Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F916CE060B111F1849369EBCE1D38B0.roa
File: 8F916CE060B111F1849369EBCE1D38B0.roa (raw, json)
Hash identifier: 2oTJIj2f+JPEexGWqPczZid+X344GJd7EaJiCZiVnYY=
Subject key identifier: 97:3D:31:E2:89:79:59:D3:CB:89:07:A1:E1:E9:11:64:7D:71:20:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D1AF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F916CE060B111F1849369EBCE1D38B0.roa
Signing time: Fri 05 Jun 2026 07:38:36 +0000
ROA not before: Fri 05 Jun 2026 07:38:31 +0000
ROA not after: Wed 08 Jul 2026 07:38:31 +0000
asID: 274872
IP address blocks: 154.201.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119215 (0x1d1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 5 07:38:31 2026 GMT
Not After : Jul 8 07:38:31 2026 GMT
Subject: CN=6a227cfc-c060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4c:bc:60:b9:a9:1e:bd:e2:d9:88:6e:92:2e:
c2:b5:b2:ca:1b:8f:db:e9:ab:ec:3e:2d:47:bb:d6:
ad:dc:c6:a7:24:cf:1b:a2:37:57:36:95:43:54:fb:
c5:07:e8:c9:88:d8:dd:4d:32:35:5d:db:c1:ae:7d:
37:89:32:e5:51:f3:c6:73:6a:f3:fc:55:2f:20:31:
30:5e:2a:e8:71:ac:cd:81:d5:43:b6:78:5e:09:6c:
09:5b:e7:93:54:85:77:46:a6:e5:4f:13:d9:fc:33:
bf:de:77:22:cd:be:93:4f:25:ba:70:52:39:ab:25:
ea:49:4c:5f:b1:90:15:f5:d8:fb:7c:e6:e1:9a:f6:
19:ec:38:65:38:08:36:ba:78:d0:29:b1:fb:6c:55:
9a:6c:45:88:3d:0e:86:33:54:92:de:cb:1f:58:e9:
7f:68:a1:e3:fb:25:c2:5d:6e:d8:fe:b9:5c:56:42:
a7:93:b1:e9:75:1c:8e:88:31:0d:b9:6b:06:28:6c:
ec:fb:31:53:4e:98:3c:a4:e9:a6:c0:b7:e9:da:ec:
eb:9c:54:ce:15:7d:4e:27:60:c4:fc:b3:b3:16:97:
73:23:f6:b8:f7:cd:a5:01:c2:df:07:ae:ae:aa:79:
8c:f4:ea:12:51:0f:91:e7:9d:8e:b9:a0:cf:7f:5e:
bc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3D:31:E2:89:79:59:D3:CB:89:07:A1:E1:E9:11:64:7D:71:20:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F916CE060B111F1849369EBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:57:bd:a7:5e:fe:36:c7:87:34:20:eb:3f:64:2f:dc:fb:ea:
62:1e:74:c0:e6:0d:89:0f:c8:a6:16:dd:8f:d2:aa:24:f2:27:
5b:9b:39:d2:f8:a6:42:04:7a:b9:8a:df:a5:cd:3c:df:0c:16:
6b:e1:23:4f:cc:55:52:f2:2f:ab:ca:c2:39:03:20:21:6e:e2:
81:8f:54:80:d7:aa:ec:ff:cc:be:1e:80:b8:3a:e9:46:a2:c1:
c7:02:4a:05:09:f1:2c:8b:a2:9f:8b:da:9e:a1:01:25:ea:ab:
1f:6f:a2:8a:3f:dd:e8:2b:ad:27:c2:76:06:bf:2d:13:b0:8b:
9f:3d:9e:1b:3e:40:c9:49:01:de:a6:d7:77:76:eb:40:63:f8:
6f:22:9f:68:58:18:13:74:56:20:22:b4:a1:94:2e:d2:00:df:
49:d2:35:64:e9:4b:c0:b1:ac:c0:9d:ce:0f:6d:19:7e:6e:10:
35:b6:dd:6d:ea:8c:a6:e1:4a:d1:3f:26:79:e9:96:5e:f2:89:
47:80:ff:3a:b0:92:3d:ce:1d:dd:9b:be:e9:31:b9:54:e1:36:
53:64:92:86:0d:7f:f6:73:7e:b5:91:a9:f7:1d:75:da:0e:b3:
07:b6:46:ef:b7:b9:1a:0f:c8:08:96:35:71:b0:36:9d:5b:6d:
51:19:3b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:54:51 2026 by rpki-client