Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B09F2023BD211F19F4788D4CE1D38B0.roa
File: 0B09F2023BD211F19F4788D4CE1D38B0.roa (raw, json)
Hash identifier: wIY5UL240JpeUGXCPSzd5Lc+8qous9q3Qi0S1l4HUEY=
Subject key identifier: DF:A6:BB:F5:51:A7:F8:DD:98:CD:88:54:CE:11:B6:40:62:DC:97:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C5FB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B09F2023BD211F19F4788D4CE1D38B0.roa
Signing time: Sun 19 Apr 2026 09:27:54 +0000
ROA not before: Sun 19 Apr 2026 09:27:49 +0000
ROA not after: Tue 26 May 2026 09:27:49 +0000
asID: 49581
IP address blocks: 154.83.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Apr 2026 11:21:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116219 (0x1c5fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 19 09:27:49 2026 GMT
Not After : May 26 09:27:49 2026 GMT
Subject: CN=69e4a01a-7a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:bb:bc:b9:e8:85:f8:9e:9f:4d:15:b9:7c:a8:
ac:4d:04:5d:db:0e:2b:f6:4c:3a:df:eb:f3:88:a6:
94:df:c0:bf:56:5a:33:8f:43:2c:c7:31:bf:7f:43:
f7:49:66:90:c8:98:11:d8:3e:c9:2e:1f:cd:10:f8:
6c:6d:b9:2b:a4:67:ca:4c:15:25:b7:f7:39:e6:b1:
25:77:b4:80:71:98:6d:09:c8:48:3a:2c:aa:84:84:
a4:8f:2a:6f:65:f5:3d:06:64:6f:06:d9:03:ba:cf:
5b:d0:da:44:16:12:e6:39:2a:82:a0:f8:5d:f9:9c:
4b:2b:77:85:d1:eb:81:0e:02:d3:e8:ed:2c:35:0a:
f7:f8:dc:f2:4c:7f:61:35:3b:77:a0:6d:d3:0d:73:
63:0e:a8:35:99:90:51:22:d5:3e:1d:1d:4c:17:b8:
0f:0d:b9:f1:0f:97:f9:45:14:cc:eb:36:1c:50:55:
da:b9:0b:d2:9a:a3:44:79:e7:b5:c2:2a:1f:85:96:
01:31:f7:29:41:60:86:c0:e1:09:d8:b8:90:5b:01:
b1:6f:f5:28:95:5a:a8:87:61:9d:1b:c3:50:8f:3f:
b4:43:1e:ba:29:bc:56:d9:48:70:ed:5b:b8:3a:e4:
ad:b5:26:2f:92:1c:0e:71:57:f0:fb:6c:0b:e1:6d:
7c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A6:BB:F5:51:A7:F8:DD:98:CD:88:54:CE:11:B6:40:62:DC:97:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B09F2023BD211F19F4788D4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.129.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:91:7f:b5:a1:99:6c:25:ec:19:e6:3f:b2:e3:0f:d5:10:6e:
30:1f:c8:36:82:89:91:f1:8c:ca:2e:85:72:51:62:d3:dc:be:
63:e5:7b:6d:32:39:ef:f8:c2:2c:d0:c5:a3:0a:80:41:d8:c3:
a9:44:37:31:55:72:53:f1:22:23:cc:e5:3a:9a:12:8f:25:c0:
a3:bc:1c:2d:71:7e:a8:4c:c6:7d:ae:bd:31:01:f1:84:72:38:
cc:7e:07:4b:46:87:66:23:5d:22:d3:29:b2:b6:4d:74:a2:e0:
1f:84:ce:6d:d7:ec:bf:71:a0:4f:bd:0a:24:a0:c0:9a:09:ea:
e4:77:49:9b:dd:dd:b9:1e:8d:b0:42:57:1f:20:fd:fb:e0:2d:
a0:79:16:6c:71:4e:e8:94:08:e2:10:29:8f:26:e7:fc:eb:b9:
09:b9:d6:0f:44:7c:bf:c7:a5:ef:08:2b:74:e4:23:de:03:ff:
b4:de:f3:52:4d:89:2a:fb:ca:55:80:f9:6a:1a:23:51:da:e5:
08:e7:57:72:fe:98:01:38:e3:6a:23:bb:5f:1a:01:8f:73:4a:
a2:29:3c:bc:7c:e0:9d:2d:32:4a:80:1c:3d:1b:19:cf:ec:64:
73:36:f8:f6:27:a8:fd:35:43:f1:6e:aa:fe:34:e2:3b:68:fa:
d9:80:7c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 01:22:15 2026 by rpki-client