Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDB7D3E655E511F1A4572CBECE1D38B0.roa
File: CDB7D3E655E511F1A4572CBECE1D38B0.roa (raw, json)
Hash identifier: wd5kHN5cA/QkwixgQthVPMRrTGub71jQB3J/jmVUN18=
Subject key identifier: 96:1F:13:7B:59:9C:D4:55:1C:C7:D6:9D:C5:C8:10:30:9E:F7:78:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE1A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDB7D3E655E511F1A4572CBECE1D38B0.roa
Signing time: Fri 22 May 2026 13:54:51 +0000
ROA not before: Fri 22 May 2026 13:54:47 +0000
ROA not after: Mon 29 Jun 2026 13:54:47 +0000
asID: 214467
IP address blocks: 154.222.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118298 (0x1ce1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 13:54:47 2026 GMT
Not After : Jun 29 13:54:47 2026 GMT
Subject: CN=6a10602b-1935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f1:86:d4:00:56:bc:06:1c:dd:f1:54:4d:b9:
28:57:19:08:e7:98:f0:1f:0f:c0:13:2d:4f:01:31:
7f:0c:ad:69:0b:9c:9b:26:5d:8f:48:26:69:cb:bd:
80:50:fe:b4:18:f7:0a:ce:89:df:8a:38:9d:a1:5c:
80:bc:3c:09:d8:79:7d:c5:43:b3:0e:01:e1:d5:3b:
15:9a:9c:e2:df:0e:21:30:03:c3:c1:85:18:b3:c8:
52:0b:12:48:5a:5e:7f:a3:17:d7:d2:25:40:0e:c1:
0b:57:06:85:06:e9:9b:1a:c7:dd:28:9d:9a:b5:10:
89:b6:52:a4:3d:9a:ef:40:95:a0:b9:d0:5c:4c:d4:
71:eb:7a:bb:26:2e:ba:fa:ec:3c:be:4f:07:f1:f9:
c5:c2:e7:3f:ac:30:21:e3:b1:6a:09:ad:a2:43:c6:
70:16:ea:c0:f1:ca:1e:38:4e:c7:4f:20:92:8a:fa:
ae:eb:ba:7d:93:fa:29:24:73:01:d0:f7:8a:8a:d3:
01:a5:fa:1e:54:1b:ca:a8:fa:5e:10:a6:91:c1:2a:
e0:fd:0c:09:65:09:d7:49:03:da:47:46:0c:e3:83:
ad:85:10:31:6b:b1:7b:24:c5:91:bc:6a:c2:d3:0c:
20:ed:1e:dd:bd:b5:74:16:3d:c3:81:12:af:52:b1:
99:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1F:13:7B:59:9C:D4:55:1C:C7:D6:9D:C5:C8:10:30:9E:F7:78:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDB7D3E655E511F1A4572CBECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.10.0/24
Signature Algorithm: sha256WithRSAEncryption
77:b4:7d:65:10:a3:d2:06:6f:da:57:04:36:65:ab:c4:94:e4:
11:49:9b:2f:1d:05:9f:c8:3a:1c:bf:28:8e:15:ea:a8:87:42:
a3:3a:0e:3e:e3:ba:fa:8a:48:bb:b3:96:c7:7a:51:92:c3:06:
60:71:33:81:83:96:1d:d8:d7:3a:1d:98:c8:3c:44:e2:18:44:
d5:e4:d0:13:ab:d3:34:ce:b8:e4:c1:96:84:ad:d5:1f:ba:67:
f9:04:97:08:a1:be:3b:27:7a:9e:04:b3:62:5a:cc:20:8d:8f:
e2:9d:ab:24:7e:32:a3:44:26:50:44:83:12:23:38:38:f8:0d:
2f:2c:54:9f:25:62:12:3d:91:66:9a:79:56:4b:53:9d:b0:3a:
ec:aa:8a:06:e4:20:3d:f0:18:37:95:b1:78:7e:e4:61:a9:0f:
4c:41:3d:78:cf:3a:cb:36:e1:bd:c6:ea:95:20:f7:f2:6a:8f:
52:75:af:60:d2:5c:61:7b:ce:8e:81:35:a2:95:2b:a1:45:a4:
2c:7a:36:1f:fd:94:13:41:c9:b5:36:52:3d:7e:8c:0b:69:c8:
25:1f:b9:68:e6:93:95:7b:d6:a3:94:cb:93:ce:25:69:f9:2e:
52:0a:ed:e6:8d:e5:26:b1:62:0c:4d:8a:ee:11:f5:1d:b7:1c:
82:1c:77:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:51 2026 by rpki-client