Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/467FCA34455311F1A417DDE7CE1D38B0.roa
File: 467FCA34455311F1A417DDE7CE1D38B0.roa (raw, json)
Hash identifier: C2fCdkbQO6IYzGCgsIcmyIZE1oeFWaCL7O0H+v/S4O0=
Subject key identifier: E9:A6:11:1B:E6:82:DF:C2:C5:F7:32:00:E0:E3:C5:66:A2:27:0D:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C87B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/467FCA34455311F1A417DDE7CE1D38B0.roa
Signing time: Fri 01 May 2026 11:45:40 +0000
ROA not before: Fri 01 May 2026 11:45:35 +0000
ROA not after: Sun 10 May 2026 11:45:35 +0000
asID: 136907
IP address blocks: 154.220.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 May 2026 11:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116859 (0x1c87b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 11:45:35 2026 GMT
Not After : May 10 11:45:35 2026 GMT
Subject: CN=69f49263-fe16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9d:9d:6a:f7:a1:c2:70:52:e6:66:51:89:82:
17:69:ef:41:e4:2b:98:3a:64:7e:d5:2f:5f:2d:49:
27:80:0c:b0:25:bf:7b:dd:e0:b5:27:d3:26:d9:98:
d2:52:e5:d7:0c:1a:d6:1f:1b:f7:ff:b7:4a:30:a1:
e6:ba:33:e2:fb:53:7b:68:5d:19:bc:dd:44:06:2b:
e6:c0:5c:bc:65:92:2c:8d:ca:e4:9d:ea:c0:89:f2:
d8:33:76:8b:18:de:b9:0e:ee:2e:59:eb:c1:64:33:
67:bf:1c:31:4b:6a:34:26:c6:e2:cd:ca:cd:45:c0:
0e:e2:8d:40:2c:34:c3:72:8a:ae:fc:a8:88:52:d0:
ea:ec:59:8b:ea:f3:ce:fb:be:be:c0:37:94:1b:e1:
41:ef:b7:17:b5:80:83:47:11:39:38:58:e4:20:ec:
1f:97:d8:e7:3b:1d:72:55:2b:6c:3e:65:e7:0c:6c:
b0:4e:dd:60:a1:9d:0e:d0:82:4b:60:21:c7:1d:dc:
2b:6b:8a:78:44:a9:b5:a9:0b:8c:ad:fe:00:34:44:
00:63:a3:26:87:d1:5d:7c:b5:63:37:a1:07:50:91:
ce:b2:82:a9:89:58:d7:41:19:73:8d:c4:d9:bb:c4:
b9:d1:61:8a:94:4c:71:95:fe:0c:f2:b9:62:65:dd:
18:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A6:11:1B:E6:82:DF:C2:C5:F7:32:00:E0:E3:C5:66:A2:27:0D:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/467FCA34455311F1A417DDE7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.192.0/19
Signature Algorithm: sha256WithRSAEncryption
10:42:ff:da:ba:42:8a:27:1a:ac:8a:a9:81:e0:ae:7f:dd:f5:
24:c7:f1:8f:92:dd:f5:96:98:c3:8d:fa:d9:f8:c2:d8:26:bc:
7b:51:62:04:a9:9f:ba:66:8d:fe:34:b1:d2:ab:d3:42:ea:bc:
12:06:48:9c:5d:2d:89:c0:6d:ba:d3:14:dc:01:3d:6a:c8:67:
f6:e2:66:24:af:4a:3e:4a:21:f4:cd:d5:18:de:34:88:d6:30:
62:4b:91:95:4f:12:cb:c7:9b:fe:71:fb:91:c9:0b:3f:9c:ef:
dd:af:6e:8d:5f:b2:1c:18:96:e5:48:f0:5b:22:66:a2:7d:df:
97:44:f6:d2:77:b5:54:bf:db:4a:19:76:e4:9b:7d:bf:af:15:
f4:c4:72:d1:3a:5d:2a:65:d0:fe:75:f8:d3:eb:22:44:3c:29:
62:24:8c:22:af:9d:59:c5:39:37:59:9d:e6:b1:b6:d3:db:58:
46:ab:e7:bf:c8:f1:61:f9:07:3a:08:35:50:67:cf:73:97:9e:
79:be:70:fa:e3:af:04:84:a8:c2:a3:59:05:56:ae:b4:9b:4e:
e3:6b:df:82:eb:76:64:06:7a:32:ed:3e:28:7a:42:e2:1e:db:
c4:a5:af:c8:9d:d0:53:3c:dc:b0:e7:21:13:2b:c6:59:ab:45:
ae:89:93:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:57 2026 by rpki-client