Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC0D4DFE69C011F1BEFBCDE9CE1D38B0.roa
File: FC0D4DFE69C011F1BEFBCDE9CE1D38B0.roa (raw, json)
Hash identifier: VFjDT45txzMcUiP5wpVsKjKWgG67FA+vFCEb3Trodv0=
Subject key identifier: 3F:DA:36:81:7F:F7:73:BF:1B:F3:2E:E8:43:F7:61:87:E7:83:E3:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D395
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC0D4DFE69C011F1BEFBCDE9CE1D38B0.roa
Signing time: Tue 16 Jun 2026 20:21:41 +0000
ROA not before: Tue 16 Jun 2026 20:21:35 +0000
ROA not after: Fri 18 Jun 2027 20:21:35 +0000
asID: 219433
IP address blocks: 154.94.33.0/24 maxlen: 24
154.193.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119701 (0x1d395)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 20:21:35 2026 GMT
Not After : Jun 18 20:21:35 2027 GMT
Subject: CN=6a31b055-b304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:94:be:fe:de:04:f8:e1:a1:e5:e2:46:5f:
5a:ec:cd:eb:32:57:02:a9:a5:29:8e:53:b6:51:5b:
b2:41:91:73:5e:02:4b:85:53:89:7d:cf:2b:57:42:
36:b2:7d:55:2b:54:9c:e3:11:e8:5a:2c:9c:fd:3b:
02:ea:74:e8:42:e9:29:3e:88:ad:1f:e5:30:28:e8:
95:1e:50:77:78:08:48:78:dd:78:14:a8:12:34:d7:
b3:bf:fd:96:3b:1b:9f:7d:22:c1:e0:49:89:b4:aa:
63:cb:62:43:60:43:1a:98:75:6f:0c:56:c9:57:96:
90:41:d4:7c:33:cb:22:bf:f7:8a:11:07:24:76:04:
50:27:b7:c0:b2:ac:a5:50:4f:d9:01:19:f9:c3:78:
81:9f:75:5c:70:41:a3:8a:7b:da:73:88:b9:82:b9:
76:09:89:67:13:33:78:b1:1a:50:61:77:35:e3:cb:
bf:38:d9:c4:8e:07:52:e6:d9:ec:db:d2:65:4b:f7:
5c:a0:0d:79:df:4f:ac:2c:9e:a7:ff:c6:f0:42:e9:
d1:f8:03:14:3f:87:ff:80:5d:9d:6f:64:91:f5:42:
04:21:84:8a:f1:0b:73:e7:e4:b6:ea:e7:85:e2:8c:
b2:ee:52:ce:fa:71:9c:4d:47:e9:e1:9d:c0:93:32:
f8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DA:36:81:7F:F7:73:BF:1B:F3:2E:E8:43:F7:61:87:E7:83:E3:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC0D4DFE69C011F1BEFBCDE9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.33.0/24
154.193.4.0/24
Signature Algorithm: sha256WithRSAEncryption
31:4d:57:5c:15:3f:b9:c8:49:56:b6:53:13:0f:73:3b:a1:e6:
99:bf:a3:38:1d:68:63:1b:e1:1c:f2:db:c8:9e:15:56:cc:77:
9f:7c:c1:b0:66:e2:4b:4e:4c:57:4b:c0:56:08:3a:cb:55:2e:
57:c5:0f:8d:58:5c:8f:69:05:b2:f0:39:08:34:2e:78:6f:95:
e0:c7:4d:9c:30:0a:f0:2d:5c:53:86:c8:02:3f:62:a8:7d:a8:
12:dd:f8:2a:35:00:48:55:c0:63:7a:fc:d1:f7:5d:d6:22:71:
66:0f:f9:26:5d:ac:c3:84:56:5d:7b:8e:01:de:7b:29:a4:f1:
07:97:fe:fe:c7:a8:33:64:1d:60:84:b2:d1:3c:50:3b:23:c7:
05:17:28:49:53:2e:c1:19:1e:62:b9:fc:86:1c:db:4c:eb:12:
ea:60:ae:4d:cf:68:af:86:eb:d2:be:fb:89:11:11:3b:28:8b:
45:98:68:91:5c:27:25:89:07:c3:e9:e8:4a:cd:5b:5e:fe:6a:
f6:a6:43:ec:fe:67:c3:8c:b7:46:75:53:b6:57:35:1f:33:a1:
19:ab:a2:08:79:67:47:8f:12:38:bf:1a:8c:59:ca:37:82:0a:
55:f4:07:e0:e0:0c:2b:25:06:8c:34:e8:71:89:e3:19:c1:2d:
79:e8:3a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:36 2026 by rpki-client