Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/420AC75A45FE11F1A994C1FFCE1D38B0.roa
File: 420AC75A45FE11F1A994C1FFCE1D38B0.roa (raw, json)
Hash identifier: loYfjGRrpiEsXoiA9wHEBOofZDbP/P2bpGphdPZ6lX8=
Subject key identifier: 99:A7:86:07:02:75:4E:0D:3D:69:D4:F4:CB:41:97:18:94:F8:B5:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C90C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/420AC75A45FE11F1A994C1FFCE1D38B0.roa
Signing time: Sat 02 May 2026 08:09:36 +0000
ROA not before: Sat 02 May 2026 08:09:31 +0000
ROA not after: Tue 09 Jun 2026 08:09:31 +0000
asID: 151352
IP address blocks: 154.82.136.0/23 maxlen: 24
154.82.136.0/24 maxlen: 24
154.82.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117004 (0x1c90c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 08:09:31 2026 GMT
Not After : Jun 9 08:09:31 2026 GMT
Subject: CN=69f5b140-ae7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e2:e6:9b:fd:29:29:a6:b3:be:60:4c:ab:bb:
c6:3c:2b:56:56:54:de:c2:7a:3e:83:f4:90:69:28:
df:ed:b6:e3:5d:6c:36:dc:14:59:f2:ad:cd:45:70:
0a:28:61:38:2a:5c:fe:a5:35:ff:5c:cf:01:05:75:
a9:f8:8d:da:b6:26:7c:6e:d3:8e:10:18:57:07:d0:
1a:ba:3a:c8:c5:d7:80:f7:18:c9:d6:e2:3a:a1:f3:
bd:e7:d0:00:3f:ad:87:b1:d9:76:0c:e2:2c:0f:18:
d6:54:8f:8e:f8:91:92:6f:c0:70:27:df:eb:e2:d2:
f2:c5:2f:e5:8d:92:b1:86:a2:e3:b8:15:b8:91:3e:
f4:2b:11:3d:e6:25:fc:6c:c6:67:a2:61:bc:7b:76:
cf:25:5d:5a:55:b2:1f:90:fb:9e:43:18:3a:7e:f8:
d4:0b:3c:6b:36:74:72:86:80:bd:9b:7a:8c:dd:51:
e4:0f:61:ed:f0:39:2e:06:8d:e4:2b:70:52:84:03:
aa:04:1a:ad:a0:b1:16:e7:a5:33:0e:a9:57:19:f1:
82:8f:ab:8e:8c:37:b6:cd:b6:f5:72:b2:8b:37:3d:
33:38:96:b1:81:0b:a5:23:7f:2a:f2:88:1a:eb:18:
f5:1e:1c:5d:48:0a:76:6e:74:4a:04:87:ea:e2:c8:
f6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A7:86:07:02:75:4E:0D:3D:69:D4:F4:CB:41:97:18:94:F8:B5:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/420AC75A45FE11F1A994C1FFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.136.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:46:a4:15:24:94:41:d6:99:fe:41:f8:e3:ab:8a:1d:14:58:
d3:89:c0:2a:0e:ca:e5:e2:ba:4d:2a:77:d1:7f:31:e6:bd:59:
a3:79:09:f6:44:c5:d6:af:40:39:41:b4:32:ce:b0:da:36:64:
48:ce:b5:9e:91:18:84:4a:0a:fb:dd:03:38:9f:c3:4e:df:1a:
e0:b2:db:dc:f5:12:97:f6:b5:f1:b2:d7:ca:cb:5c:cc:2a:6d:
41:b1:dd:18:fc:06:7e:45:29:f0:b3:31:ec:f8:ae:82:22:47:
3c:3c:ce:6d:ac:e4:08:67:94:c7:16:5f:cc:61:84:20:fb:4d:
34:65:bf:bd:2b:2e:38:68:24:60:ac:ed:f7:fc:2e:6b:19:19:
d7:39:7b:37:a0:41:b9:5e:c8:93:9a:2d:9a:73:86:d5:a4:af:
cd:24:3c:cc:67:dd:ca:2d:29:44:da:e6:a5:05:e9:fc:e1:a3:
af:1e:1d:85:1f:2c:e7:b9:28:ac:e9:d8:f2:54:19:38:d6:9b:
9f:0b:e7:24:80:0f:33:a0:cd:f1:91:20:09:2d:5b:5f:fd:78:
30:0b:21:79:58:48:64:89:25:1b:d2:82:bf:ab:11:50:b8:48:
1c:b4:f7:e9:77:00:73:52:43:78:32:0f:47:ce:5a:b4:6a:15:
97:95:09:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:03 2026 by rpki-client