Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/315EE10E4C6E11F1AB871C1ECF1D38B0.roa
File: 315EE10E4C6E11F1AB871C1ECF1D38B0.roa (raw, json)
Hash identifier: vPMu8SqHJVebOct0BCXb4Oh1KxXqLFstf9JKaHkduE4=
Subject key identifier: 11:BF:07:8A:B6:14:24:CE:74:55:09:02:98:41:4B:15:9B:82:3D:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CAC7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/315EE10E4C6E11F1AB871C1ECF1D38B0.roa
Signing time: Sun 10 May 2026 12:45:59 +0000
ROA not before: Sun 10 May 2026 12:45:54 +0000
ROA not after: Wed 17 Jun 2026 12:45:54 +0000
asID: 214120
IP address blocks: 154.199.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 05:45:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117447 (0x1cac7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 10 12:45:54 2026 GMT
Not After : Jun 17 12:45:54 2026 GMT
Subject: CN=6a007e07-43be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:21:13:0b:a6:00:92:70:be:43:e4:a8:b0:dd:
da:68:cd:52:66:12:3d:e6:57:b4:e3:a8:12:cb:78:
d8:f3:54:e4:fd:7b:35:11:2f:29:8d:da:0b:fa:81:
28:78:d7:1c:e8:a1:f9:b7:08:c2:3b:fb:78:28:6f:
27:9b:f5:ff:83:0b:5b:ed:0b:1d:b0:a0:c4:e0:75:
33:86:cb:b3:49:9e:c9:39:f6:9d:de:39:e0:63:ad:
c4:30:fc:ea:aa:eb:a7:d8:7c:42:4c:79:b9:b5:b5:
e8:d6:b7:7d:b0:17:96:ac:7b:48:04:9a:d2:d1:1f:
fc:e2:c0:0f:bb:3b:f1:20:8d:bf:95:5f:e3:31:d5:
17:d1:49:16:8f:23:29:41:e7:63:f5:23:7f:ba:a2:
69:c4:38:1f:f3:e7:41:d6:e3:8f:64:24:58:94:81:
e4:cf:a3:e6:db:58:7d:a4:90:de:2f:6e:06:87:dd:
a1:90:b7:8b:eb:d0:f9:8d:47:ff:35:6e:ff:5f:b4:
2e:cc:67:ac:87:cf:a1:db:2f:5e:d2:8a:2c:0c:25:
23:94:19:b3:19:b4:f2:62:6b:ec:a3:15:7e:cf:16:
ca:f2:be:73:4d:c7:f0:07:bd:0e:2d:e6:18:72:64:
d3:f7:57:a6:bc:d3:9c:98:c0:0e:0a:aa:5a:f0:ce:
0a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BF:07:8A:B6:14:24:CE:74:55:09:02:98:41:4B:15:9B:82:3D:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/315EE10E4C6E11F1AB871C1ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.1.0/24
Signature Algorithm: sha256WithRSAEncryption
36:b8:11:9a:58:28:8c:65:18:58:8e:16:a3:e7:e9:b5:d8:37:
3d:3b:62:30:0b:cd:0a:ac:99:98:17:b1:0b:bf:5e:d7:98:4c:
7b:f8:bc:3b:75:6d:72:71:8a:70:57:7f:8d:1b:b1:c0:2b:ef:
70:45:f8:cc:bd:c0:b8:b1:f5:62:91:e1:dc:b6:25:29:51:ba:
c2:76:b7:56:fc:36:d0:87:4e:0f:a3:8b:b3:ef:1b:42:3f:45:
20:1e:39:c5:33:73:45:ad:89:31:f4:2f:bc:a2:9c:66:f9:06:
df:8f:4d:0c:63:9f:18:fb:79:eb:d5:3a:60:0f:27:94:ff:45:
3e:b9:16:62:10:59:5d:6c:02:7f:55:07:28:cd:eb:51:ba:da:
46:73:80:23:09:f3:a4:04:a1:71:f9:13:e6:e4:8a:13:3f:aa:
eb:f5:c1:a4:14:0c:49:1c:69:87:8f:74:7d:ae:a2:75:63:59:
a3:ac:ea:d9:7e:40:5f:b5:25:ad:2b:08:3f:ff:51:51:61:1f:
94:77:ed:9c:99:61:6e:19:8c:dd:65:85:c5:1f:0a:ba:33:82:
75:c2:b5:e3:77:d4:06:d9:6f:02:5c:2d:0c:17:bb:15:e6:0f:
dc:03:97:7e:c4:22:56:89:63:65:2f:71:0a:c4:34:31:e0:1c:
a2:50:85:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:16:43 2026 by rpki-client