Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B320DE2457B11F186FE9AD5CE1D38B0.roa
File: 1B320DE2457B11F186FE9AD5CE1D38B0.roa (raw, json)
Hash identifier: WWEfpcWy9XTuM+dAvT0sx66eVCIleVA+WeiHG4jFZ2o=
Subject key identifier: 64:12:56:25:15:C2:33:F8:C4:14:46:F8:CC:27:7E:DC:FF:15:34:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C8BB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B320DE2457B11F186FE9AD5CE1D38B0.roa
Signing time: Fri 01 May 2026 16:30:47 +0000
ROA not before: Fri 01 May 2026 16:30:40 +0000
ROA not after: Tue 09 Jun 2026 16:30:40 +0000
asID: 44559
IP address blocks: 154.219.82.0/24 maxlen: 24
154.219.83.0/24 maxlen: 24
154.219.84.0/24 maxlen: 24
154.219.85.0/24 maxlen: 24
154.219.86.0/24 maxlen: 24
154.219.87.0/24 maxlen: 24
154.219.88.0/24 maxlen: 24
154.219.89.0/24 maxlen: 24
154.219.90.0/24 maxlen: 24
154.219.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116923 (0x1c8bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 16:30:40 2026 GMT
Not After : Jun 9 16:30:40 2026 GMT
Subject: CN=69f4d537-a5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:f3:81:2b:f8:79:93:51:40:6b:d8:fd:83:
59:ec:4f:ba:e3:5c:81:c4:15:6e:2f:a0:fd:0e:07:
56:d4:6f:08:a8:1b:10:4d:67:33:e7:3d:85:28:c1:
31:1b:56:8d:b9:63:1f:51:a5:e1:fd:66:d1:8b:9a:
90:8e:b3:f4:7a:7d:14:a9:38:39:72:34:00:03:1e:
00:48:d4:f9:39:eb:3f:cd:0b:1f:93:05:3c:ae:90:
98:f1:8b:86:90:e4:18:d0:1e:ac:a2:af:5b:89:2f:
23:27:ba:ff:e4:37:a2:33:98:2c:aa:28:64:fb:0b:
a6:7e:ac:b8:5d:a9:1e:50:ba:83:c3:89:4a:10:ec:
d1:32:1b:79:71:ab:da:af:15:95:4d:1d:6f:61:88:
70:d5:09:ed:c7:b9:dc:61:46:f6:5e:ae:07:24:4c:
e7:34:53:a9:f2:c8:a9:a7:be:23:f1:32:9f:ac:5e:
cc:ed:1d:d1:c3:0b:6d:97:40:10:d5:40:5b:bc:c6:
14:6c:0e:98:39:c9:ff:b1:e9:81:b1:59:0b:47:3e:
c1:ab:c2:e1:cc:18:e4:8e:93:b3:43:ab:23:9d:7d:
74:69:2c:a6:a7:e4:12:1d:27:56:23:af:6c:50:51:
3c:c7:07:fe:07:cf:aa:84:2c:c5:45:cb:a8:87:73:
c9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:12:56:25:15:C2:33:F8:C4:14:46:F8:CC:27:7E:DC:FF:15:34:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B320DE2457B11F186FE9AD5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.82.0-154.219.91.255
Signature Algorithm: sha256WithRSAEncryption
97:f2:6f:0e:63:54:36:fd:11:b0:94:48:21:b4:3c:18:a7:a6:
1b:aa:aa:ba:de:32:9e:28:cf:ec:1f:0f:3c:46:e7:d1:db:4a:
5c:23:f6:f6:1d:9c:bb:d4:1e:16:1c:4e:31:35:92:82:c1:a7:
c3:a2:3b:0d:0f:77:e0:5f:69:53:6c:77:c6:b8:58:4b:7e:34:
fa:4f:55:79:92:ab:6c:d1:8c:ba:6b:0a:55:7a:d7:df:63:58:
e8:13:8e:38:ad:a7:54:0c:3e:c3:2c:b1:c6:4f:cd:cf:a0:0f:
39:4c:bc:b2:2c:73:dc:d8:bd:45:7c:ac:d3:00:91:e7:71:43:
d1:63:90:c2:32:b4:e4:e8:ba:77:82:33:bb:62:22:49:30:03:
7b:1b:89:e0:08:ef:35:8d:c2:d6:4f:29:f2:f4:08:1c:9f:94:
21:ce:0d:d4:21:69:e3:06:40:f2:11:d9:88:1b:4b:5f:dd:af:
e3:ec:7f:a4:5a:72:27:7e:d5:00:31:64:ce:2b:b3:dd:f9:55:
dd:18:50:fe:01:c3:bb:08:b5:d4:bf:2d:77:cf:ec:cb:69:5f:
55:fc:fd:4f:b7:7a:a5:ec:91:d0:13:28:98:ff:68:52:f8:9e:
ee:c3:81:0e:aa:74:a5:f2:b0:12:be:9d:f2:53:97:c7:4c:1b:
6e:24:92:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:03:43 2026 by rpki-client