Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FAECA87A4B8411F1B9950F1ACF1D38B0.roa
File: FAECA87A4B8411F1B9950F1ACF1D38B0.roa (raw, json)
Hash identifier: vFVoViWLmFp/amwZ+oWIbcSiVGqmynyKF6wWVW29FlA=
Subject key identifier: AB:C2:D8:17:AA:DB:FB:04:19:3C:A0:52:A7:0F:C2:B4:9C:CB:4A:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CA9C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FAECA87A4B8411F1B9950F1ACF1D38B0.roa
Signing time: Sat 09 May 2026 08:56:35 +0000
ROA not before: Sat 09 May 2026 08:56:29 +0000
ROA not after: Tue 16 Jun 2026 08:56:29 +0000
asID: 40779
IP address blocks: 154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 05:45:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117404 (0x1ca9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 08:56:29 2026 GMT
Not After : Jun 16 08:56:29 2026 GMT
Subject: CN=69fef6c2-764a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0e:a8:19:b7:b4:92:31:8f:35:64:69:e4:04:
85:7c:be:7e:0b:f4:da:3a:0a:f5:c2:d4:c1:81:8e:
ef:eb:ab:5d:f0:35:36:9e:08:36:c7:ed:1d:12:9e:
0d:c6:23:c4:64:2e:1c:0e:7c:05:60:ec:cd:3b:f9:
cf:cd:8d:0f:a5:36:58:57:f3:bf:88:d9:5b:75:ab:
2a:a5:b1:f5:d7:e7:e7:8d:9a:c0:f2:99:a3:b2:5c:
52:be:5e:dc:5a:ae:16:a7:9e:d6:4d:3e:eb:00:b1:
b8:9e:bf:59:86:fc:3d:48:1a:f9:93:cd:d4:26:8a:
40:44:bb:74:c9:36:b8:8e:73:33:86:70:ce:06:28:
31:28:97:1e:45:c2:6e:7a:c5:6f:62:12:ea:6f:67:
65:d8:bd:ac:42:30:ab:7b:e0:e3:35:b9:c0:05:29:
81:27:e4:74:d0:eb:04:f0:95:57:ac:0c:29:2f:65:
52:d4:db:d5:b5:e0:48:ae:35:f9:6a:43:3f:b7:fa:
75:ec:0b:b9:aa:68:2d:39:cc:fb:64:99:75:47:d8:
51:60:c4:5d:89:87:0e:dc:cb:c0:69:03:9f:30:4d:
5e:29:21:19:8b:7f:f3:6b:ab:b1:ff:68:f8:68:81:
d2:de:48:ea:2f:ee:f8:4f:e0:d3:a1:61:53:58:e9:
07:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C2:D8:17:AA:DB:FB:04:19:3C:A0:52:A7:0F:C2:B4:9C:CB:4A:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FAECA87A4B8411F1B9950F1ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
bf:90:7f:bf:d2:66:2b:3a:bb:57:39:9f:3e:b7:52:16:d2:c8:
bf:36:d0:e8:36:15:9a:50:e9:02:25:1f:3a:f0:b6:d9:dc:ef:
80:2b:a4:83:c8:87:19:a3:aa:0c:02:b3:8a:8e:4f:d8:71:3e:
55:cc:c2:35:7c:6e:3a:06:9d:f6:5c:2c:37:78:8b:e4:de:24:
b7:7d:0f:9b:02:9e:eb:63:3a:38:80:4d:15:de:d5:39:51:13:
a4:5f:c2:d5:fd:95:aa:d3:fc:39:d8:11:a2:e0:f6:0a:1c:08:
49:8f:21:ba:e4:6e:12:d1:02:81:a2:52:36:2a:b6:0b:c6:e4:
46:56:68:3d:be:d4:0c:b0:a8:19:0a:51:ee:e3:1e:be:0e:e8:
79:42:90:b2:5a:31:9e:3b:af:62:be:ec:84:83:ac:af:86:49:
54:98:d2:48:5c:2b:91:f8:e1:8e:86:bf:57:68:3d:9e:b7:cf:
57:9b:25:13:ca:1d:89:5b:c0:ef:5c:ac:93:a0:66:ed:64:43:
49:31:f5:c8:e5:a7:8e:cc:2b:3a:92:0d:d3:d2:63:29:d7:fe:
62:64:be:fb:ef:ae:bc:75:50:3e:9f:bf:97:1e:b2:fb:e8:35:
34:e8:5d:51:88:d3:19:53:2e:87:de:e6:d8:15:a6:96:fb:ec:
33:f7:ba:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:40:06 2026 by rpki-client