Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F18230D254E111F1BF9B080ECF1D38B0.roa
File: F18230D254E111F1BF9B080ECF1D38B0.roa (raw, json)
Hash identifier: YyTowvsBMWrwO3+pq0oiOxDogmzhDq8zuaELTGCd0Z8=
Subject key identifier: 72:56:1F:58:D7:6A:DB:3D:31:5C:6D:32:5A:23:9E:E9:7D:12:2A:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CD3C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F18230D254E111F1BF9B080ECF1D38B0.roa
Signing time: Thu 21 May 2026 06:54:42 +0000
ROA not before: Thu 21 May 2026 06:54:38 +0000
ROA not after: Sun 20 May 2029 06:54:38 +0000
asID: 17561
IP address blocks: 154.83.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118076 (0x1cd3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 06:54:38 2026 GMT
Not After : May 20 06:54:38 2029 GMT
Subject: CN=6a0eac32-8f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ae:32:f0:00:c2:53:bf:ac:0e:38:93:1b:1a:
d0:e0:8d:71:10:3e:e8:5d:8f:3b:a6:ec:8c:14:c6:
8c:a2:f0:42:14:d7:bb:4a:42:35:ea:9a:15:8e:46:
0d:ed:40:1a:fd:b9:22:5b:78:c1:60:dd:6e:e0:21:
e2:71:94:34:e0:e4:c2:6b:ac:08:31:aa:a4:a1:4e:
58:6d:71:36:65:f9:a1:27:64:d3:b3:1f:f2:d2:6b:
4d:45:e3:aa:eb:2b:08:bd:16:ce:f3:b0:94:39:7a:
89:07:d3:40:aa:35:69:d2:ec:1b:26:b8:b6:6e:62:
4e:34:ad:b0:83:93:2b:1a:6d:2c:b3:18:3b:50:5f:
76:3b:eb:e9:7b:26:b7:e7:e0:e6:7f:58:fb:9b:7c:
16:63:3d:06:09:85:2b:42:d2:b0:c1:20:52:df:93:
e3:66:24:86:be:90:bd:ca:b3:61:e4:67:bf:e1:62:
ef:74:1d:a2:7e:c5:ae:47:9e:1e:65:cf:65:ef:c6:
69:6c:cb:17:73:9a:50:80:44:90:e3:ac:f2:a1:78:
e0:a3:d7:cb:cc:69:81:28:10:1f:e9:eb:7e:3b:1f:
b2:c0:d2:1e:f6:84:14:dd:86:c8:49:03:19:3e:39:
55:eb:f4:56:26:8a:0d:c1:9a:e1:c3:b4:04:31:f8:
4f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:56:1F:58:D7:6A:DB:3D:31:5C:6D:32:5A:23:9E:E9:7D:12:2A:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F18230D254E111F1BF9B080ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.28.0/24
Signature Algorithm: sha256WithRSAEncryption
04:7e:14:dc:5b:53:38:97:76:ae:25:48:a4:ff:7c:da:b2:89:
3f:cc:1a:7b:e2:81:f5:97:46:2d:a1:d1:f4:d5:ef:7b:42:4e:
68:27:3f:50:8b:69:90:90:7b:e3:96:5e:cc:f9:cf:b1:6d:96:
c5:2b:37:d9:0b:a7:8b:11:7a:89:2e:2a:c4:53:2b:cf:01:bd:
ca:a6:b8:97:82:b2:0a:93:5a:2f:a2:48:20:25:44:9e:50:04:
67:a2:47:01:07:9d:6c:0f:65:2b:61:ff:2d:23:cd:d2:f4:51:
a5:f5:a1:b2:29:e3:3f:7c:86:bb:2c:44:9e:bd:b5:d1:e8:a8:
a8:d9:99:de:1e:86:3a:d5:de:8e:ee:ce:d6:db:cb:2a:ca:86:
79:16:94:a7:fe:1d:e4:89:88:ff:ba:9f:a4:4c:f7:ae:e3:62:
b2:0b:9a:97:37:4c:a0:79:d7:bd:08:bf:62:9b:05:8c:7f:8f:
da:73:f3:6d:aa:8f:28:95:99:4e:49:a7:7c:5e:fa:a4:11:31:
86:9c:82:ac:cb:f2:67:d1:57:06:47:d8:24:f1:2c:2a:be:a9:
c3:33:8c:88:e8:f8:84:5d:32:22:11:4f:8a:4e:67:88:4a:dd:
83:33:5a:2c:4a:48:6f:e7:fa:b9:30:d3:0a:42:d4:30:09:9e:
b6:93:61:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:36:03 2026 by rpki-client