Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1420B3E556B11F1A29679C7CE1D38B0.roa
File: B1420B3E556B11F1A29679C7CE1D38B0.roa (raw, json)
Hash identifier: tGW7rZm5NK+wso8xOv9qSez0g3nN5bWzxxm41TUgFJ0=
Subject key identifier: 4D:DF:3E:86:1C:E4:3E:45:16:5E:F4:74:A6:29:EE:5A:B7:1F:11:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CDE3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1420B3E556B11F1A29679C7CE1D38B0.roa
Signing time: Thu 21 May 2026 23:20:45 +0000
ROA not before: Fri 22 May 2026 23:20:40 +0000
ROA not after: Mon 22 Jun 2026 23:20:40 +0000
asID: 274930
IP address blocks: 154.95.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118243 (0x1cde3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 23:20:40 2026 GMT
Not After : Jun 22 23:20:40 2026 GMT
Subject: CN=6a0f934d-07be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:de:5b:04:86:0a:c4:35:ba:16:a4:11:5b:
97:45:44:8c:8b:3c:a8:f9:65:7f:77:36:44:69:50:
da:de:38:f2:ba:e2:18:19:12:d5:9a:b8:42:21:e0:
d0:02:ff:35:c8:19:b5:d0:42:80:72:59:3d:86:21:
23:cc:10:66:8d:eb:99:f2:3e:f8:fe:2f:a1:6d:78:
64:87:58:71:1e:b5:16:c1:0d:05:1e:86:22:54:29:
45:40:e2:74:08:c8:25:09:e4:1d:a2:2c:e2:dd:f4:
c5:31:12:fc:c7:24:7d:8e:78:1a:f8:f0:09:41:ee:
e6:1e:4f:fc:06:b9:f6:ae:f6:21:c4:d9:ae:ad:53:
18:90:47:c7:26:40:6d:e1:9c:91:67:70:2d:75:64:
99:2e:1d:1f:01:ed:c1:37:e0:66:0b:dc:0e:e0:fd:
c8:37:63:b2:cd:e3:bb:24:ff:3c:61:1e:f8:09:9b:
90:b0:f6:c9:52:e5:95:90:ae:b4:8f:f4:fe:58:9e:
f8:1e:dc:9d:bd:13:b0:24:eb:7b:bf:8a:4b:3a:c9:
cc:70:97:3b:cc:3d:54:88:df:c0:57:dc:7b:02:b8:
d4:ab:6e:84:26:ba:af:30:86:54:a4:fa:8f:eb:86:
67:02:e9:b0:64:ff:30:40:aa:61:ec:7b:0d:51:32:
56:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DF:3E:86:1C:E4:3E:45:16:5E:F4:74:A6:29:EE:5A:B7:1F:11:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1420B3E556B11F1A29679C7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.25.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:fc:5e:17:1e:84:1b:6b:f6:a2:68:89:bc:0d:a1:f6:29:48:
f2:36:cc:a9:79:f3:34:c6:1b:fa:9d:fc:97:70:78:c9:7c:6b:
6e:05:68:3c:62:13:71:d2:dd:23:1c:6c:09:d4:89:96:2e:4c:
20:0e:6e:68:b3:05:3e:77:ee:2c:50:4c:3f:2b:b7:0d:f4:69:
11:85:ef:b1:58:66:9d:9d:94:4e:1c:55:d7:1d:4c:3a:6e:f1:
0f:ff:fc:f1:ad:c5:63:af:ad:24:02:d3:a4:b1:61:02:dc:fe:
67:b7:fb:f4:11:45:03:e1:a1:aa:80:43:b2:8a:b7:bb:a5:0d:
f9:6c:49:75:e4:c0:36:e3:8c:8c:28:93:b4:0b:89:14:fe:7b:
0d:d2:a6:eb:c9:2c:45:77:11:6a:7b:ba:8c:d6:b2:54:aa:21:
41:57:8e:e1:4f:89:c6:8a:12:17:ec:57:d9:1e:bf:39:e3:88:
ee:74:e0:4b:0c:d1:f1:93:23:41:6d:3a:65:6c:6a:cf:f8:c3:
77:3b:a0:a7:e0:4f:aa:5f:d9:1c:7a:74:20:5e:11:2c:c0:06:
fc:41:44:23:eb:32:e9:58:0d:58:46:8d:95:24:49:98:2a:04:
0f:49:a7:21:d0:54:24:2a:ad:84:ef:e6:45:e8:56:c9:bc:3e:
a2:e5:4d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:54:34 2026 by rpki-client