Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41A18F66544411F1AC6064C5CE1D38B0.roa
File: 41A18F66544411F1AC6064C5CE1D38B0.roa (raw, json)
Hash identifier: 2QkCr197eKApssZ3eXQON732G5M2gJGEUkGK8O/NF7c=
Subject key identifier: 64:7A:0E:2B:E7:1F:CC:7A:44:E3:42:73:FB:4B:4E:2C:4D:75:81:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CCC6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41A18F66544411F1AC6064C5CE1D38B0.roa
Signing time: Wed 20 May 2026 12:05:56 +0000
ROA not before: Wed 20 May 2026 12:05:51 +0000
ROA not after: Fri 19 Jun 2026 12:05:51 +0000
asID: 150000
IP address blocks: 154.82.159.0/24 maxlen: 24
154.82.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117958 (0x1ccc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 20 12:05:51 2026 GMT
Not After : Jun 19 12:05:51 2026 GMT
Subject: CN=6a0da3a4-a91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:37:6d:0e:a9:52:63:97:ba:8a:0c:41:a4:76:
70:aa:62:dc:72:61:6f:bc:24:f9:cf:a8:d6:aa:31:
42:68:eb:89:f9:25:47:3e:d9:34:48:d0:e0:0e:0b:
9e:1e:66:6a:48:e7:1a:30:b7:9a:a4:bb:48:8c:45:
45:60:f2:60:4e:98:64:80:ca:14:af:a1:9d:f2:64:
59:1e:8a:60:4f:5b:31:ef:98:c2:f9:6d:b0:94:60:
42:73:f0:f8:97:36:da:0d:ae:66:b8:35:98:9a:e5:
60:5b:1c:b3:10:74:f7:ad:ab:12:6e:5a:ec:a7:2d:
74:36:f3:ce:ac:ed:b0:8e:43:ab:30:bb:12:eb:85:
f5:55:01:88:44:35:9f:de:24:25:31:04:e3:55:86:
43:14:ba:e0:1e:c7:86:b3:0e:3c:da:e5:23:4b:a2:
67:9e:74:fb:76:8b:6e:9f:2c:20:e5:cf:c8:f0:ac:
49:1b:05:5d:65:8e:94:6a:7a:41:5f:68:80:80:c5:
f8:dc:19:b4:b7:a6:a2:ac:4c:91:fa:7f:53:80:ae:
ac:d0:8e:e7:a7:5e:a6:01:09:96:5c:0f:fa:5c:b0:
98:7d:81:3d:bb:86:52:6c:55:e5:94:dd:32:3f:27:
3c:f0:49:1e:b5:47:3c:03:d3:f0:0d:72:cc:70:a1:
90:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7A:0E:2B:E7:1F:CC:7A:44:E3:42:73:FB:4B:4E:2C:4D:75:81:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41A18F66544411F1AC6064C5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.159.0-154.82.160.255
Signature Algorithm: sha256WithRSAEncryption
be:3a:fa:af:d5:24:ce:34:b7:bf:5f:34:df:97:5f:cb:1a:2e:
ca:b7:75:bf:35:b7:46:e4:30:d3:6c:ec:54:21:9f:eb:88:d3:
c0:45:07:63:0e:4f:df:42:3f:fa:3a:64:cf:21:e8:79:67:7b:
f9:a1:e1:e3:ac:5f:dc:75:7a:8a:bb:13:75:fb:77:30:b2:6a:
81:f7:a9:0c:8b:21:b7:7a:1f:db:2b:9b:8f:78:48:8d:21:9e:
eb:23:00:1e:f3:cd:fb:fa:88:ce:93:bf:a0:05:49:5e:38:31:
b9:fe:ac:88:03:6b:58:d2:60:7e:83:56:65:3f:37:eb:10:e9:
bf:c1:6f:e6:f0:fa:3d:6a:35:7d:03:dd:d9:2f:6d:18:74:9d:
30:bc:43:d4:a1:25:01:66:2f:fb:e7:fc:18:b4:1f:e0:fc:bb:
74:1d:cb:aa:f1:fc:80:d0:8d:b8:d2:0d:98:c6:9a:8a:11:ff:
fe:e3:03:c6:f3:34:29:fc:9a:79:f3:86:99:38:de:59:5e:3f:
24:04:4f:fa:10:38:ce:c3:9f:51:17:2d:86:d7:1e:b5:21:c2:
91:1b:45:89:1e:6c:e6:ee:79:07:89:ab:50:e7:a8:9f:03:a4:
14:42:1e:0f:ed:11:f6:f5:37:fe:f6:2b:99:42:75:e4:4a:e2:
01:5e:d9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:00:58 2026 by rpki-client