Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56D28894553511F1B767EC02CF1D38B0.roa
File: 56D28894553511F1B767EC02CF1D38B0.roa (raw, json)
Hash identifier: Q028sDDYhwpWYHkUo9CA4ah4Je++hf204kJg85nZ1pQ=
Subject key identifier: CF:E2:AE:80:19:F9:8D:32:A5:E3:B6:45:39:B1:D9:02:D6:3B:00:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CD91
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56D28894553511F1B767EC02CF1D38B0.roa
Signing time: Thu 21 May 2026 16:51:41 +0000
ROA not before: Thu 21 May 2026 16:51:36 +0000
ROA not after: Fri 19 Jun 2026 16:51:36 +0000
asID: 150000
IP address blocks: 154.82.159.0/24 maxlen: 24
154.82.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118161 (0x1cd91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 16:51:36 2026 GMT
Not After : Jun 19 16:51:36 2026 GMT
Subject: CN=6a0f381c-c01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:d8:78:e4:37:04:30:55:d4:1c:98:f9:2f:
3b:13:6b:d8:97:cb:02:17:e6:fc:eb:c7:a2:4b:c6:
00:71:3e:92:35:67:86:34:bd:b7:c0:ec:2a:93:4a:
d8:f3:cc:30:27:14:38:f9:70:80:29:32:3f:d6:23:
67:eb:83:1f:fe:9c:94:51:ff:73:dd:c8:9c:dc:68:
1e:f8:bb:24:b8:e8:c4:07:52:a4:32:14:f2:6d:9c:
48:02:c6:e5:d9:39:d2:64:0e:6f:7d:94:e9:6f:9e:
f3:be:3c:1d:f8:35:66:04:fe:02:7a:09:25:78:33:
3c:22:38:b3:7b:62:7d:c0:95:c9:0e:d4:eb:5e:cc:
e6:31:b0:79:de:55:43:a1:88:87:db:56:ab:35:e6:
2f:61:2d:67:b1:92:d8:b5:f8:c1:11:43:83:aa:b2:
a0:c1:bd:ea:35:d5:46:5b:22:0e:e9:8c:f6:3f:2e:
98:f7:be:54:f6:76:01:57:c7:1c:25:0c:e1:c2:44:
55:8b:ad:01:7c:6f:e2:a2:0c:48:44:7b:21:ca:6a:
6d:c6:c2:1f:7a:d8:3e:3f:42:26:e5:53:4c:9e:1d:
6e:49:6d:7f:af:f4:ee:4f:90:6d:2f:07:41:e5:bd:
2e:ab:04:06:27:e9:5f:ca:a8:52:29:7d:f8:d1:7f:
fa:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E2:AE:80:19:F9:8D:32:A5:E3:B6:45:39:B1:D9:02:D6:3B:00:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56D28894553511F1B767EC02CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.159.0-154.82.160.255
Signature Algorithm: sha256WithRSAEncryption
10:8c:72:d5:3f:28:66:0b:25:6b:ae:c1:07:4f:bc:5c:61:47:
b6:ab:3e:f3:cc:59:40:3d:fd:f3:37:9f:72:6c:cb:96:b8:0f:
c0:99:eb:67:e0:8a:af:5b:42:e0:8b:81:10:b5:d6:c4:ce:b8:
78:0a:9f:b6:70:30:ee:a0:54:72:ef:2c:40:d3:ca:ed:08:65:
44:45:71:07:0b:34:5c:bf:14:e0:11:e3:a6:8a:b6:83:3b:17:
59:7c:7c:c9:0d:ed:01:01:ad:39:94:8f:cf:a0:d7:24:58:f5:
27:5d:7e:a3:1f:22:aa:83:fa:4b:e2:ce:c2:0b:c1:b6:9c:de:
0d:a4:f2:25:40:96:a2:22:21:d7:5a:92:f3:2f:90:53:ea:d4:
fc:74:32:52:a4:40:98:86:83:c7:1f:4f:39:88:66:4d:56:0e:
e8:7d:36:9a:77:7f:c4:e8:04:2c:61:25:b8:e2:38:e8:f1:54:
fc:ee:4d:59:8c:95:e3:61:6b:ee:65:83:3f:88:05:6a:c9:8e:
68:7f:16:7a:8d:5b:d1:d3:a9:09:99:b8:68:ac:ba:b5:c7:8a:
78:b9:f8:8d:c5:d1:19:48:0d:0d:b0:c5:5f:f0:bf:00:aa:83:
b6:35:d0:cd:5f:1f:05:42:91:5f:d2:c5:6e:64:c7:ef:50:0a:
90:53:70:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:06:49 2026 by rpki-client