Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96BEEA1C624911F18330D71CCF1D38B0.roa
File: 96BEEA1C624911F18330D71CCF1D38B0.roa (raw, json)
Hash identifier: ee8rhxXSOwgg79q7nWT8nMSyAUI0T8klhK5S1Zd/JF0=
Subject key identifier: 63:44:7C:36:B7:81:98:46:59:C2:AF:7D:4F:D4:A1:D9:CA:A3:3B:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D22B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96BEEA1C624911F18330D71CCF1D38B0.roa
Signing time: Sun 07 Jun 2026 08:19:23 +0000
ROA not before: Sun 07 Jun 2026 08:19:18 +0000
ROA not after: Mon 20 Jul 2026 08:19:18 +0000
asID: 214413
IP address blocks: 154.205.253.0/24 maxlen: 24
154.205.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119339 (0x1d22b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 7 08:19:18 2026 GMT
Not After : Jul 20 08:19:18 2026 GMT
Subject: CN=6a25298b-1e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1d:d1:e5:94:49:28:a0:c9:a6:0a:93:a5:bb:
c7:f7:0f:a1:f1:b4:29:7c:6f:ff:ee:e6:73:b3:be:
82:cb:1d:e6:2c:fd:4c:d0:ed:54:97:51:47:af:aa:
6a:7e:97:fb:6e:e8:4a:ec:b4:bf:95:75:93:ef:87:
69:ad:05:3a:92:44:47:0a:34:8e:7c:81:53:0c:1c:
ee:72:3e:96:92:8e:5b:17:f1:c3:1e:0d:a1:75:87:
c9:4a:be:be:b8:74:80:54:5d:7f:15:76:7c:3a:3c:
a5:70:b8:78:4d:dd:fd:8a:a7:b6:13:ca:b6:a8:51:
74:3f:21:3d:ed:ce:a1:c4:4f:4c:ea:b4:11:f0:c1:
85:13:ec:11:ee:04:21:58:4c:7c:a6:c0:9a:29:ee:
cc:b7:15:29:a3:cf:a3:8b:a4:52:39:3f:46:16:6d:
02:24:da:7c:60:b9:5d:e7:cb:0d:2d:89:74:e9:79:
2e:68:5e:68:c5:0e:99:2b:1f:1e:5d:05:04:81:aa:
b5:ca:b0:68:e4:53:f8:e7:0e:82:ca:5a:bd:f5:2c:
3e:0d:49:a3:ab:5f:57:9f:6a:e1:1a:0f:32:79:d5:
f9:90:5e:89:d1:78:51:ed:c0:31:77:ec:b3:f0:a3:
6a:62:55:c8:97:b2:54:b3:08:b5:01:ce:81:fc:d6:
d2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:44:7C:36:B7:81:98:46:59:C2:AF:7D:4F:D4:A1:D9:CA:A3:3B:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96BEEA1C624911F18330D71CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.253.0-154.205.254.255
Signature Algorithm: sha256WithRSAEncryption
b2:75:2b:bb:2e:ac:5e:ef:db:51:d1:d5:4d:d4:4d:27:5e:37:
ba:d7:88:55:19:a2:0a:5c:b5:ec:16:5f:80:bd:aa:29:5b:a1:
a5:5f:1f:e6:8a:16:26:df:c3:ae:3c:fe:39:45:36:9c:b9:3a:
f6:b1:f2:88:fd:7f:60:56:ac:72:7f:3b:cf:91:36:9b:30:7d:
5b:f5:af:0e:6f:5c:41:5a:be:5c:53:7c:09:48:ba:9a:2e:2e:
e9:88:a3:de:d6:ef:a4:ae:df:fa:b4:85:73:88:8e:c9:2a:43:
50:c4:0f:da:58:7b:51:33:46:f7:42:ef:d4:80:0b:5d:2c:51:
0b:02:9f:70:3b:86:b8:51:82:a3:cd:a6:b4:e2:67:cf:36:64:
f5:2c:06:54:da:ff:5d:b2:44:41:8a:c1:83:7a:c2:2f:e7:84:
e9:1d:4b:80:b3:d2:88:a5:ad:6f:3e:8c:ea:78:39:52:0e:24:
2f:67:4c:f5:f3:70:d1:07:3a:d7:82:5c:87:93:fe:4d:83:8b:
f2:d2:14:b3:0c:ae:0a:a8:06:08:f1:a0:eb:fc:81:bf:0b:1e:
95:e6:95:94:4c:69:99:fd:8d:1e:5f:b5:6f:53:1a:3c:89:6c:
c3:77:bb:99:93:f3:0d:91:48:cf:6f:6d:72:5f:25:6e:9a:45:
11:7a:19:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:02:35 2026 by rpki-client