Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE17409264D811F1948590A3CE1D38B0.roa
File: FE17409264D811F1948590A3CE1D38B0.roa (raw, json)
Hash identifier: td6kgAKTidcsMCCm5FBkG2+Td9sDgCIcUw0hlrZTylo=
Subject key identifier: C5:63:30:C4:F6:FD:03:9E:83:92:34:83:28:71:CD:15:85:63:5F:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D28E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE17409264D811F1948590A3CE1D38B0.roa
Signing time: Wed 10 Jun 2026 14:30:57 +0000
ROA not before: Wed 10 Jun 2026 14:30:52 +0000
ROA not after: Sat 18 Jul 2026 14:30:52 +0000
asID: 139880
IP address blocks: 154.206.128.0/18 maxlen: 24
154.215.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 15:58:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119438 (0x1d28e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 10 14:30:52 2026 GMT
Not After : Jul 18 14:30:52 2026 GMT
Subject: CN=6a297521-b032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:64:34:45:2b:c4:9b:e5:88:32:d8:b5:e7:ad:
c4:ed:84:67:ec:e5:22:12:18:b3:9a:8a:58:f7:7e:
7f:85:b7:70:40:48:09:1b:ef:3c:e2:fc:0d:e2:26:
f9:7a:ad:ff:c0:a2:f7:87:b8:84:dd:67:ac:3e:07:
70:82:f4:52:53:28:e4:b8:9b:5a:d4:c7:31:f0:50:
8f:38:ca:0d:70:fb:a1:77:d6:15:74:8f:6c:a8:22:
fd:b4:30:a4:2f:c8:c7:96:61:ad:38:42:a6:75:a5:
0a:94:11:b8:cb:b5:53:b1:33:dd:de:a3:ff:41:44:
b0:4f:c2:9e:b6:cd:8a:54:de:a1:3d:37:9f:03:69:
54:10:90:7c:45:01:50:53:b7:b5:58:76:7b:23:5c:
29:15:fb:a4:54:0f:b5:d9:3e:56:e5:14:e0:dd:39:
04:55:6b:32:52:9f:4c:37:22:88:08:e1:19:f2:62:
d8:6e:de:83:cc:b0:31:29:2a:b7:a3:e8:27:2e:fd:
28:9b:d8:02:aa:be:25:48:4f:88:2f:6b:37:28:46:
86:7f:1e:5e:f5:77:f4:f2:07:ac:ae:f8:c0:bb:af:
d8:fc:b0:f1:28:46:81:72:d1:ee:e8:90:89:11:7e:
da:3c:ff:6d:6f:78:0f:29:1b:89:7e:0b:10:2a:1c:
a2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:63:30:C4:F6:FD:03:9E:83:92:34:83:28:71:CD:15:85:63:5F:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE17409264D811F1948590A3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.128.0/18
154.215.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0d:b8:66:3d:b4:d8:bb:8f:d3:b0:24:5d:06:1a:5b:94:6a:22:
37:5b:75:da:7f:73:e9:99:a9:ae:16:65:f7:1a:4e:3c:eb:88:
6c:77:fd:9e:b9:09:0f:91:65:53:e2:72:91:6d:34:c2:69:c1:
11:04:f7:5f:44:fb:00:ec:74:5f:61:c5:a0:9b:d5:31:3d:ff:
d2:c3:8f:8e:4b:09:00:db:dd:8e:90:54:84:0a:15:fc:0f:cd:
e9:fd:79:c1:83:78:47:d4:33:36:55:fc:96:a3:4e:bf:65:b5:
33:51:45:7b:1d:b2:2d:5c:b7:05:6f:9c:36:a3:02:f2:61:fe:
44:bf:97:39:e5:87:cd:a1:60:16:19:bb:44:dd:f4:81:28:85:
23:80:0c:7e:89:39:d5:68:c4:64:cc:c9:86:13:b7:a0:c1:38:
78:39:36:36:87:4c:54:f9:69:a8:7f:9b:24:e5:ef:55:fb:95:
94:81:a2:89:2d:0c:86:af:2d:d3:24:6d:ac:af:19:21:99:57:
63:fe:98:18:fb:0b:ea:88:6c:ec:88:56:5f:26:63:bf:24:36:
c9:2a:5e:4b:a5:cb:af:85:66:0d:5c:64:d6:ea:f7:2d:9a:66:
b6:cf:7a:2c:a1:ff:18:0b:e9:50:6e:0e:af:d2:07:82:44:b0:
86:d3:33:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:06 2026 by rpki-client