Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F668FEBE618911F18C2EFB0CCF1D38B0.roa
File: F668FEBE618911F18C2EFB0CCF1D38B0.roa (raw, json)
Hash identifier: /NDiaHBFRoi7B2XuTZg6MwFoN1AxBAv/mrdYvDCxe8s=
Subject key identifier: 7E:56:5B:1E:1D:C0:74:77:FB:BB:D7:AE:D1:9E:8C:EA:6F:DB:16:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D207
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F668FEBE618911F18C2EFB0CCF1D38B0.roa
Signing time: Sat 06 Jun 2026 09:27:40 +0000
ROA not before: Sat 06 Jun 2026 09:27:35 +0000
ROA not after: Sat 13 Jun 2026 09:27:35 +0000
asID: 142403
IP address blocks: 154.83.12.0/22 maxlen: 24
154.83.16.0/23 maxlen: 24
154.92.14.0/23 maxlen: 24
154.92.16.0/22 maxlen: 24
154.94.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 09:27:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119303 (0x1d207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 09:27:35 2026 GMT
Not After : Jun 13 09:27:35 2026 GMT
Subject: CN=6a23e80c-ecd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d1:c8:df:c5:e5:1f:5c:0a:a9:6b:a2:ec:3b:
d9:81:9e:87:ae:f7:43:74:8d:62:4c:e3:8a:f3:d3:
f9:0f:75:29:7f:99:7f:ad:65:25:2a:fb:4e:5a:fe:
58:0a:c8:24:dd:58:c8:09:db:c5:57:c1:c4:3e:6d:
b7:08:d2:89:4d:da:ca:23:82:5b:0d:8f:13:cd:df:
5b:c5:e4:2c:30:67:19:1e:5c:76:86:76:28:97:29:
30:cb:a3:e0:07:93:7a:58:7c:89:70:02:f1:f9:ab:
7c:2e:70:03:79:7c:40:15:6f:4e:14:97:f1:15:31:
1c:f6:8b:6a:c5:55:9f:60:70:30:94:ae:f2:9b:14:
8e:25:5b:78:f0:e8:db:b5:51:00:35:75:09:25:42:
4e:e0:e0:8f:a0:0b:52:80:cd:ec:bb:74:ae:c7:b5:
cd:a4:1a:b9:14:6b:2c:a2:65:a8:36:f7:dc:94:db:
57:16:a5:b3:a4:2e:e7:47:b3:8c:4d:1a:ba:48:5e:
08:61:29:73:17:85:c2:ee:56:17:df:08:0d:81:4d:
0a:aa:a4:79:55:ee:16:53:c4:97:02:4b:ea:16:3d:
58:1c:44:96:46:f7:a9:6e:f4:eb:9c:93:4f:74:cb:
fc:49:6f:19:e4:6b:39:a7:11:43:ed:44:06:b3:3f:
28:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:56:5B:1E:1D:C0:74:77:FB:BB:D7:AE:D1:9E:8C:EA:6F:DB:16:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F668FEBE618911F18C2EFB0CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.12.0-154.83.17.255
154.92.14.0-154.92.19.255
154.94.5.0/24
Signature Algorithm: sha256WithRSAEncryption
99:02:0b:2c:d8:32:e7:86:9f:eb:09:f3:35:a4:e9:db:17:89:
35:9b:7d:1d:9a:b7:ba:7f:d3:83:5a:98:af:14:78:60:2c:86:
a0:21:e8:bb:4c:f9:fe:72:1b:20:ed:8d:33:13:77:8f:52:39:
44:81:fb:e1:72:ed:89:19:f0:94:98:46:ef:9f:60:34:47:7b:
35:f4:15:62:4f:d3:cb:71:b4:2d:a1:39:99:b0:0f:d1:59:86:
45:c7:29:15:7d:a8:22:73:1c:93:48:b6:15:6d:9a:d2:b6:b3:
0c:08:bf:b8:7c:29:64:7f:4a:d0:1f:04:10:4d:c5:68:d2:79:
0a:50:af:6d:32:8a:e6:4f:f8:1e:26:91:f6:e5:fb:c1:6d:f2:
ad:1a:a9:3b:47:5c:6c:67:1b:32:09:e7:19:fd:6a:60:be:7e:
22:c2:18:5b:c5:27:56:ff:6a:db:1f:a0:23:02:fd:f9:e6:a3:
e6:ca:7e:65:06:2d:d8:30:3a:2c:3a:d3:a3:77:91:c5:97:a3:
dc:74:b5:87:c1:90:58:ec:e6:88:9f:2d:87:c7:9f:21:36:b2:
15:df:c7:14:93:b7:c4:83:3e:54:aa:d4:4d:fd:ee:9b:2e:4a:
79:96:79:4b:2e:c5:cd:e9:27:19:0a:e4:2a:14:d3:2c:d5:d4:
7a:6d:4a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:03 2026 by rpki-client