Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D5D536A58EB11F19CF951A8CE1D38B0.roa
File: 0D5D536A58EB11F19CF951A8CE1D38B0.roa (raw, json)
Hash identifier: ftESIWAricaHOaF6dM4lAQwMHemA3qkQsA4Z29Rx7sQ=
Subject key identifier: BD:A4:42:1F:4D:7D:93:BA:36:B5:34:69:B9:3A:55:5A:AB:55:59:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CFAB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D5D536A58EB11F19CF951A8CE1D38B0.roa
Signing time: Tue 26 May 2026 10:09:59 +0000
ROA not before: Tue 26 May 2026 10:09:53 +0000
ROA not after: Sun 28 Jun 2026 10:09:53 +0000
asID: 211687
IP address blocks: 154.193.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118699 (0x1cfab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 26 10:09:53 2026 GMT
Not After : Jun 28 10:09:53 2026 GMT
Subject: CN=6a157177-742a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2c:2f:40:2d:1d:42:63:f4:5b:ae:6d:ab:f2:
40:3d:f3:1a:22:f9:25:6d:8b:7c:d1:c3:f1:92:da:
2c:6a:6e:ff:d3:d5:3f:1e:ab:f6:17:ce:a7:59:24:
67:35:f1:be:47:1b:c3:23:b9:fc:de:0e:04:e2:74:
90:c7:b3:98:67:e1:0f:07:03:25:5a:c4:8c:f9:0e:
85:57:16:bd:05:01:aa:c4:03:bd:6f:eb:a9:58:36:
7d:b8:c2:d8:45:75:d0:36:ee:78:a7:94:17:3d:b9:
0a:33:d9:f4:fc:3c:54:34:e9:1c:69:32:0b:af:09:
0f:b1:53:1a:c0:a0:de:8b:46:4f:6b:62:0c:07:bd:
8f:88:31:d3:c9:89:26:31:f0:7d:99:a0:d3:55:a8:
64:0f:91:0b:3f:0e:41:2b:ce:29:f4:cc:f9:7c:1c:
96:1c:96:9d:22:b1:75:99:89:7a:46:db:f1:cf:f4:
aa:96:87:eb:97:a3:03:2d:5c:f9:26:0c:62:9a:e0:
27:6a:53:74:17:69:15:cf:e2:92:f8:3d:7a:0a:d9:
57:24:8d:ac:1a:6b:d6:98:15:99:01:3e:14:59:17:
7b:5c:d6:ca:6e:3a:9a:12:d5:60:92:cb:a9:67:e4:
ad:79:64:a6:62:39:6f:c6:5b:5c:35:26:09:3d:0b:
0d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A4:42:1F:4D:7D:93:BA:36:B5:34:69:B9:3A:55:5A:AB:55:59:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D5D536A58EB11F19CF951A8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.185.0/24
Signature Algorithm: sha256WithRSAEncryption
26:f7:58:57:9e:96:4d:9e:3c:1e:fb:5f:b1:64:79:48:77:28:
8b:1a:0e:ce:a8:b7:87:56:ef:1e:b7:5b:eb:5e:09:c2:4b:dc:
3c:c2:49:13:ce:c3:a3:22:b3:73:bc:53:6b:2c:1a:fc:50:76:
6c:82:c2:95:95:67:d6:53:47:fb:1c:85:3c:96:b7:7b:e7:11:
b9:82:46:89:31:ab:ac:41:ff:f5:f7:74:ae:4f:cf:ad:39:99:
83:6d:da:e0:92:cd:3c:f5:4a:f6:37:2e:a9:0e:72:cf:ab:52:
4b:94:b5:14:7c:bd:db:92:93:82:65:21:2f:8d:8f:18:f5:9a:
26:a8:4f:99:9f:45:57:21:9a:63:8e:a3:be:62:f6:cf:7d:cc:
18:87:c8:dd:bf:cf:a9:4e:d6:61:77:d3:57:33:51:5e:48:64:
59:ca:62:da:16:f5:98:c0:12:13:02:34:1a:45:5f:25:f3:f5:
f9:3f:c4:f6:a1:ca:6f:73:22:84:80:e6:ec:70:2b:22:f4:d2:
ea:0c:11:01:7f:2d:f9:b6:a2:51:71:87:ed:ae:31:93:b5:ee:
b2:39:6a:2c:46:38:f1:76:e9:28:9d:1d:df:3e:d2:e7:2c:80:
29:20:8c:ba:b9:07:94:2a:65:2b:a2:8a:65:88:b5:36:56:13:
06:b8:86:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:54 2026 by rpki-client