Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC72E0024EE211F1B9A08B08CF1D38B0.roa
File: CC72E0024EE211F1B9A08B08CF1D38B0.roa (raw, json)
Hash identifier: cD0Uk3h+uJICNOWrl1ZLH5OvkxcOtcCr7Z8kgpVs4JA=
Subject key identifier: 91:2C:90:59:F1:06:8C:C5:99:9B:4F:0F:28:8D:92:20:9E:B9:96:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CB81
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC72E0024EE211F1B9A08B08CF1D38B0.roa
Signing time: Wed 13 May 2026 15:45:43 +0000
ROA not before: Wed 13 May 2026 15:45:31 +0000
ROA not after: Wed 24 Jun 2026 15:45:31 +0000
asID: 204770
IP address blocks: 154.88.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117633 (0x1cb81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 13 15:45:31 2026 GMT
Not After : Jun 24 15:45:31 2026 GMT
Subject: CN=6a049ca7-1e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c3:80:57:24:db:5c:b5:4d:65:ee:0f:18:90:
63:d3:32:fa:07:b3:b5:12:b0:16:e6:eb:dd:ca:5c:
c0:fa:5b:a9:5a:35:0f:fa:12:bf:3f:6a:d4:f4:a6:
98:b1:82:54:ad:ef:7d:c5:54:a2:d5:78:38:a4:23:
a2:ee:2e:6b:41:e1:dd:86:5a:b1:62:b0:07:35:07:
a8:ee:b1:64:fd:10:b9:e1:0a:e8:35:b1:11:6c:f3:
d5:b7:e5:03:3e:f4:a0:b5:f9:8d:22:03:30:48:8e:
7d:0b:d5:53:0a:4e:2a:a8:bd:08:79:ee:58:f4:9b:
5b:86:a3:ac:f4:bb:f8:f2:38:ad:62:1e:5e:48:ee:
c9:f9:d7:f8:56:5a:7b:b8:44:8c:58:b0:f6:fa:52:
7f:46:6c:02:bd:ba:fe:80:ca:01:ce:0e:47:50:07:
68:4b:a6:a8:74:3c:c8:e7:27:9e:d5:70:24:ca:11:
13:a6:86:39:cf:e6:84:31:10:aa:72:28:d3:65:bb:
67:75:ae:39:91:4e:5b:9a:51:9b:41:48:67:4f:59:
a1:4f:7a:ec:0e:f9:b1:61:06:4b:b0:45:c2:82:0c:
8d:1f:e1:cc:a2:72:98:81:5f:8c:e9:35:6c:95:5a:
f8:96:4f:4f:01:ad:20:ed:07:1d:26:f2:c1:2e:ff:
1d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2C:90:59:F1:06:8C:C5:99:9B:4F:0F:28:8D:92:20:9E:B9:96:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC72E0024EE211F1B9A08B08CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.3.0/24
Signature Algorithm: sha256WithRSAEncryption
55:3d:ef:78:6b:6c:89:17:ab:6d:b8:fe:ed:3e:5a:89:18:5b:
88:54:24:0e:86:ce:55:c8:25:f4:d2:57:25:df:ab:9f:0e:ca:
04:79:81:11:61:ce:04:a2:67:bf:ce:c7:3e:a3:1a:3b:ba:87:
29:7e:5b:4e:c4:aa:43:d6:48:6c:fb:66:3a:4f:28:1e:25:c6:
f9:8b:bf:aa:c4:d8:09:25:30:ae:3f:eb:4e:b3:13:96:c1:e1:
de:ff:6c:4f:b5:dd:3c:26:96:5b:ae:f9:14:5d:70:b6:70:06:
45:65:cc:08:4b:d1:b0:df:0a:f5:13:b5:41:30:06:5f:51:06:
24:fa:59:53:93:27:d7:34:f3:19:ad:f2:15:1c:40:2c:02:46:
8f:54:70:98:3d:9f:db:72:82:4c:d1:6d:80:ca:6f:4e:f5:90:
d0:a6:18:1e:6f:63:65:e6:f8:2b:e4:2b:40:ca:8e:68:94:ea:
11:fc:58:a8:1e:35:6f:99:80:34:d6:07:95:a8:6b:ba:27:bc:
4f:76:d0:b3:58:59:17:3a:98:d8:27:9e:2e:9b:a0:95:af:fd:
4c:26:46:a6:9b:5c:87:03:fd:11:3a:59:af:df:b4:56:b5:b0:
8d:51:14:0d:86:3e:9e:51:b0:2d:e5:db:aa:ba:25:90:b9:1f:
4d:a3:2c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:57:37 2026 by rpki-client