Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1318CEB83E5811F1A035BCD2CE1D38B0.roa
File: 1318CEB83E5811F1A035BCD2CE1D38B0.roa (raw, json)
Hash identifier: T7+8YkuU8nDmOvL7Z2W19PykORgmNsOd7IaVKwVVrMk=
Subject key identifier: C5:55:86:2D:49:60:16:61:CC:22:3E:84:6C:5B:0B:76:04:0A:A7:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C683
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1318CEB83E5811F1A035BCD2CE1D38B0.roa
Signing time: Wed 22 Apr 2026 14:32:23 +0000
ROA not before: Wed 22 Apr 2026 14:32:18 +0000
ROA not after: Tue 09 Jun 2026 14:32:18 +0000
asID: 32043
IP address blocks: 154.193.99.0/24 maxlen: 24
154.193.100.0/22 maxlen: 24
154.193.104.0/22 maxlen: 24
154.193.108.0/23 maxlen: 24
154.193.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Apr 2026 11:31:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116355 (0x1c683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 14:32:18 2026 GMT
Not After : Jun 9 14:32:18 2026 GMT
Subject: CN=69e8dbf7-3ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:92:c4:bc:c6:13:d1:a3:83:4e:e2:ca:29:c4:
71:9a:00:32:36:82:51:ce:6f:cc:f6:62:9e:4a:e1:
be:1d:7e:46:e6:c7:11:fa:69:19:a6:fa:05:15:6a:
a5:21:b4:41:b6:31:83:e5:3e:99:71:e1:f5:22:cf:
ae:14:4e:51:76:7e:cd:79:57:43:eb:a8:10:13:cc:
a7:e6:0e:30:8e:87:7c:6f:86:6b:a4:2e:8c:66:bd:
71:02:8b:64:b3:23:ed:f0:66:aa:60:9b:44:55:d0:
31:56:27:48:83:e0:62:54:92:08:e8:bd:3f:45:52:
33:97:4f:da:37:aa:1b:91:4a:e0:1a:d6:8a:98:55:
fe:d5:09:4c:47:55:88:09:71:ba:15:7b:4f:d8:1f:
92:26:b4:bc:ac:4b:08:64:6e:33:87:c3:8b:90:be:
1c:5d:7e:69:8e:88:59:2c:02:5f:84:08:0c:d7:51:
0d:7a:6e:10:b0:e2:cd:8c:09:f3:18:9b:c8:ed:70:
6a:5d:b2:39:ba:42:e4:8f:fb:69:5e:5c:87:cf:53:
69:e4:c9:ec:dc:08:59:9c:08:cd:c2:75:76:2a:d9:
c1:26:e8:6a:fd:50:1b:74:41:52:44:31:1b:e1:8b:
ca:40:da:89:60:97:80:8e:8a:7a:e4:a4:66:0e:ff:
29:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:55:86:2D:49:60:16:61:CC:22:3E:84:6C:5B:0B:76:04:0A:A7:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1318CEB83E5811F1A035BCD2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.99.0-154.193.110.255
Signature Algorithm: sha256WithRSAEncryption
0f:4e:b5:6d:a2:63:d5:fd:8e:d4:77:d4:3d:11:78:4a:67:a7:
66:23:49:4e:22:81:b6:df:9f:93:d0:76:41:23:06:70:f8:50:
89:85:39:7e:1f:20:09:4f:0b:62:1c:21:68:b7:20:f0:70:dc:
58:b1:a0:fc:4f:e2:5b:8c:12:72:f2:8e:c0:5e:fe:df:d3:e1:
a4:ec:36:23:11:32:3e:44:7c:77:46:16:52:78:35:06:29:16:
39:f9:d7:e8:22:b9:a3:78:fb:5f:8a:4c:fa:6f:b6:e7:b0:1f:
cb:a6:1b:fc:13:9f:40:7f:a1:44:b5:51:0e:1d:0e:17:8b:67:
ed:3c:1c:42:78:e5:62:92:55:fe:33:23:a0:c7:ac:e2:93:24:
da:6e:5a:80:50:93:12:b3:c5:a8:73:4e:65:9e:15:8d:15:02:
08:99:bf:4c:2a:d4:19:b0:be:c2:88:71:55:e1:9b:09:38:c3:
42:f5:f8:d3:64:0a:0b:02:7c:aa:fe:98:bd:a4:78:be:05:00:
6f:23:2d:1d:7a:c7:ae:0a:79:90:0d:75:c2:a0:51:2e:6c:ba:
af:5d:66:08:08:fe:b5:52:54:ad:5e:2e:3d:7e:b9:ad:12:a4:
a0:35:67:63:31:2d:76:f6:26:0f:76:6c:8a:a6:d2:49:ee:51:
6e:3a:25:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 24 18:35:27 2026 by rpki-client