Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFF1D2425BB711F1ACBE3B16CF1D38B0.roa
File: CFF1D2425BB711F1ACBE3B16CF1D38B0.roa (raw, json)
Hash identifier: rSA59KWVrVtEF8Tzyi3/VxQ8GxuJQtQquzNS3lvl6t4=
Subject key identifier: 0F:4D:31:54:33:0C:C7:73:AE:AF:66:8E:B4:5F:97:9C:7A:13:E5:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D0B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFF1D2425BB711F1ACBE3B16CF1D38B0.roa
Signing time: Fri 29 May 2026 23:40:45 +0000
ROA not before: Sat 30 May 2026 23:40:41 +0000
ROA not after: Wed 01 Jul 2026 23:40:41 +0000
asID: 62240
IP address blocks: 154.194.127.0/24 maxlen: 24
154.195.108.0/24 maxlen: 24
154.195.127.0/24 maxlen: 24
154.195.128.0/24 maxlen: 24
154.195.129.0/24 maxlen: 24
154.195.130.0/24 maxlen: 24
154.195.131.0/24 maxlen: 24
154.195.132.0/24 maxlen: 24
154.195.133.0/24 maxlen: 24
154.195.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118969 (0x1d0b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 23:40:41 2026 GMT
Not After : Jul 1 23:40:41 2026 GMT
Subject: CN=6a1a23fd-797f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5b:3b:a8:11:6b:2f:2e:e6:73:48:51:d6:3f:
fb:cb:9a:7a:1d:a4:a5:72:b3:65:9d:f0:6a:0f:d0:
2b:84:cc:30:ac:4c:9e:c6:36:22:14:6e:14:27:c6:
96:8d:66:ed:0c:bc:e2:3d:f3:e8:1a:1a:c1:7e:b2:
27:6b:43:7c:42:d1:2e:b7:d7:17:12:77:ae:db:47:
4c:06:ef:b3:d5:b0:b7:56:60:ea:02:16:8e:b5:30:
0c:78:dd:91:08:9f:87:06:5a:01:bc:c3:75:7e:5c:
4f:57:e0:c2:39:d1:8d:50:21:c4:91:38:6b:33:1b:
c5:49:ac:4e:35:e5:16:05:dc:bc:3c:74:22:2f:d4:
53:34:19:e6:c0:66:e4:40:ea:8c:51:19:bf:43:51:
60:aa:28:b0:01:85:12:fe:68:e1:8d:21:28:85:e1:
a4:bd:e8:18:63:74:56:83:54:46:31:2c:f3:2a:29:
ef:b9:3c:98:a2:b3:2a:07:23:1d:a1:46:3a:5f:6d:
50:88:87:74:24:ac:ac:58:2d:77:5f:76:24:11:df:
9c:ad:ea:3a:1d:bd:f6:8e:65:3d:46:b6:f5:eb:b9:
0c:b1:ca:57:75:b7:8e:c8:c6:e5:de:56:c1:3e:4f:
76:b0:9f:80:5e:f8:c4:0d:ae:8f:ca:e2:6c:a8:21:
a5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4D:31:54:33:0C:C7:73:AE:AF:66:8E:B4:5F:97:9C:7A:13:E5:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFF1D2425BB711F1ACBE3B16CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.127.0/24
154.195.108.0/24
154.195.127.0-154.195.134.255
Signature Algorithm: sha256WithRSAEncryption
12:c9:0b:0b:62:c9:c0:37:52:ad:17:67:ad:d5:f4:07:a5:21:
bd:68:24:e9:bc:ea:71:73:ca:f7:a9:dd:65:24:06:dc:f2:eb:
e8:4f:3c:30:93:b1:fb:0c:b1:20:ed:44:b4:30:56:7c:8a:f4:
82:ea:2a:4c:80:49:4f:2b:90:f0:96:a1:98:92:fc:32:6d:9b:
e2:5d:59:c5:36:b8:73:bd:53:49:67:45:14:06:58:71:86:a0:
ba:47:54:4a:c0:20:e1:2e:d6:5d:af:57:63:68:fd:21:51:21:
dc:fe:1e:d5:4c:89:4d:22:32:8d:4f:e0:6b:b1:50:a0:69:ad:
e1:4a:f4:ef:02:ff:e5:f1:e6:4d:9f:e2:23:f7:e3:4a:bd:25:
4b:2f:aa:c3:34:dc:f2:67:0b:d7:d4:09:c2:5d:45:61:fd:74:
49:69:c0:fa:44:9d:4c:77:b6:97:10:48:6a:fb:a1:40:94:ee:
35:6f:dc:9d:65:a4:ca:39:6c:9f:88:86:02:ed:f3:c6:84:e6:
83:b3:5c:dc:b6:a4:9a:9f:4c:6a:5f:dc:07:de:f2:8f:07:cd:
12:4f:c7:fa:6a:61:93:d4:1f:24:16:fc:3d:80:76:be:e0:31:
16:cb:eb:23:c8:ed:df:23:80:ca:f3:cb:20:72:98:3c:40:11:
60:3f:cf:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:04:58 2026 by rpki-client