Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDF8BC00577411F1AAA5A5BDCE1D38B0.roa
File: BDF8BC00577411F1AAA5A5BDCE1D38B0.roa (raw, json)
Hash identifier: QjO7N75uefHkOT9O1OvQRFix+xB7+92ALbVBzEhQNZU=
Subject key identifier: 78:6B:28:E8:5D:53:96:34:98:A5:5A:5C:E8:DC:B4:35:89:F7:80:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CED3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDF8BC00577411F1AAA5A5BDCE1D38B0.roa
Signing time: Sun 24 May 2026 13:30:34 +0000
ROA not before: Sun 24 May 2026 13:30:29 +0000
ROA not after: Thu 09 Jul 2026 13:30:29 +0000
asID: 63099
IP address blocks: 154.200.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118483 (0x1ced3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 13:30:29 2026 GMT
Not After : Jul 9 13:30:29 2026 GMT
Subject: CN=6a12fd7a-1eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5d:11:d2:24:40:ce:ec:6e:64:1d:7a:cd:b2:
2c:af:cc:16:5c:af:cb:17:a0:ec:49:81:d5:de:eb:
a6:69:cf:0a:b5:b2:a3:76:d0:10:0b:f9:98:c7:9f:
d9:70:4f:56:b4:28:2c:27:35:15:f9:11:4e:26:15:
33:c3:1b:cf:9a:1c:07:90:70:65:0b:56:ca:77:45:
83:a9:97:16:08:b8:e5:38:f5:15:b7:68:b2:39:25:
5c:06:43:69:2f:69:ba:1f:0c:0c:1d:ab:cb:6b:6a:
7e:d7:5b:0e:92:c0:49:1d:a2:2f:fb:69:7b:70:f3:
ce:e0:7d:98:dc:bd:06:9f:be:48:92:f8:e0:5f:d8:
27:5d:6c:0b:e1:75:bc:89:3a:7f:00:77:f8:4a:c3:
b4:f9:d8:ea:7a:c3:66:0d:48:72:79:f8:e8:cf:6b:
f2:9b:f2:46:0e:8b:89:cf:40:96:85:c3:e5:a9:e2:
80:27:36:c1:46:e0:d2:a4:73:a1:76:ed:2b:09:d8:
4c:f9:f0:f2:1a:6d:0b:10:5f:35:5a:d7:f4:8c:3d:
2f:77:eb:a5:91:af:a0:97:05:d7:45:7d:d8:0b:11:
d9:f7:86:24:8b:0a:54:d3:99:12:83:0f:59:59:9b:
fe:05:7d:9c:8d:79:ba:4c:c2:7a:52:d2:63:66:17:
81:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6B:28:E8:5D:53:96:34:98:A5:5A:5C:E8:DC:B4:35:89:F7:80:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDF8BC00577411F1AAA5A5BDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.80.0/24
Signature Algorithm: sha256WithRSAEncryption
20:f4:3c:25:8a:ee:7e:6e:27:1a:33:df:5d:a0:c3:9e:d5:b4:
26:76:85:9d:aa:13:6a:19:f9:a9:a7:ef:8c:00:d2:87:1d:3f:
7e:e4:0c:4c:64:9e:fe:ef:3a:8e:63:e5:6a:45:dd:8a:40:fd:
ec:fb:cc:13:54:15:bf:ef:d2:65:1b:4f:46:13:e9:98:0e:c2:
00:5f:df:95:cf:0c:bb:8e:b3:75:08:9b:15:a8:d3:4a:93:11:
b4:a9:48:d2:e4:3b:7a:22:a1:84:5b:e8:66:56:c8:ae:61:46:
c7:25:97:d7:2d:a8:c7:ff:ad:82:89:8b:41:15:f4:9f:81:04:
3c:8b:ec:d4:30:a0:2f:5a:96:62:df:19:54:e3:89:b3:10:61:
4c:57:c8:23:57:65:31:d9:8f:26:f4:ff:d4:5f:23:c7:30:98:
2c:21:7c:8b:47:02:d6:17:c8:66:06:c9:1e:f5:d1:89:b5:07:
88:73:c9:e3:08:b8:9e:3b:30:6a:35:43:b3:0a:33:94:64:b5:
7d:92:b7:6e:25:cf:d6:a0:57:e6:f0:96:f6:a3:79:04:57:d5:
f5:99:ba:72:e0:64:43:0b:d1:82:39:9c:d5:ee:3e:d9:2f:74:
15:a9:0f:2d:82:a0:5d:0a:e5:6d:51:99:de:ef:71:51:a9:2c:
e8:fb:1c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:26 2026 by rpki-client