Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A4E8E583D6111F1836C8EE1CE1D38B0.roa
File: 2A4E8E583D6111F1836C8EE1CE1D38B0.roa (raw, json)
Hash identifier: 8OblRpEHWF20M3qCvlTOMoDvM+UoeiftbCqvwZbZdYM=
Subject key identifier: 92:E2:90:D8:89:63:4E:13:3A:2F:A4:5D:79:2F:5F:35:17:84:D8:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C646
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A4E8E583D6111F1836C8EE1CE1D38B0.roa
Signing time: Tue 21 Apr 2026 09:04:56 +0000
ROA not before: Tue 21 Apr 2026 09:04:51 +0000
ROA not after: Wed 27 May 2026 09:04:51 +0000
asID: 17561
IP address blocks: 154.82.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116294 (0x1c646)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 21 09:04:51 2026 GMT
Not After : May 27 09:04:51 2026 GMT
Subject: CN=69e73db8-431b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1a:84:f2:02:d1:33:b4:41:fd:cb:55:25:e7:
e6:09:aa:35:79:e9:35:67:92:a9:65:15:e1:9f:22:
d1:f2:5b:37:73:c0:74:32:07:08:cc:71:cd:2e:a4:
a9:1a:23:be:98:8e:33:50:0e:2f:74:67:0e:fc:28:
df:0f:c4:f6:6f:cf:21:fc:03:f9:c8:00:a5:d0:25:
9e:7f:5e:f4:63:57:bb:0f:71:36:73:20:16:b2:19:
99:26:fb:ad:2e:32:b6:cb:a8:66:6c:65:53:dd:97:
2f:22:27:92:40:2e:96:ed:e5:7d:8c:1a:82:70:0a:
7d:26:15:83:f9:c2:bb:6f:1f:91:23:90:8d:a3:da:
94:46:a7:cb:68:32:e1:a9:c2:4a:c3:be:c0:4f:8b:
6f:12:36:7b:6c:4a:cc:68:a6:ce:fe:67:bd:0d:df:
4b:c7:65:3d:fc:c2:74:a6:b7:69:b9:1f:65:5f:11:
cf:c6:61:a5:25:b1:69:7e:0b:c3:d6:25:7b:78:b8:
68:3d:fb:ae:49:94:f8:71:75:78:ff:aa:4a:db:7f:
d4:92:a4:76:e5:8d:7a:b4:09:49:96:15:7f:e5:f2:
ea:3a:23:18:16:7f:04:94:54:7a:31:79:6d:fd:2a:
59:83:c1:1f:80:cf:50:a9:f8:e9:f0:7c:cb:38:55:
ed:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E2:90:D8:89:63:4E:13:3A:2F:A4:5D:79:2F:5F:35:17:84:D8:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A4E8E583D6111F1836C8EE1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.154.0/23
Signature Algorithm: sha256WithRSAEncryption
af:66:81:e4:5e:fb:cb:ad:b9:f3:0e:3a:7d:35:53:a1:58:c7:
90:a7:c5:32:bb:52:be:60:c9:36:c7:71:a8:f0:51:b2:d8:bb:
90:59:e9:25:52:58:97:57:40:ce:f4:f7:26:36:0e:ed:0d:f8:
80:0f:7d:55:93:48:7a:4a:f2:c9:13:70:b7:48:12:d1:00:db:
33:92:80:ec:75:63:d7:69:79:8c:74:6d:34:19:a4:46:77:db:
0b:dd:8c:f0:6b:f7:8d:50:8a:33:09:18:e2:ea:82:9b:0f:db:
85:8b:e6:53:9f:55:fc:14:f4:80:f1:00:9f:db:fc:a4:32:5a:
8f:d0:8f:f6:68:08:98:65:f3:f2:15:64:a1:7e:c1:ea:5d:cf:
1a:8c:96:0f:b8:98:a8:6b:f0:90:61:ea:04:5b:0e:12:d6:4d:
91:26:75:bd:d5:a5:15:91:02:33:08:22:00:30:ae:3e:8c:eb:
f6:e3:21:4e:35:6c:0b:48:9c:4e:4c:9c:49:a3:6c:66:50:e0:
01:13:e4:61:00:02:30:18:2f:1a:43:4c:ac:b7:3f:00:db:f0:
77:60:a1:24:82:82:b4:a5:d2:41:3f:85:51:9b:45:2e:04:ac:
19:ca:16:c6:4e:cd:73:be:ca:0c:71:3c:65:3c:b0:e5:af:d7:
78:d0:d1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:04 2026 by rpki-client