6:30:da:97:80:01:c8:
c2:33:b9:fe:b6:f5:a6:1f:25:c9:c2:34:f2:b4:29:
37:ac:36:14:db:38:d9:31:b0:cc:8f:33:b7:4e:07:
93:19:0f:b8:19:47:57:04:b5:6d:b8:70:52:1a:56:
c1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:11:39:F6:A2:FE:49:A9:42:58:09:4F:0A:3C:BD:BB:D1:72:F6:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2718962544B11F199DF0BF2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.225.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:36:cb:7e:f0:13:b8:9e:15:27:a5:aa:62:e2:b4:a3:85:92:
0e:40:14:40:1d:79:c7:ef:94:56:61:31:45:23:71:39:77:a9:
c0:8c:d5:83:f7:b5:dd:dd:a4:9a:92:7e:4e:76:34:8a:fb:2f:
be:29:01:50:c4:fc:ce:59:a5:0c:52:bb:97:b8:1f:26:c6:d5:
03:c0:39:16:f1:36:bc:c4:93:53:d0:dd:4d:22:3f:b5:57:47:
60:91:99:d6:8d:ac:3b:17:03:c4:ef:04:bd:36:b0:ec:73:70:
ed:61:3b:6e:c6:79:f4:44:44:e0:62:02:35:02:f6:d1:e3:25:
4f:3c:d5:c8:e0:b4:ca:c1:9e:ba:d4:2f:1d:02:13:44:0f:9f:
73:c6:97:6b:78:f4:4c:fa:da:f7:13:57:ce:dd:a9:34:75:b5:
58:0f:f6:e3:4d:0a:fa:1b:c1:60:12:c1:9e:92:ac:37:cc:af:
68:42:b5:d8:34:8a:b5:1e:c2:01:a6:4f:64:c6:63:8e:c8:d7:
47:11:0e:28:bd:76:9f:3d:ac:2f:c4:04:f2:c9:76:e6:20:cc:
e7:3e:f7:0f:a6:c9:7a:b1:16:d2:c8:f0:9b:a2:21:68:82:c5:
68:33:77:fd:10:72:3b:4b:01:d6:6c:af:01:10:d3:dd:1f:fa:
f2:cc:d2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:54 2026 by rpki-client