Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4046C5F03F0911F1A5E7B913CF1D38B0.roa
File: 4046C5F03F0911F1A5E7B913CF1D38B0.roa (raw, json)
Hash identifier: F3s/4KUj+YOtIWgSZ01OpgDjYlSkiiSeUVDBWY05kr0=
Subject key identifier: 6E:E5:CA:CF:9C:42:84:68:71:E0:43:9C:BB:A8:7B:B3:D8:D4:A8:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C6E1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4046C5F03F0911F1A5E7B913CF1D38B0.roa
Signing time: Thu 23 Apr 2026 11:40:39 +0000
ROA not before: Thu 23 Apr 2026 11:40:35 +0000
ROA not after: Mon 08 Jun 2026 11:40:35 +0000
asID: 214143
IP address blocks: 154.81.132.0/22 maxlen: 24
154.81.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116449 (0x1c6e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 11:40:35 2026 GMT
Not After : Jun 8 11:40:35 2026 GMT
Subject: CN=69ea0537-9069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:7e:b2:49:e0:2e:e4:33:60:ef:65:f2:2c:
03:80:30:e3:7b:fe:d4:e5:34:70:83:89:67:c6:b4:
b3:0c:e9:79:26:40:3d:94:dc:a8:95:2e:32:0b:42:
e1:62:5e:08:27:bb:0d:53:1c:2d:7f:05:2b:64:ff:
68:15:89:b3:be:7d:cf:ff:01:4f:9a:cb:cf:a7:0a:
6a:18:d6:f9:58:cb:0f:65:c8:20:5c:ed:2d:51:d9:
a0:e0:a0:d8:ae:bc:f7:a4:7f:d5:33:88:b3:31:2a:
72:36:5c:ef:0d:11:f2:22:ba:97:c9:4f:03:47:07:
c4:c6:50:0b:a2:84:3d:9a:d5:21:56:96:53:b2:a9:
3e:e6:b2:32:78:7c:9f:86:78:35:8f:86:96:d3:1a:
d5:5a:f8:80:8e:28:80:dd:39:d9:2b:3b:a5:f4:32:
ad:61:ec:58:21:f0:69:30:cd:46:67:e9:1e:9d:57:
63:87:da:e3:d5:a0:d9:50:cd:84:7e:ea:cb:5f:b2:
ae:97:5e:92:3b:e8:32:e9:ed:be:8c:5e:a0:e8:2a:
d8:de:60:1a:2c:58:6f:4c:47:e0:25:e7:48:fd:83:
5b:12:78:7a:de:d2:aa:ee:8f:24:fb:4c:fd:35:b8:
69:f3:6f:20:60:84:e5:a0:3a:9d:2c:db:57:06:4a:
d7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E5:CA:CF:9C:42:84:68:71:E0:43:9C:BB:A8:7B:B3:D8:D4:A8:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4046C5F03F0911F1A5E7B913CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.132.0/22
154.81.138.0/23
Signature Algorithm: sha256WithRSAEncryption
57:05:dc:e5:14:52:68:da:35:f4:05:3c:ef:61:00:be:c3:7b:
de:82:f5:60:89:6b:21:0c:af:c1:9d:87:24:0c:88:a6:50:e9:
2e:f1:83:01:e2:be:2b:84:02:a5:49:77:9c:48:2e:1b:9d:f8:
1d:a2:3e:39:b8:13:77:ab:03:1c:ac:a2:fc:99:08:8d:32:81:
96:e5:62:e5:e4:17:52:68:30:34:26:ca:54:7e:88:a5:98:c4:
26:b5:92:9e:40:cc:c6:1f:bd:09:1c:33:12:3e:e2:40:98:43:
9f:1a:54:96:5d:e3:40:ee:1c:75:86:6f:c7:39:db:07:97:aa:
32:35:73:c2:4f:da:ca:2f:66:fc:6e:49:21:e4:29:a3:e9:13:
19:46:2f:ac:48:58:e4:90:6d:36:ae:d6:8d:17:cd:d8:e5:c4:
5e:ee:d7:9f:32:d6:df:6d:bf:a7:d1:87:57:8e:8f:cc:6e:57:
36:23:18:7e:ce:73:cb:84:90:c6:f3:41:07:24:41:5b:07:d8:
19:47:e6:92:4e:29:fb:f5:6f:1d:a9:b0:5a:ba:a5:5a:a8:dd:
ca:7f:a6:91:81:d4:11:4f:b3:77:f4:a0:bb:bf:cd:2f:32:e4:
08:0a:78:22:54:df:9e:28:ac:d5:b9:ba:37:3e:17:4b:16:69:
48:41:94:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:08 2026 by rpki-client