Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CABBC24C562111F1B88BCDA5CE1D38B0.roa
File: CABBC24C562111F1B88BCDA5CE1D38B0.roa (raw, json)
Hash identifier: p65Y0SlUPfoSmc6GcqwM0laYPAcnh4A7uPaIOP2Yqdo=
Subject key identifier: 85:CB:2F:59:8D:0E:F1:50:2D:5F:C4:EB:B6:22:C1:C9:3B:D6:C0:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE5C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CABBC24C562111F1B88BCDA5CE1D38B0.roa
Signing time: Fri 22 May 2026 21:04:16 +0000
ROA not before: Fri 22 May 2026 21:04:12 +0000
ROA not after: Mon 29 Jun 2026 21:04:12 +0000
asID: 274930
IP address blocks: 154.95.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118364 (0x1ce5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 21:04:12 2026 GMT
Not After : Jun 29 21:04:12 2026 GMT
Subject: CN=6a10c4d0-a1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:26:de:86:81:f4:23:f3:09:32:f6:8b:e2:44:
23:ab:e7:11:0b:fb:b8:b7:bc:30:0c:4c:9d:3c:5a:
cf:28:af:96:bd:22:55:18:10:b8:5a:ac:42:c7:38:
2e:2a:81:ba:d2:e0:c8:76:c7:0e:d2:50:27:d6:a6:
78:99:65:07:2e:19:14:ea:f1:5b:ba:4c:e0:7b:7f:
93:6a:90:80:a6:b7:84:c2:0a:58:ef:4a:6b:2a:f9:
11:00:63:d3:85:32:1e:19:c6:31:2f:fc:ed:b5:78:
e4:8e:81:f0:07:c8:77:ce:ae:ca:e8:50:4e:38:d0:
71:0f:be:fe:1a:bc:ed:d5:eb:68:7d:bb:1c:7e:02:
2a:18:06:69:63:1f:ea:1c:fd:ce:9a:44:f8:5c:0d:
98:db:51:05:b9:c0:18:6b:d9:0c:75:90:a6:c6:bb:
5f:90:f4:db:ae:fa:ae:e4:1c:14:23:ce:eb:3e:3b:
ad:c0:fb:00:b9:65:6f:4c:d7:93:9a:fd:b8:15:a3:
01:89:16:ca:da:51:6f:41:f9:56:8e:f7:5f:ff:a9:
40:b6:21:1e:44:5e:78:33:1d:31:4d:90:71:42:69:
c5:fc:44:05:fd:6c:73:15:eb:68:a0:44:73:47:2f:
f3:83:96:8b:58:e8:78:25:7b:d3:8a:9a:a7:12:f8:
7f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CB:2F:59:8D:0E:F1:50:2D:5F:C4:EB:B6:22:C1:C9:3B:D6:C0:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CABBC24C562111F1B88BCDA5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.25.0/24
Signature Algorithm: sha256WithRSAEncryption
08:2b:44:1a:86:ac:75:1f:a6:b0:9f:79:23:ea:a9:ad:ad:40:
9d:cd:89:a6:bb:f6:89:11:61:6d:24:21:f7:08:e6:8e:95:f5:
2d:f7:33:24:78:49:f3:7a:6a:1e:37:1f:8b:f7:1c:f3:a3:c8:
47:53:e4:1f:b8:d9:3c:c4:6e:24:2f:ea:39:03:26:3b:a7:d2:
92:d2:db:ea:10:07:a0:29:41:d1:6e:fe:8e:52:44:36:ef:29:
32:5a:e3:65:d7:a0:c0:ab:fe:af:29:c0:7f:ed:fa:0b:94:43:
d6:d1:7b:df:55:39:6f:73:2e:51:f7:9a:84:0c:38:af:b5:ef:
f5:32:18:32:92:51:ec:27:83:05:3e:16:84:8e:4e:55:29:84:
02:a5:ca:49:3f:64:29:b7:bb:91:99:36:a6:4c:0c:f6:f9:22:
0b:b5:46:b6:59:91:03:f9:3f:d8:fa:1b:40:ad:00:07:0d:89:
37:6e:31:07:0f:09:a2:0e:91:05:cd:b1:ad:21:91:56:81:af:
5e:71:d6:90:68:16:7d:ef:53:f0:4d:5d:05:10:75:39:5c:ab:
9f:88:34:80:c0:9f:b4:7b:2e:b5:81:34:b0:dd:4e:ce:13:90:
68:ce:09:cd:0e:89:83:5a:66:23:44:0e:45:7e:79:78:d7:be:
d4:a7:6a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:06:50 2026 by rpki-client