Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1E94BA4577111F1BC3457ACCE1D38B0.roa
File: F1E94BA4577111F1BC3457ACCE1D38B0.roa (raw, json)
Hash identifier: 4I6EM6ZEIkzgerX5fylBCE2GrfdI8rijwr4c3Owd5HQ=
Subject key identifier: 7B:2B:19:29:57:56:D6:4C:F2:2A:8D:52:34:38:E0:7F:97:71:97:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CED1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1E94BA4577111F1BC3457ACCE1D38B0.roa
Signing time: Sun 24 May 2026 13:10:33 +0000
ROA not before: Sun 24 May 2026 13:10:28 +0000
ROA not after: Mon 06 Jul 2026 13:10:28 +0000
asID: 204548
IP address blocks: 154.222.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 15:58:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118481 (0x1ced1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 13:10:28 2026 GMT
Not After : Jul 6 13:10:28 2026 GMT
Subject: CN=6a12f8c9-2e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6f:fd:cd:dd:1b:a4:98:27:84:03:16:9e:f4:
70:fe:ed:91:de:18:1c:ff:f4:67:45:c7:70:8d:56:
6c:64:6d:d9:4d:e5:91:84:17:9f:b2:ab:fd:48:3b:
b2:42:a6:76:fe:98:47:4a:27:e0:9a:e1:46:b4:99:
53:78:48:70:61:15:2a:6b:ef:55:26:02:03:36:3a:
b8:7c:ea:f1:c7:85:53:55:e3:66:67:54:82:fa:7d:
2f:b8:54:b3:ae:fd:26:a9:17:41:82:56:e9:f8:fd:
a0:1c:d7:56:66:18:7a:a8:99:8f:38:fd:85:9a:2f:
c2:13:4e:c4:c9:1f:5e:96:04:ea:7e:b5:8c:6c:7a:
91:61:d8:1c:80:a3:c8:11:96:2b:fb:be:5e:aa:7f:
cc:33:e0:5a:1f:04:9a:f8:94:67:22:4f:66:fc:d0:
69:91:c6:90:2a:eb:f7:a3:32:fd:4a:4f:ea:b8:fe:
66:c4:eb:ee:b2:8c:55:4c:c5:29:0e:e9:c7:1a:26:
51:da:84:0e:10:03:60:6f:f0:ca:2a:f8:16:0f:22:
0c:ff:ae:a1:8f:56:8c:26:6e:6c:2b:88:43:ed:e5:
4a:2f:06:05:e7:cb:0c:95:f9:4b:63:c9:e6:d0:d8:
d7:6e:b9:9a:c0:f7:59:9c:c8:8c:2e:c6:17:c2:a0:
44:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2B:19:29:57:56:D6:4C:F2:2A:8D:52:34:38:E0:7F:97:71:97:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1E94BA4577111F1BC3457ACCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.133.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:41:73:2e:2c:6a:a5:cb:a6:1a:78:c3:d3:66:d9:37:59:88:
45:0c:f3:cd:04:bb:9a:12:bb:91:de:de:d1:03:a4:ce:65:16:
6a:15:2e:91:cb:d1:94:2a:b2:0f:0b:50:cc:3f:eb:3f:3b:13:
0e:c4:5a:ca:3c:30:a2:7a:88:06:39:5b:52:c1:19:78:e5:a0:
d3:9e:1e:1c:f9:fa:9c:2f:fa:86:f5:f6:3b:9a:6d:74:0a:47:
a7:c0:aa:d1:f2:16:9c:e2:7c:8d:af:51:b8:24:07:5f:d7:c9:
2b:49:2a:08:90:56:20:8a:97:df:71:83:7d:81:eb:c2:cd:e8:
de:a9:9d:3f:9a:ec:71:9c:f9:af:7e:0a:9e:a8:8e:e6:38:58:
8f:04:29:85:3f:f5:f4:49:a1:98:cc:a0:af:57:96:89:b7:2c:
e4:19:53:18:e6:3e:51:63:37:f0:53:21:73:83:40:5d:1a:26:
68:37:42:8e:51:64:9f:0a:be:2d:87:c1:76:9d:84:a5:16:43:
08:ca:12:29:02:7b:b4:75:f5:b8:0f:63:fe:9f:11:fb:cb:ca:
c8:06:b9:22:69:9e:b2:a6:a1:03:f6:de:5a:50:90:25:0b:52:
29:f1:24:47:eb:4a:06:8d:03:18:d6:ad:44:a8:51:ba:24:e4:
00:6c:92:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:51 2026 by rpki-client