Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF81B182560111F193C7BBE4CE1D38B0.roa
File: FF81B182560111F193C7BBE4CE1D38B0.roa (raw, json)
Hash identifier: XRJ2mt8rIKiCMLCSSGtm63TVWWgVofx8k07KeRh7z9g=
Subject key identifier: B9:E1:15:F1:C3:DB:19:33:00:C3:89:B4:81:D0:50:82:BC:DE:57:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE40
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF81B182560111F193C7BBE4CE1D38B0.roa
Signing time: Fri 22 May 2026 17:16:41 +0000
ROA not before: Fri 22 May 2026 17:16:35 +0000
ROA not after: Sat 27 Jun 2026 17:16:35 +0000
asID: 984
IP address blocks: 154.200.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118336 (0x1ce40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 17:16:35 2026 GMT
Not After : Jun 27 17:16:35 2026 GMT
Subject: CN=6a108f79-b107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:45:98:06:a3:cd:d6:e7:1b:36:07:5b:74:04:
4f:19:9c:ea:be:a0:96:99:4e:76:16:07:0e:01:4a:
58:1c:a2:c5:13:ce:23:f9:04:0d:b5:38:45:b3:d7:
40:66:69:ed:42:b9:29:39:1e:b7:a9:c1:25:da:a0:
68:c8:c4:81:69:20:61:9a:9d:8a:67:07:c8:7b:39:
28:30:68:80:07:e5:3c:f3:b1:2a:ec:d9:fe:92:5e:
7d:8a:31:d9:27:cf:14:2f:67:ee:0e:dc:27:32:76:
75:a4:aa:66:34:ce:e3:7e:ee:82:49:77:e0:94:e7:
49:7a:a9:ac:8b:a5:c6:0c:4c:d5:28:2e:39:2f:0c:
22:87:24:c1:e4:d3:20:be:a9:7d:3e:e2:8f:d7:03:
3a:f4:68:8a:17:73:3b:d3:dd:96:67:46:2a:22:19:
22:f2:63:67:e5:7d:7b:1f:33:9b:c8:bd:b8:4f:65:
92:68:fb:40:02:a3:3e:ae:58:b3:68:ab:e7:19:bf:
c6:5e:33:9a:6e:02:05:06:91:4b:f9:b4:34:4d:50:
c4:88:51:a8:3e:bb:34:84:4a:b2:a1:cd:d9:8f:65:
ca:8d:58:41:52:ef:b6:07:d3:e7:f0:3c:c9:25:bf:
c2:cf:6e:85:01:f3:88:a2:e5:18:00:00:3f:20:6d:
06:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E1:15:F1:C3:DB:19:33:00:C3:89:B4:81:D0:50:82:BC:DE:57:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF81B182560111F193C7BBE4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.50.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:0a:72:ab:e8:95:8b:9d:38:45:c0:af:a7:d8:15:e1:97:6c:
2c:d6:f2:7e:75:b4:e9:90:97:3d:42:69:9e:ad:63:34:c8:cb:
aa:5d:82:39:83:7f:3c:15:c9:25:82:2e:04:e0:13:0d:2f:3a:
4c:0d:c2:f9:ff:52:31:6c:6f:52:6b:b0:66:9c:0d:61:ce:38:
eb:6d:e7:3c:be:0b:fc:8f:47:69:52:b3:fe:99:e5:52:24:0b:
53:89:e8:1f:23:33:cb:e3:50:b2:ac:20:26:07:fe:b0:3c:0f:
19:34:68:8f:c8:7a:83:0e:3a:6c:62:2e:dd:97:05:27:75:87:
7c:75:f6:d1:c6:2d:c2:54:0e:6a:81:12:fe:56:b5:0e:2d:82:
40:9d:69:73:47:b6:bf:ac:74:9f:d2:27:a2:32:c4:1f:da:fc:
ce:d0:22:42:3c:8e:0f:75:28:57:d4:fc:49:ba:f5:c9:6b:38:
84:5b:11:98:5c:f6:58:ba:07:db:fb:db:1e:5d:c5:fc:81:77:
dd:7e:b8:2a:6a:33:43:95:74:6d:b3:13:72:07:2a:34:62:86:
e0:6b:65:fe:e9:30:68:47:b7:51:c5:ee:32:05:58:82:2a:07:
fa:7e:c1:ad:df:bc:ee:8f:60:f6:2b:ce:cf:19:7b:c4:c2:4c:
94:c6:bd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:49 2026 by rpki-client