Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEDF819E59AD11F1AC21C6C8CE1D38B0.roa
File: CEDF819E59AD11F1AC21C6C8CE1D38B0.roa (raw, json)
Hash identifier: +d2TS8nwbIS1so+YVnaPtb39ZcHoyuRHztlskXLmhBo=
Subject key identifier: 13:4E:E6:C9:88:F2:AB:D7:F7:F3:C1:34:B8:99:A4:DA:BD:2D:EC:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CFF7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEDF819E59AD11F1AC21C6C8CE1D38B0.roa
Signing time: Wed 27 May 2026 09:24:06 +0000
ROA not before: Wed 27 May 2026 09:24:02 +0000
ROA not after: Sat 04 Jul 2026 09:24:02 +0000
asID: 59642
IP address blocks: 154.83.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118775 (0x1cff7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 27 09:24:02 2026 GMT
Not After : Jul 4 09:24:02 2026 GMT
Subject: CN=6a16b836-28e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d3:15:c9:dc:ee:27:3a:33:e1:4c:a4:44:25:
75:b4:b6:a5:38:e4:1c:56:59:eb:41:ef:2d:87:98:
09:da:bf:ec:c9:6a:af:a7:6a:50:ff:53:97:45:5d:
2c:43:e0:c6:53:2d:4d:11:f0:cb:b4:9c:a4:e4:ff:
22:cd:05:2c:01:5e:2e:87:5d:69:08:f3:57:af:c4:
52:96:8d:b5:23:e4:03:e4:61:83:7b:e4:41:48:9e:
54:6f:be:0f:d6:8f:fc:de:ed:a5:d4:cb:2f:15:31:
80:2c:56:cd:53:f5:55:98:6e:24:c8:7c:8f:f7:b7:
95:8b:bb:92:e5:9d:1c:96:d4:6a:60:6e:44:95:9e:
1b:18:d8:46:8c:47:84:49:d2:90:ac:7b:33:2a:a9:
1c:6e:19:c3:a1:78:fe:be:f2:70:80:20:49:f9:69:
38:36:80:9b:5a:74:4c:a3:67:7d:e0:cc:86:a1:ee:
24:72:d6:e4:d1:07:d9:70:1c:39:e9:ec:97:e1:33:
cd:39:1f:bb:32:7f:50:38:27:bc:e6:e0:fc:d9:03:
bc:eb:a7:71:93:42:66:45:3d:86:ac:05:d3:6c:06:
68:02:0b:2c:8a:d3:1f:40:a9:6d:de:24:19:ab:5e:
13:1d:6b:0c:45:61:84:10:00:f7:cd:79:68:29:62:
ad:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4E:E6:C9:88:F2:AB:D7:F7:F3:C1:34:B8:99:A4:DA:BD:2D:EC:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEDF819E59AD11F1AC21C6C8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.159.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:e6:ba:57:81:7f:ec:40:bf:c4:0e:73:c8:3f:1c:b0:b6:67:
93:ba:35:1b:d7:a3:66:65:9d:19:3b:d9:5d:a1:c8:53:fd:ef:
88:97:ad:7b:64:04:bf:73:ff:0a:ac:e0:66:ea:8e:85:08:36:
d4:a6:ac:a6:bd:ae:e6:db:a3:24:41:79:75:ef:16:15:75:d4:
a9:f0:96:5a:ce:b8:bc:5b:5d:0e:35:d5:0e:7e:5d:44:82:89:
6e:80:d0:05:e2:80:2e:90:d4:62:de:37:08:a8:e5:4b:73:34:
b7:3d:46:02:89:bd:7e:37:6d:ce:91:ac:2d:13:6a:0f:ee:c7:
3d:6a:6d:7e:5e:4d:8a:7f:17:40:c7:01:fd:4f:3f:b5:71:6f:
db:6d:17:57:97:6a:38:c4:fa:32:69:d7:0c:ee:dc:d6:c5:7c:
96:35:38:18:92:54:df:b5:db:74:a8:c7:0e:85:d4:4e:6b:a2:
94:00:2e:c5:8b:e0:06:99:0b:1e:ca:8e:26:09:94:61:9b:ab:
37:13:48:be:cc:37:78:d4:7c:7c:da:cb:1d:c0:fe:ef:a9:7d:
3b:f9:0b:a4:cc:c4:2e:75:90:d7:c6:12:c6:96:a0:5f:74:ac:
2d:e6:f3:9c:f9:b5:c1:ba:ea:3b:38:d0:e2:cc:cf:85:8a:2e:
fb:5a:b1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:11 2026 by rpki-client