Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D2FEF3A64CB11F19C728BD3CE1D38B0.roa
File: 8D2FEF3A64CB11F19C728BD3CE1D38B0.roa (raw, json)
Hash identifier: ukJLVsni3HCCvB2dbuRUzFGUw927cCTSxJz6/Yz/dwg=
Subject key identifier: DC:28:D5:3A:36:A9:E9:6E:E3:7D:E4:82:FF:CA:50:BA:BF:94:0E:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D282
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D2FEF3A64CB11F19C728BD3CE1D38B0.roa
Signing time: Wed 10 Jun 2026 12:54:44 +0000
ROA not before: Wed 10 Jun 2026 12:54:39 +0000
ROA not after: Wed 16 Jun 2027 12:54:39 +0000
asID: 398152
IP address blocks: 154.194.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119426 (0x1d282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 10 12:54:39 2026 GMT
Not After : Jun 16 12:54:39 2027 GMT
Subject: CN=6a295e94-7054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bb:59:20:4a:30:94:7c:09:54:f4:41:ce:8f:
75:5c:42:cf:ee:dc:c2:84:30:fe:84:74:15:cd:58:
9c:d3:34:e7:65:c8:12:bc:c7:41:98:12:f8:c5:24:
97:e2:94:13:40:09:95:61:ce:ee:b2:fb:78:0a:12:
2a:1c:37:fa:e8:f4:4b:89:48:ac:4f:68:06:db:d5:
29:82:94:93:31:b5:b1:87:87:78:9c:4a:8b:85:2f:
19:a9:3d:d7:6b:a9:c3:be:5e:e4:78:85:b3:b7:71:
6f:1a:fc:c7:c8:b5:4c:73:75:fa:e8:b5:20:a4:c0:
b5:03:c1:18:e8:3f:78:fd:41:a1:16:68:88:04:a9:
31:32:c5:f6:bc:06:44:a6:a5:3a:10:29:f6:94:c5:
9a:a0:df:bc:fc:ab:c2:18:f1:d7:57:ee:fb:b0:a8:
2d:6d:76:86:e4:45:a4:22:cd:9f:d9:e4:38:a8:fa:
c6:47:5f:93:0b:2b:1f:c9:4e:ea:1b:6f:12:50:f0:
da:c1:36:54:fb:39:4e:40:c7:78:1b:ba:6a:f0:dd:
59:f3:20:6f:f1:0e:d3:34:22:95:07:0f:1e:49:9f:
14:c1:e1:e5:24:bf:b7:c8:d4:3f:15:21:d9:ef:b7:
7a:88:c4:67:7d:68:fa:ef:48:cc:c7:fc:9d:8c:07:
20:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:28:D5:3A:36:A9:E9:6E:E3:7D:E4:82:FF:CA:50:BA:BF:94:0E:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D2FEF3A64CB11F19C728BD3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.1.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:8f:98:62:5d:2b:ef:eb:55:59:8d:3f:92:73:b3:23:95:10:
39:3d:75:73:38:0c:8c:e3:49:da:10:88:1c:af:ab:cf:e1:0c:
51:45:b7:af:b2:37:b4:c8:73:13:a9:fb:19:c7:2e:b5:81:2b:
d7:7e:5d:a4:74:4c:64:29:a8:28:4b:fa:4e:01:3b:d3:c5:94:
83:2b:a6:b4:2a:62:4e:5f:0b:6c:6e:9b:e1:2a:94:e9:59:dc:
ca:b3:7e:81:9b:cf:3b:9b:0f:69:1d:f1:f4:8c:d7:4a:9c:0b:
83:ef:03:bb:7d:84:7a:9d:47:94:37:d8:cb:b9:c0:29:0f:18:
45:c6:23:3f:eb:a7:20:55:3d:96:e9:e5:7f:82:d9:e4:6c:37:
70:40:ee:ff:e6:f5:de:a3:3d:e4:d1:12:f2:3f:1d:89:3b:94:
34:3b:9c:4c:b8:c0:7c:d2:fc:0a:c8:25:1f:c8:c3:72:ed:2b:
5e:fa:44:d2:3c:80:17:cd:1d:ff:0d:38:bc:1c:58:a1:38:72:
27:6c:dc:8b:07:c2:09:17:d8:be:a4:81:33:78:f6:4f:46:08:
5a:5c:ec:ea:e5:9d:6f:df:a1:ac:db:ba:5a:bf:44:33:74:e8:
a8:a6:c5:a5:d8:63:04:39:22:b1:14:8a:a3:97:9a:36:c4:db:
04:ef:03:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:04:24 2026 by rpki-client