Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/242F0FB65AFD11F1A905E2A9CE1D38B0.roa
File: 242F0FB65AFD11F1A905E2A9CE1D38B0.roa (raw, json)
Hash identifier: A4WazKzDAeh0KSq07BrsrlpLX906UpgOoRDKp3QVyPY=
Subject key identifier: 75:87:FE:1D:25:46:76:E2:2F:BD:04:DC:3A:B3:E7:45:33:70:5F:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D031
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/242F0FB65AFD11F1A905E2A9CE1D38B0.roa
Signing time: Fri 29 May 2026 01:24:31 +0000
ROA not before: Fri 29 May 2026 01:24:26 +0000
ROA not after: Sun 28 Jun 2026 01:24:26 +0000
asID: 54801
IP address blocks: 154.213.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118833 (0x1d031)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 01:24:26 2026 GMT
Not After : Jun 28 01:24:26 2026 GMT
Subject: CN=6a18eacf-2de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8c:40:0a:f8:b7:5b:f9:72:e6:fa:d2:f4:af:
6d:81:48:b1:d9:79:d6:36:0a:2b:98:a5:70:e7:00:
65:38:7a:fc:f0:30:f7:f6:e6:6e:12:61:1b:0d:da:
b3:d9:78:71:87:09:2a:ee:3d:7c:36:43:0f:ee:d0:
83:14:0b:9b:2e:52:b4:f0:03:19:44:9c:bf:1a:be:
90:d4:f3:91:01:72:4e:88:11:9b:72:05:c7:0f:dc:
12:4f:d0:e9:82:53:aa:2d:5c:78:99:31:27:f1:01:
d7:2e:22:11:9e:bc:55:a3:39:8f:26:55:7d:b0:05:
8e:ad:d0:d2:7d:50:7f:72:d3:6d:cc:6e:ba:fe:de:
e2:11:aa:0c:26:d7:43:0b:66:af:90:0a:fe:9c:d6:
cb:9d:82:c7:02:90:e1:16:db:12:1d:67:56:26:ae:
55:cc:5f:01:97:05:17:05:15:20:6b:04:44:f5:07:
1c:87:79:1d:95:08:c8:6b:2d:55:dd:4a:89:23:e1:
79:04:30:d0:53:11:e7:80:d7:fa:1d:36:9e:17:5f:
06:2e:1d:41:b9:0d:df:b5:87:9e:f4:a9:46:c6:11:
3a:b2:42:67:7f:02:2f:74:e6:e2:2b:72:60:4f:8f:
cd:30:50:69:84:a1:45:32:b8:d4:90:7e:d8:e0:34:
8b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:87:FE:1D:25:46:76:E2:2F:BD:04:DC:3A:B3:E7:45:33:70:5F:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/242F0FB65AFD11F1A905E2A9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.176.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:a0:b3:ba:3f:b4:e7:e6:20:88:1b:b9:b0:40:93:6b:24:e7:
d1:4e:27:40:00:5b:ae:6d:94:06:a8:8f:ef:9b:33:ae:f8:a2:
f7:ac:66:b1:df:56:2a:fd:27:aa:2b:10:1e:56:7f:c8:c9:40:
37:03:0f:ec:a4:5a:fd:82:78:75:b1:5a:78:ab:17:60:90:8f:
12:b7:df:00:01:cb:c6:8f:13:a3:ed:23:d7:07:ea:ac:dc:72:
10:d2:e6:64:0a:12:5e:0b:27:ee:e7:5f:3f:56:ee:63:ef:a7:
c9:54:df:b5:fd:b1:ac:9f:b3:8a:74:02:9b:85:6a:72:df:7a:
2a:56:9d:22:49:70:c0:cf:08:54:02:a0:ee:26:27:4d:bf:5a:
27:63:f9:e5:73:e6:29:e8:88:e0:e9:98:7b:f1:01:2e:f6:aa:
5b:b1:f8:b5:8e:11:ef:2d:88:d1:c4:15:a3:e9:2f:db:ba:f6:
c4:cb:71:bb:55:2e:6b:b7:a1:5d:cb:e2:43:fc:7d:48:fa:65:
34:26:14:81:ce:17:ba:68:58:c4:9a:21:01:24:85:ed:b5:4b:
84:34:7a:54:5b:86:45:7c:e8:0b:fa:08:d6:58:98:29:21:2a:
b8:58:f8:fe:fc:18:9f:f7:a8:c6:69:fb:4b:64:0a:2b:40:f7:
e5:78:5c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:52:46 2026 by rpki-client