Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45390EF868B511F1B96BE613CF1D38B0.roa
File: 45390EF868B511F1B96BE613CF1D38B0.roa (raw, json)
Hash identifier: lfv2qrrkEy6+SAGvlR5Cgp5Qz8wSo87Wmoh1PtJipLg=
Subject key identifier: 84:05:BE:88:8F:30:7C:E3:A6:31:95:4D:28:7E:39:39:13:A8:89:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D2BF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45390EF868B511F1B96BE613CF1D38B0.roa
Signing time: Mon 15 Jun 2026 12:25:19 +0000
ROA not before: Mon 15 Jun 2026 12:25:14 +0000
ROA not after: Fri 17 Jul 2026 12:25:14 +0000
asID: 49581
IP address blocks: 154.83.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119487 (0x1d2bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 15 12:25:14 2026 GMT
Not After : Jul 17 12:25:14 2026 GMT
Subject: CN=6a2fef2f-ab4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:0b:77:1e:36:df:dd:75:69:05:78:1d:6f:
84:12:81:37:f7:b1:8e:df:e8:5e:82:5f:ad:33:2c:
cf:81:da:25:9d:a4:dc:1b:7c:0b:0d:69:25:08:01:
58:fe:65:44:04:2d:9c:0a:8e:92:c3:47:32:f1:5d:
78:f9:5d:7d:5f:0a:08:48:7c:96:b3:f0:7e:0f:24:
72:3c:7e:7b:dd:80:d1:ad:68:87:6e:2b:f4:9b:cd:
a2:39:70:e0:a1:28:4b:d7:b2:c2:58:e9:d8:28:d0:
d8:b9:70:1d:53:d6:1b:30:ae:bb:57:21:2c:fc:a6:
6d:ba:f3:70:df:7c:a3:9d:7f:44:1e:d0:ba:9e:62:
4b:1a:01:a2:3e:b2:76:db:8a:b7:4f:cf:5b:bb:25:
05:35:97:7d:86:6a:38:32:5f:79:0b:1a:d7:95:11:
6b:6e:83:67:d6:ee:c8:42:72:1b:4b:7b:d9:59:97:
f3:06:ae:69:e6:0e:13:24:0d:71:e2:2b:2e:53:0f:
3b:b0:c6:44:42:bc:54:c0:1d:e5:da:d6:e7:65:51:
5b:66:72:b7:00:26:b1:d8:05:0a:01:71:c9:0a:6f:
cd:af:37:f3:0a:16:2f:ed:df:e8:b6:cb:29:a0:e7:
72:2e:11:56:c1:cb:78:7a:8e:d5:c7:ea:3b:d5:fe:
04:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:05:BE:88:8F:30:7C:E3:A6:31:95:4D:28:7E:39:39:13:A8:89:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45390EF868B511F1B96BE613CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.149.0/24
Signature Algorithm: sha256WithRSAEncryption
48:db:ca:37:6d:bc:fe:68:26:a8:40:af:93:23:f1:df:ff:ba:
3c:2a:5f:d0:e5:c2:1d:88:0b:fa:5b:ce:91:f7:82:3b:e7:19:
cc:b8:31:9c:4d:86:b3:84:87:51:ee:72:c6:5c:95:b3:88:1f:
c1:32:c2:c9:27:38:18:24:80:a1:88:8a:f2:df:1a:be:c7:49:
5f:77:ca:cf:0a:6c:9c:47:d5:5a:11:b3:1c:5a:70:a2:c9:38:
61:4b:08:7d:6f:01:58:99:49:d7:63:c2:b2:dd:b6:31:ce:68:
aa:75:d5:b7:b8:e7:a4:96:97:fd:c5:ef:c1:74:49:2a:2a:00:
e5:96:e7:60:1e:a6:44:f5:29:3e:59:1c:ec:e3:64:2c:5b:fa:
b1:3f:2e:c3:9a:fb:b4:52:23:1d:15:0a:26:9f:38:c8:b5:a0:
5a:80:2a:c4:9d:d4:6d:61:2c:98:2b:8e:b9:06:b4:34:a9:99:
40:b6:7f:b7:dd:9f:d1:f2:64:c2:96:ac:ef:4d:87:29:44:13:
64:75:f9:a7:c1:3b:52:d1:00:03:3a:7e:ed:11:c8:ed:fd:82:
1c:48:a6:c0:46:be:6b:17:44:c0:a5:48:6b:89:47:08:70:24:
df:d2:e9:8e:0d:f1:45:78:36:dc:cd:f8:99:93:21:47:81:3d:
c8:0a:3a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:17 2026 by rpki-client