Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28E755A84EC911F195D061EFCE1D38B0.roa
File: 28E755A84EC911F195D061EFCE1D38B0.roa (raw, json)
Hash identifier: 67TNEh+n+lIMW0RPpB0IxErQ9Qr3yDR8xKNtXOcNXdY=
Subject key identifier: 7F:38:CE:A1:6B:0B:8F:BC:DE:AD:7B:5B:32:5B:A9:A2:EE:05:2C:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CB63
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28E755A84EC911F195D061EFCE1D38B0.roa
Signing time: Wed 13 May 2026 12:42:11 +0000
ROA not before: Wed 13 May 2026 12:42:06 +0000
ROA not after: Wed 17 Jun 2026 12:42:06 +0000
asID: 22773
IP address blocks: 154.85.121.0/24 maxlen: 24
154.85.122.0/24 maxlen: 24
154.90.159.0/24 maxlen: 24
154.94.32.0/24 maxlen: 24
154.94.36.0/23 maxlen: 24
154.94.40.0/24 maxlen: 24
154.94.43.0/24 maxlen: 24
154.94.44.0/24 maxlen: 24
154.94.47.0/24 maxlen: 24
154.94.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 May 2026 08:26:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117603 (0x1cb63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 13 12:42:06 2026 GMT
Not After : Jun 17 12:42:06 2026 GMT
Subject: CN=6a0471a3-74f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a2:2f:99:bb:14:80:31:af:90:78:de:2a:95:
72:c4:c2:6d:d8:8b:95:ed:e5:12:2f:6e:57:f4:48:
40:01:58:1c:d1:c6:fe:e4:3e:d8:01:2a:7e:06:bb:
5d:71:03:49:12:e6:72:93:99:c4:cb:44:86:18:e3:
cd:84:b4:d0:c8:21:2c:cd:d1:73:b9:c1:54:ba:26:
eb:d3:59:cc:23:f3:e5:99:cb:85:14:d4:48:71:de:
f4:0c:d6:3a:8d:45:3e:73:58:ae:d6:4d:b9:ae:fe:
55:db:7e:4e:e3:14:09:38:e6:55:82:36:c0:04:df:
37:c0:cf:68:85:c3:e9:f7:6f:ef:ac:74:56:da:16:
c7:c8:1d:8f:93:98:82:84:05:52:3e:e6:10:d1:0a:
16:00:4f:33:7e:11:d6:02:fa:fa:dc:29:d6:0d:ea:
7d:04:0f:af:b6:49:42:b8:ea:93:09:05:f9:0c:1e:
69:c8:d6:d0:a6:4f:e3:fe:c1:98:f7:84:97:9e:db:
09:ef:f6:d6:3e:66:4b:6e:d0:fc:dc:f9:70:3f:85:
cd:60:67:af:50:96:c8:ba:55:80:b7:cc:a4:9b:fb:
a0:94:c3:47:f4:b4:60:fb:a5:a0:85:1f:a2:92:9e:
05:93:72:87:cf:16:c8:0d:5e:88:92:95:81:64:56:
29:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:38:CE:A1:6B:0B:8F:BC:DE:AD:7B:5B:32:5B:A9:A2:EE:05:2C:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28E755A84EC911F195D061EFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.121.0-154.85.122.255
154.90.159.0/24
154.94.32.0/24
154.94.36.0/23
154.94.40.0/24
154.94.43.0-154.94.44.255
154.94.47.0/24
154.94.51.0/24
Signature Algorithm: sha256WithRSAEncryption
64:b1:45:51:de:36:92:75:4d:5a:50:b2:47:b9:48:42:15:8a:
16:bc:52:54:ae:f2:3f:69:a3:5a:9b:e3:3c:45:ba:69:5e:91:
41:5e:8d:66:63:03:e4:d9:ff:19:2c:15:79:f4:a8:c8:7b:ed:
cd:9b:bc:3d:df:39:40:11:82:32:16:96:a8:1f:80:2d:1f:39:
d7:d3:c6:62:95:4d:21:fa:96:f8:b4:30:85:e3:8d:43:e1:53:
74:d5:86:ab:06:0f:0c:93:b1:b0:a8:1b:90:19:8c:7a:1f:74:
da:9d:33:e7:4d:b6:41:26:5d:b0:91:77:de:af:79:bc:79:c3:
b8:72:f7:44:65:38:69:a5:8b:43:db:46:ab:4e:09:a9:08:39:
95:fe:f7:b2:63:20:cb:3d:0d:43:59:63:15:d9:87:73:af:51:
51:66:35:ae:29:65:e6:7a:77:30:54:61:95:d8:df:f2:8f:84:
28:ca:41:e7:62:78:a9:ef:20:fb:dc:11:d7:30:9a:8f:53:1a:
f0:2a:54:6e:bb:fe:50:97:42:e7:fb:5a:04:2e:9f:2b:c7:a9:
a0:a2:bd:da:59:0d:47:9e:ec:56:ba:aa:25:4b:15:e5:93:f9:
60:db:5e:3a:c6:56:45:e2:bc:12:68:60:07:af:18:e6:0f:c4:
db:68:b9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 20 21:20:39 2026 by rpki-client