Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC7F425E554511F1B746A5E6CE1D38B0.roa
File: FC7F425E554511F1B746A5E6CE1D38B0.roa (raw, json)
Hash identifier: tcqI9NzY/W4+DU6JU5hsQH8xPIWDezCI0Wus9M3H+Nw=
Subject key identifier: FC:12:09:E0:59:3A:41:23:27:71:E9:FE:58:17:A2:0C:D2:65:01:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CDB3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC7F425E554511F1B746A5E6CE1D38B0.roa
Signing time: Thu 21 May 2026 18:50:51 +0000
ROA not before: Thu 21 May 2026 18:50:46 +0000
ROA not after: Fri 10 Jul 2026 18:50:46 +0000
asID: 401783
IP address blocks: 154.196.208.0/24 maxlen: 24
154.196.209.0/24 maxlen: 24
154.196.210.0/24 maxlen: 24
154.196.211.0/24 maxlen: 24
154.196.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118195 (0x1cdb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 18:50:46 2026 GMT
Not After : Jul 10 18:50:46 2026 GMT
Subject: CN=6a0f540a-038b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:50:0f:7f:56:95:91:db:00:6f:0e:49:94:2a:
7b:91:8a:aa:ba:da:a3:c4:6b:8d:cf:2e:15:05:56:
8a:47:57:04:80:15:d1:94:d3:1e:7d:c6:43:ef:3b:
2b:92:81:bd:a5:bd:8a:7b:3a:fa:5d:a8:ea:4a:d3:
2f:03:87:81:db:63:ab:a4:48:92:7d:d3:e9:4e:c8:
30:49:63:f5:f0:55:ae:18:a8:8e:4e:39:25:83:72:
b1:1f:a8:88:8a:d8:66:c5:1b:4f:ea:17:55:7a:de:
82:76:c4:d0:55:c2:e1:73:00:01:29:0e:e5:2b:f0:
ee:a2:70:3b:b1:80:47:b4:ba:18:0a:a2:bb:2f:93:
92:cd:5d:3f:db:97:25:32:e7:43:6e:c7:b1:d6:31:
33:69:30:54:fb:7d:80:a6:97:f8:98:e2:0e:a9:d6:
28:4a:da:8e:9c:09:42:28:6e:10:01:b9:ed:a2:bb:
fb:cf:9a:60:73:31:0a:18:c8:63:35:82:b9:df:91:
38:a5:6f:bf:40:c8:e8:c3:4b:1e:94:92:5a:f9:75:
8b:6b:5a:7a:0a:9f:0c:ce:dd:70:46:cc:23:a8:7f:
0d:14:37:c7:7e:28:6f:81:20:10:b6:07:6c:03:8a:
23:3e:da:4d:52:ae:b8:de:bf:d5:1a:dd:3f:2f:09:
e8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:12:09:E0:59:3A:41:23:27:71:E9:FE:58:17:A2:0C:D2:65:01:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC7F425E554511F1B746A5E6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.208.0-154.196.212.255
Signature Algorithm: sha256WithRSAEncryption
5b:d2:e2:4b:93:fa:25:b9:4f:e6:2d:ef:90:ab:1d:d7:00:40:
28:11:47:4b:b1:ef:57:2b:2d:1b:e1:11:01:f1:ab:45:50:10:
f1:92:31:1a:a8:7f:b5:60:a5:ee:9b:47:ce:4c:2c:03:8f:a5:
93:cd:fb:bc:26:45:4e:bf:c5:bf:8f:f1:6f:87:98:0b:0f:8c:
b7:9a:0f:e5:53:44:44:54:f8:28:18:16:15:ba:fe:63:4e:ea:
79:94:dc:b6:4a:87:ff:02:3d:78:b7:2d:28:4d:1c:a9:ae:4c:
4a:93:53:f9:03:df:de:e9:89:48:a1:99:c3:d5:aa:eb:a8:18:
97:40:81:1d:cf:5a:77:f4:d5:26:d2:e6:0f:71:58:49:fd:31:
8d:f1:a1:6f:43:ef:dc:40:ed:48:42:f0:a5:39:69:da:cb:17:
75:c7:a6:b7:ea:b9:89:39:4a:af:1b:9c:81:0e:2d:6a:29:ea:
5a:f6:e9:37:de:6d:48:e4:df:81:91:0b:92:dd:8d:b2:5e:25:
16:78:32:76:4c:ec:6d:ec:ee:20:46:c3:5e:23:4c:44:07:e3:
52:74:99:db:56:58:ab:d8:cd:16:a5:8b:28:0b:50:24:2e:c0:
fa:6b:27:65:9a:be:03:f4:10:91:13:a4:74:6c:be:8a:e1:14:
d9:f0:df:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:14:39 2026 by rpki-client