Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D14FB38458011F1A7B7D4F3CE1D38B0.roa
File: 1D14FB38458011F1A7B7D4F3CE1D38B0.roa (raw, json)
Hash identifier: 61EUlOsrlrj7faN24mgG8h79FsFN3dWWlCU1AIw3QFY=
Subject key identifier: F8:0A:9C:84:64:D9:19:99:F4:68:D2:43:7A:BF:A1:E8:34:7A:AE:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C8C7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D14FB38458011F1A7B7D4F3CE1D38B0.roa
Signing time: Fri 01 May 2026 17:06:37 +0000
ROA not before: Fri 01 May 2026 17:06:33 +0000
ROA not after: Thu 06 May 2027 17:06:33 +0000
asID: 135600
IP address blocks: 154.81.144.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116935 (0x1c8c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 17:06:33 2026 GMT
Not After : May 6 17:06:33 2027 GMT
Subject: CN=69f4dd9d-10be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:38:a4:9a:eb:e1:4c:90:41:ac:bd:c0:1a:05:
62:5c:c4:80:c3:05:75:40:56:23:d4:44:02:19:6f:
ae:27:da:15:d2:b1:0f:e4:c3:5a:9e:6f:02:e6:8c:
7a:0b:40:47:2b:81:88:15:14:e1:9b:39:fb:2c:ee:
aa:9b:a6:5a:36:a3:42:8d:c8:f0:cc:70:7b:8b:f7:
9f:5d:ec:7e:df:4e:d2:bc:da:46:8b:a0:46:6b:8e:
1f:63:2a:08:af:1c:79:67:cc:65:30:87:07:ed:bc:
40:73:52:01:78:67:d1:a2:72:f4:89:5e:a6:05:2f:
33:bb:de:ae:45:d8:5c:de:0e:25:39:94:07:c5:c5:
69:7e:54:1c:be:f8:7d:37:f6:c2:da:a0:7f:47:8b:
01:a9:44:a5:3a:73:7a:14:a0:ed:16:a5:bb:c8:e6:
41:64:c4:13:16:d4:62:ae:17:70:24:b6:8a:a0:fd:
71:31:37:f8:45:a1:da:16:f3:cb:e6:1c:46:6a:73:
02:c6:32:0e:9f:2d:8b:fb:08:70:ba:71:0c:92:77:
00:2a:97:f5:e8:85:a1:58:cc:81:55:fe:11:22:3f:
fd:60:5f:eb:9d:7f:db:9e:d9:36:50:5a:33:0d:89:
92:1a:7a:22:7a:55:75:26:62:43:4c:52:b5:32:59:
7e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0A:9C:84:64:D9:19:99:F4:68:D2:43:7A:BF:A1:E8:34:7A:AE:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D14FB38458011F1A7B7D4F3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.144.0/21
Signature Algorithm: sha256WithRSAEncryption
00:86:3d:1b:0b:77:60:12:95:ac:83:f4:14:17:db:f3:6e:23:
5e:d4:38:8a:58:82:e7:be:de:d3:dd:04:48:f0:1b:a0:26:7a:
a0:77:e9:e2:93:e1:12:e2:2b:36:19:f0:46:51:3f:c7:d4:36:
40:c8:18:ed:a7:39:7d:89:d1:57:ef:e4:de:3d:0d:11:17:1a:
74:a6:f6:f8:ae:1c:69:97:20:cc:73:20:a0:9b:ae:17:15:b3:
3e:60:4d:0a:94:03:c9:ac:8c:ef:21:20:a4:3c:07:2a:47:25:
f9:21:ef:06:13:18:26:72:20:fa:a9:93:ed:b1:1f:bc:80:3a:
e8:5b:67:73:3a:4c:c0:f5:60:21:e1:40:33:a5:f8:99:e2:c2:
de:27:54:1e:65:a6:b0:e5:c4:14:a5:e3:46:af:58:88:30:56:
7a:fa:30:06:3f:2b:aa:5f:08:20:f5:f4:7b:33:58:8d:43:6f:
94:c9:fd:56:ad:f5:cf:98:dd:a9:77:f4:cb:01:df:4b:9f:89:
10:7a:93:2d:41:9a:18:75:02:c0:98:5c:7f:cb:7b:68:6d:8f:
92:ed:18:6d:bc:aa:a0:f9:b8:50:cb:bc:48:9a:0a:99:45:ae:
9e:06:ea:e9:12:78:fb:e0:5f:f1:1f:7d:6b:de:31:27:cf:2b:
bf:1b:93:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:03:00 2026 by rpki-client