Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09D29B52535E11F1BA0FCCCECE1D38B0.roa
File: 09D29B52535E11F1BA0FCCCECE1D38B0.roa (raw, json)
Hash identifier: MbCtC31WCtLMx2qBpg8IqSIqzHSdLJBdEUevbmbIlzE=
Subject key identifier: 61:47:A9:E6:30:61:FD:D1:49:E7:4E:7D:25:7C:42:7F:F9:90:E4:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CC78
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09D29B52535E11F1BA0FCCCECE1D38B0.roa
Signing time: Tue 19 May 2026 08:37:59 +0000
ROA not before: Tue 19 May 2026 08:37:54 +0000
ROA not after: Wed 19 Aug 2026 08:37:54 +0000
asID: 55020
IP address blocks: 154.91.48.0/20 maxlen: 24
154.91.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117880 (0x1cc78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 19 08:37:54 2026 GMT
Not After : Aug 19 08:37:54 2026 GMT
Subject: CN=6a0c2166-b0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b8:34:c8:ba:6f:d8:2c:2a:56:86:1c:af:de:
18:c7:59:38:11:7f:ee:59:d0:c4:38:6b:52:19:bb:
5f:71:ce:33:44:c6:e6:11:f4:e3:5d:dc:09:b6:bf:
73:01:72:9a:2c:28:09:68:42:49:76:a7:a0:ad:c8:
8d:0e:6d:2b:3e:59:de:61:4e:d6:11:98:4b:b4:3a:
7c:50:fb:d8:ec:c8:d0:6c:10:0a:31:68:b3:7f:49:
c2:ae:8e:9d:05:fb:85:ae:2e:36:fd:97:58:a1:48:
e9:14:8f:32:b7:21:3d:63:9e:f5:35:aa:0e:58:d7:
05:6c:aa:81:4c:52:a3:0b:d4:77:07:84:5b:a9:e7:
92:26:33:bf:97:6e:5a:9e:c1:68:7c:7f:ab:06:b0:
10:21:59:85:eb:7c:f2:4b:27:40:56:e2:c3:5a:6e:
e8:fd:88:58:f7:54:73:b3:64:a8:17:6e:83:d6:45:
3a:44:32:6e:44:56:3e:99:49:4e:c4:74:c8:1c:b5:
a3:35:df:67:24:0c:97:c2:e8:5a:35:b0:30:c9:06:
e4:eb:2b:7c:5e:cd:5c:cf:f3:94:ab:8b:ec:5b:b2:
b2:b7:73:11:9c:05:66:6f:09:87:67:78:f1:ce:97:
85:39:b9:b0:fa:37:dc:a0:00:c9:ad:56:64:c4:da:
89:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:47:A9:E6:30:61:FD:D1:49:E7:4E:7D:25:7C:42:7F:F9:90:E4:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09D29B52535E11F1BA0FCCCECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.48.0/20
154.91.176.0/20
Signature Algorithm: sha256WithRSAEncryption
5f:de:1d:e7:eb:a4:d9:94:27:84:3b:83:01:9a:d5:50:e5:be:
19:78:65:cd:2d:79:c2:09:b4:a7:97:ef:ab:f1:24:00:5f:47:
8c:28:6f:66:47:4e:29:79:f1:d0:f8:7e:34:7f:14:e4:2b:99:
8d:63:64:c5:95:74:3f:70:22:c1:fd:38:de:3f:ae:6f:60:79:
0d:cf:59:96:45:ce:d9:00:0a:35:da:55:18:8c:10:d0:56:87:
e9:d7:c6:37:bf:35:c4:c5:4f:99:35:e4:b5:69:46:a0:c6:b7:
1a:e2:23:53:f4:74:c3:39:b6:42:11:5d:6f:d2:01:89:53:b6:
8d:6b:26:5a:c0:93:b9:7b:b2:e6:73:d8:c5:d8:66:f3:7c:8f:
c7:da:ac:be:8d:8a:7e:81:d4:90:a6:a6:9f:83:f1:9f:8b:0f:
14:72:5b:39:36:3f:7d:32:f2:b9:c8:f4:7b:d7:e1:01:e3:d1:
66:a4:5c:d4:5c:61:14:fe:dc:44:11:dc:c8:85:20:f2:7c:0c:
29:37:4e:66:38:02:b8:fe:e0:6a:39:7c:0a:0a:c5:7e:62:71:
b6:8b:ea:2c:c2:da:0f:f8:5c:46:a6:f7:c0:a0:7e:b5:f0:e5:
09:d3:71:84:8e:2e:0c:c6:27:8e:5c:18:33:de:d5:3f:9b:3a:
e3:2d:73:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:08:48 2026 by rpki-client