Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD7C4B6A5BA411F1A7F468A7CE1D38B0.roa
File: FD7C4B6A5BA411F1A7F468A7CE1D38B0.roa (raw, json)
Hash identifier: 34LlVnexd0ZxgxpuGSWyaQ7S2VochBJwpvL8u/ozVq8=
Subject key identifier: 80:C5:54:E9:95:00:29:F6:D2:49:8E:EC:12:A1:B6:B7:3B:C1:C8:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D099
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD7C4B6A5BA411F1A7F468A7CE1D38B0.roa
Signing time: Fri 29 May 2026 21:26:01 +0000
ROA not before: Fri 29 May 2026 21:25:57 +0000
ROA not after: Wed 01 Jul 2026 21:25:57 +0000
asID: 62240
IP address blocks: 154.195.155.0/24 maxlen: 24
154.195.156.0/24 maxlen: 24
154.195.157.0/24 maxlen: 24
154.195.158.0/24 maxlen: 24
154.195.159.0/24 maxlen: 24
154.195.160.0/24 maxlen: 24
154.195.161.0/24 maxlen: 24
154.195.162.0/24 maxlen: 24
154.196.90.0/24 maxlen: 24
154.196.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118937 (0x1d099)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 21:25:57 2026 GMT
Not After : Jul 1 21:25:57 2026 GMT
Subject: CN=6a1a0469-2860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:66:94:b0:82:9f:cf:40:bb:20:d4:4b:af:21:
a4:4f:fb:94:c7:16:2c:07:43:5f:71:2f:f0:24:21:
6d:a7:5b:32:71:a9:c2:5b:18:46:f9:28:d2:f3:e2:
3b:0d:3d:a4:ce:f1:f3:9b:6c:e8:0c:de:f4:b2:ff:
89:9f:7e:f8:d6:64:78:7e:5a:64:ae:8d:a7:ae:e9:
90:7a:40:d3:d0:88:53:ef:20:70:c2:2f:a6:ff:03:
a1:fd:1c:81:68:02:b3:6c:47:0f:be:a7:ed:ca:c8:
94:ee:37:1c:27:2f:64:b2:1f:92:6c:3b:af:2f:99:
b7:64:7e:e5:8c:8f:a2:03:aa:cc:71:30:3e:e3:d4:
3a:fb:3c:13:4a:2c:ef:fc:96:f9:32:31:e3:bf:fb:
14:b7:a7:ea:9b:25:d8:8d:fa:55:87:6d:0a:a6:27:
0d:ee:a0:e1:23:09:e8:0e:4a:30:a6:23:b6:3f:99:
5d:83:d6:b4:46:57:f4:59:54:26:32:4a:21:41:94:
22:ff:64:19:3d:15:3b:7c:55:0c:75:44:88:47:78:
36:ac:4f:a9:ce:73:fd:e8:5c:34:b3:18:89:a7:5e:
88:78:ae:83:30:62:02:85:67:d2:13:30:0a:97:18:
a3:a9:d2:09:ac:9b:5f:27:85:58:8c:c8:6d:a9:15:
7d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C5:54:E9:95:00:29:F6:D2:49:8E:EC:12:A1:B6:B7:3B:C1:C8:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD7C4B6A5BA411F1A7F468A7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.155.0-154.195.162.255
154.196.90.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:98:fc:df:a7:af:87:8f:ff:80:0f:1f:41:f0:08:84:3b:ed:
01:a2:f5:be:d7:90:f5:53:d0:8a:2c:15:93:08:e5:f3:5b:15:
9f:e4:82:be:30:af:19:85:e6:ab:50:53:8e:ab:a1:2a:ab:ed:
88:06:6c:66:d5:e5:9f:f1:1e:fa:74:9e:e0:08:0a:fe:13:00:
7b:cb:6a:24:0c:19:f8:c8:e2:f5:b9:52:78:f8:b7:eb:02:09:
32:b7:2b:03:b5:0e:08:0e:b9:fa:15:d1:d2:7e:b3:01:da:de:
dd:60:24:49:5e:67:93:1b:d4:2f:de:fc:d6:21:e2:1c:7c:b8:
80:40:45:ff:59:c2:7d:86:7b:6c:b4:37:20:b8:3c:e7:22:f5:
3a:99:cf:6e:2b:c7:92:69:9e:11:33:1f:11:41:49:22:bc:bd:
27:9f:54:65:f7:c0:06:d8:17:7c:b9:f3:ae:98:55:56:0b:41:
ec:01:c4:33:d1:ae:25:91:e4:64:87:bc:29:a1:fa:d8:9f:44:
42:c2:95:99:99:27:df:00:52:18:34:2d:05:f0:04:ee:7d:a2:
b1:e3:20:8f:cc:e3:d0:d6:43:a9:92:b4:39:1e:cd:8e:67:60:
5d:23:2c:ce:05:6b:a5:bf:bd:07:25:16:cc:3a:73:e9:70:6f:
fc:cc:28:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:15 2026 by rpki-client