Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F107FC0491E11F1AB0BD1FCCE1D38B0.roa
File: 0F107FC0491E11F1AB0BD1FCCE1D38B0.roa (raw, json)
Hash identifier: oMuhbnWs9dBzrgPuJkz/lgOzUlGOBifUUDLdDWo7+jI=
Subject key identifier: A7:5A:D9:ED:B1:CE:43:5F:79:2A:01:2D:A5:02:0F:C0:F7:12:90:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C97B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F107FC0491E11F1AB0BD1FCCE1D38B0.roa
Signing time: Wed 06 May 2026 07:34:48 +0000
ROA not before: Wed 06 May 2026 07:34:43 +0000
ROA not after: Wed 10 Jun 2026 07:34:43 +0000
asID: 215691
IP address blocks: 154.202.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117115 (0x1c97b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 07:34:43 2026 GMT
Not After : Jun 10 07:34:43 2026 GMT
Subject: CN=69faef18-26d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8f:b3:57:ce:8e:f1:8a:8c:0a:fd:15:48:87:
40:5c:5d:ea:1d:7a:e9:5c:b7:c4:da:cc:c7:60:68:
9d:81:64:78:da:12:c4:a2:0b:f6:27:3a:29:f8:e8:
73:be:df:7b:d0:e0:f0:f7:45:fe:fe:19:f6:b3:62:
97:5e:1f:2a:62:04:ee:9f:d6:0e:e5:56:a3:82:b1:
9d:e7:37:d8:65:b4:06:cf:77:02:72:01:9a:d1:a8:
6a:1f:54:df:ee:f3:8a:07:86:14:99:30:dd:81:26:
e1:b0:56:3f:f4:b9:c5:5f:98:3e:12:75:ee:54:6c:
ca:2d:36:98:d3:67:97:f2:f2:06:76:64:6e:21:95:
e3:97:bf:0a:85:f4:63:0b:cc:03:43:22:e8:3e:d8:
2f:cb:36:94:51:68:84:d6:44:b1:26:7f:40:42:f9:
74:3d:b0:59:0e:c0:36:b7:07:ef:f7:52:f7:6e:b1:
4f:dc:d1:47:b5:1d:14:ed:66:a0:a0:51:a7:db:f6:
4c:ed:01:37:cf:50:3d:d3:f6:e7:29:47:00:4a:39:
12:da:5f:4e:37:66:56:ea:43:10:da:43:61:5f:7f:
cf:22:4c:b1:c7:29:19:fd:27:7b:7f:5f:62:69:3d:
90:71:04:9c:29:d7:5f:d3:47:ab:7e:07:37:20:71:
e7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5A:D9:ED:B1:CE:43:5F:79:2A:01:2D:A5:02:0F:C0:F7:12:90:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F107FC0491E11F1AB0BD1FCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.74.0/24
Signature Algorithm: sha256WithRSAEncryption
12:f0:c1:26:bb:bd:e5:81:ee:1c:93:7d:d3:be:ec:16:62:34:
9d:f0:32:f1:0a:f3:1c:fd:68:fb:32:ad:8e:e8:d4:2b:f3:35:
ab:4c:5e:c4:16:89:3b:bb:cf:ef:d3:65:b2:72:0c:08:ba:38:
0a:d2:d2:c2:bd:eb:42:92:d6:a3:bc:0b:55:0b:f0:b4:b6:8a:
25:34:b4:93:5b:ea:66:ea:70:88:58:e4:52:1e:e9:e5:1f:25:
71:52:90:e4:0f:ec:a3:65:be:f8:97:39:c7:0e:ae:89:ab:6d:
8c:37:11:0f:ed:0b:45:91:7f:f8:c3:f2:c9:3e:84:93:96:3d:
a4:01:71:77:e4:ee:3a:9c:28:a6:1d:f3:ce:67:dd:fb:3d:99:
01:7a:2a:7d:90:00:d1:da:d6:4b:95:b4:5f:f1:43:03:c3:1c:
4e:ba:9f:56:66:c7:b9:c7:28:49:f1:f1:3e:8a:bf:ce:ac:2c:
ec:97:61:5b:43:15:92:e7:30:5e:60:f8:bf:f2:50:c9:35:5b:
09:ed:9c:3f:48:4a:16:95:ba:b6:ba:4a:f3:b7:56:8a:2c:fa:
a6:41:57:50:1d:53:f8:3b:07:c9:7e:56:36:44:d7:84:4c:49:
4a:93:82:f2:df:28:ab:71:ab:25:06:3a:b3:9f:11:87:d2:eb:
8b:5f:7f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:18 2026 by rpki-client