Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C50E71405DBB11F1970909E7CE1D38B0.roa
File: C50E71405DBB11F1970909E7CE1D38B0.roa (raw, json)
Hash identifier: bOWpBIa1Mxp5W2ngG1tRBD+gwNgJ+UcERCiv57u5hs0=
Subject key identifier: A0:8D:B4:94:F5:A2:D8:70:5F:D9:97:26:8E:E4:4B:26:18:8C:06:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D12A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C50E71405DBB11F1970909E7CE1D38B0.roa
Signing time: Mon 01 Jun 2026 13:14:07 +0000
ROA not before: Mon 01 Jun 2026 13:14:02 +0000
ROA not after: Mon 06 Jul 2026 13:14:02 +0000
asID: 272011
IP address blocks: 154.88.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119082 (0x1d12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 1 13:14:02 2026 GMT
Not After : Jul 6 13:14:02 2026 GMT
Subject: CN=6a1d859f-a3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ac:ae:c9:a2:ab:9f:03:fc:57:16:c3:34:8e:
16:a4:ef:95:fd:3e:3e:04:f3:d4:f1:d7:ce:7a:4a:
42:a0:68:6f:62:b5:41:6d:52:73:a2:58:df:f3:1d:
b3:8e:98:a6:aa:06:e9:82:27:1c:f8:0c:68:9b:f6:
2a:9d:c3:9d:c2:f6:07:cf:0c:26:ac:90:fe:07:5c:
3a:8b:07:17:6a:85:fb:27:8d:f3:2d:06:f6:5b:1d:
09:46:f0:09:c4:fa:d3:e5:ed:2a:c9:fd:e4:39:db:
e1:64:44:94:ac:f9:b2:ac:20:73:37:c3:7d:be:71:
ba:bd:19:c8:06:69:b2:46:97:ae:56:1d:f1:c0:7d:
23:22:6c:4f:a2:a3:2f:a1:55:42:22:8d:09:66:20:
59:3e:33:80:6b:a3:44:ff:d3:5d:e6:19:50:c7:9b:
c1:87:8b:c4:a2:21:2c:7c:2b:0a:48:6f:11:86:59:
5a:ac:5b:60:0a:86:1f:0a:6b:ad:36:f4:b0:26:a4:
b8:23:f9:57:14:1f:4c:da:21:07:08:ed:96:70:8a:
86:2c:ee:93:cd:cd:4c:80:64:76:b8:57:74:23:af:
d3:91:38:46:19:d9:ae:ed:6a:f4:2f:8e:c8:9b:fc:
2c:12:52:44:17:e3:b6:54:44:46:65:d8:e4:fe:d2:
2d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8D:B4:94:F5:A2:D8:70:5F:D9:97:26:8E:E4:4B:26:18:8C:06:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C50E71405DBB11F1970909E7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.189.0/24
Signature Algorithm: sha256WithRSAEncryption
35:d8:ec:b7:9b:08:7c:84:b2:e2:f4:11:42:8e:07:9f:19:51:
8d:15:f2:bb:3e:09:04:1d:ff:39:38:1e:aa:96:80:f4:d0:64:
95:30:cc:27:c2:4e:62:6b:5c:c8:db:bc:55:35:7a:21:ce:c2:
91:79:d7:8c:83:ef:ae:9c:1d:cb:0d:34:81:8b:4a:9e:07:08:
30:95:ed:b8:e4:35:41:cb:a6:f4:c0:08:88:2c:ab:da:95:a2:
08:5a:28:f8:06:e4:b5:1a:67:ea:de:6b:05:e4:24:72:65:ec:
6f:7c:e2:68:fd:68:58:98:cc:03:ad:e5:76:d8:92:6f:91:32:
98:7a:0e:be:77:95:d2:40:46:8d:4e:c1:ea:64:d1:b2:4e:95:
e5:0e:85:ff:a3:30:ed:d7:2e:ef:6c:29:e5:80:10:f4:46:99:
47:5c:84:72:1a:ed:2b:e1:86:0b:80:0a:a0:6b:97:8a:91:1a:
cc:73:f0:be:c5:42:fe:1f:bc:f5:8a:4d:e9:a1:31:99:07:35:
3b:49:b7:de:4a:45:31:87:0b:e2:16:46:75:bc:36:4f:4d:12:
1e:40:9e:52:19:90:06:bb:71:56:e3:ae:ae:66:50:06:61:7e:
28:cf:cb:5a:a7:b1:13:d4:9e:0a:29:92:b6:e7:c9:92:5a:56:
22:be:7f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:34:35 2026 by rpki-client