Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33CCAA6C55FF11F1915A75D4CE1D38B0.roa
File: 33CCAA6C55FF11F1915A75D4CE1D38B0.roa (raw, json)
Hash identifier: yx581+KKJyTRYv5HwqQAx1Bhp/RhQk0DemWAdVQtHyI=
Subject key identifier: 42:2C:20:41:41:8A:D2:C4:29:8C:47:0B:FE:16:0F:24:B2:91:E7:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE3A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33CCAA6C55FF11F1915A75D4CE1D38B0.roa
Signing time: Fri 22 May 2026 16:56:40 +0000
ROA not before: Fri 22 May 2026 16:56:35 +0000
ROA not after: Fri 26 Jun 2026 16:56:35 +0000
asID: 140666
IP address blocks: 154.93.87.0/24 maxlen: 24
154.93.88.0/22 maxlen: 24
154.93.94.0/24 maxlen: 24
154.93.100.0/23 maxlen: 24
154.94.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118330 (0x1ce3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 16:56:35 2026 GMT
Not After : Jun 26 16:56:35 2026 GMT
Subject: CN=6a108ac8-de3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:58:f9:dd:ff:20:d6:6f:0b:9b:42:41:f7:ed:
28:63:eb:db:0d:33:fa:c6:f5:23:96:8c:cf:2d:df:
cc:bd:47:2a:a9:94:fc:e0:d5:59:cd:f9:de:00:aa:
4e:29:93:7a:02:11:4f:f9:51:b2:df:2c:ce:99:30:
cf:95:bb:0f:45:f1:85:44:87:5f:03:b6:c0:7c:cd:
eb:f6:71:2a:96:0f:1c:00:04:8e:34:bc:50:26:42:
37:0e:93:87:e6:da:0b:8b:a5:fe:af:07:f2:bc:b5:
dc:3b:38:fc:6e:e1:83:c0:3c:a6:72:9e:29:7b:e9:
a8:6c:be:1d:16:96:63:a8:e8:33:6b:2c:3f:11:7e:
30:0e:3e:01:62:31:1f:48:d1:6d:0f:fa:e8:e1:7e:
db:2f:9d:8b:02:ad:16:dd:a9:d7:70:cb:2d:bc:3f:
94:74:64:73:d3:12:78:6a:90:7c:ea:c2:f9:9c:55:
d7:b2:6f:7f:b8:aa:cb:38:48:a3:c8:e4:81:b2:6b:
5e:0c:ed:38:db:6a:31:f8:db:b9:a5:1e:0d:cb:59:
ea:9c:77:af:44:4f:71:e8:01:3f:b2:2c:7c:91:cd:
d7:9a:3b:61:07:97:1d:bd:22:17:cd:b5:3a:b9:1a:
64:b7:ed:46:5a:c8:b5:ed:e7:44:d6:20:7f:7d:b4:
e4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2C:20:41:41:8A:D2:C4:29:8C:47:0B:FE:16:0F:24:B2:91:E7:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33CCAA6C55FF11F1915A75D4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.87.0-154.93.91.255
154.93.94.0/24
154.93.100.0/23
154.94.68.0/24
Signature Algorithm: sha256WithRSAEncryption
17:3a:19:57:00:e9:39:e7:f4:cf:63:08:1b:19:d0:03:dd:38:
7c:e2:cd:26:d9:32:62:8e:67:3b:3d:c6:87:9d:7b:b2:61:2f:
cf:b5:52:e8:8f:d8:f9:4f:5b:57:fc:76:61:5a:73:d4:c3:65:
a4:b2:6c:fa:82:cd:07:7c:ef:b7:6b:cb:da:df:46:58:42:ac:
fa:37:e9:b1:90:51:e6:21:df:09:bc:f6:dc:37:86:76:4d:c0:
62:81:ac:3d:e6:30:a8:6e:76:01:c0:19:e4:e2:e1:00:5f:18:
20:de:f7:59:6c:62:c1:f3:15:bd:79:a6:94:6d:7f:b9:70:f0:
74:62:52:2b:6c:70:74:79:33:02:4e:c0:33:89:7f:50:e3:90:
36:cf:f1:38:a5:bf:d2:41:54:d1:59:c7:cc:29:86:7f:43:21:
cd:54:ee:14:9f:97:6a:e9:d1:37:65:d7:81:96:f1:4c:78:8e:
90:3a:a1:14:98:74:a9:0b:c5:01:db:73:c9:a5:f4:c4:ce:6d:
a9:69:43:12:10:83:e4:01:9f:a6:cc:b9:5f:88:e4:0d:32:9a:
f7:d4:d5:71:43:2b:cd:b3:c0:a4:bf:08:e3:8d:78:6d:3f:64:
9e:be:4c:b9:8e:ff:32:7a:06:2b:50:8d:1a:06:07:85:a8:af:
b7:71:65:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:11:34 2026 by rpki-client