Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/488926E8446F11F183B4BE00CF1D38B0.roa
File: 488926E8446F11F183B4BE00CF1D38B0.roa (raw, json)
Hash identifier: U9Bd3pJQR6wZbf5g0c6EKdN4fRzhOul5zEHcVZAT6iM=
Subject key identifier: C6:07:6E:DD:5A:0D:71:A7:8A:F8:28:BA:00:41:F2:CA:32:EC:67:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C801
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/488926E8446F11F183B4BE00CF1D38B0.roa
Signing time: Thu 30 Apr 2026 08:33:38 +0000
ROA not before: Thu 30 Apr 2026 08:33:33 +0000
ROA not after: Fri 30 Apr 2027 08:33:33 +0000
asID: 328608
IP address blocks: 154.200.166.0/24 maxlen: 24
154.200.167.0/24 maxlen: 24
154.200.168.0/24 maxlen: 24
154.200.169.0/24 maxlen: 24
154.200.170.0/24 maxlen: 24
154.200.171.0/24 maxlen: 24
154.200.172.0/24 maxlen: 24
154.200.173.0/24 maxlen: 24
154.200.174.0/24 maxlen: 24
154.200.175.0/24 maxlen: 24
154.200.176.0/24 maxlen: 24
154.200.177.0/24 maxlen: 24
154.200.178.0/24 maxlen: 24
154.200.179.0/24 maxlen: 24
154.200.180.0/24 maxlen: 24
154.200.181.0/24 maxlen: 24
154.200.241.0/24 maxlen: 24
154.200.242.0/24 maxlen: 24
154.200.248.0/24 maxlen: 24
154.200.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 May 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116737 (0x1c801)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 08:33:33 2026 GMT
Not After : Apr 30 08:33:33 2027 GMT
Subject: CN=69f313e2-3cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:04:ea:e9:02:d6:e3:19:ba:d5:75:36:9d:5e:
67:a5:ba:c4:94:0c:80:f4:0d:0f:da:fb:94:06:08:
24:aa:45:8e:cd:42:9e:55:f4:04:e1:4f:99:2d:ea:
a8:ca:8b:e4:b6:5b:d2:b9:6c:f2:7e:8c:98:75:68:
8c:89:af:53:f3:56:d9:42:f9:a5:98:66:8a:5f:a0:
fe:51:3d:7c:d4:d9:bf:fa:84:61:c1:89:28:e7:c6:
64:b9:ae:b6:68:1c:57:2c:a7:8d:e4:df:3a:dc:72:
09:05:67:29:04:85:8c:d3:cf:49:df:e1:16:ab:af:
46:db:c9:56:99:ee:7a:e8:00:17:3b:58:c7:44:1f:
f2:77:91:cf:b2:16:da:71:bb:ea:86:e4:f8:00:0c:
7d:c4:29:ff:88:45:e4:6b:f8:21:76:dc:5f:7f:ec:
74:60:63:7e:db:ef:6a:1c:0a:ab:49:bd:e3:b4:f1:
f3:54:17:26:78:77:cf:82:70:8c:be:a2:fa:5e:7e:
61:1c:c1:60:02:48:d9:97:52:e1:44:ad:c5:09:a8:
80:b8:13:94:40:bd:06:46:6b:d0:6e:91:a7:c4:6e:
be:28:3f:51:d5:79:18:a9:ea:32:f6:75:54:52:8f:
ef:93:8f:84:4d:54:9f:6f:cd:3e:40:3d:d0:12:47:
e5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:07:6E:DD:5A:0D:71:A7:8A:F8:28:BA:00:41:F2:CA:32:EC:67:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/488926E8446F11F183B4BE00CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.166.0-154.200.181.255
154.200.241.0-154.200.242.255
154.200.248.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:55:57:3e:60:94:e5:e4:46:9f:a0:74:9f:bc:4a:87:34:af:
fa:46:4c:57:8a:d2:38:ba:e5:2a:d3:f9:b3:89:04:e5:c0:92:
30:e4:25:6f:dc:a9:d2:9a:b2:a9:ff:fd:e2:a8:c1:73:a4:b3:
32:b6:f5:51:e8:df:73:db:d7:9e:1a:39:9e:ab:ac:6a:05:ae:
7c:47:2d:55:4b:41:21:d7:3a:c8:c3:01:e3:bd:86:31:d4:20:
a1:4f:16:87:3b:6e:f2:38:bd:f8:5a:8f:22:3a:7d:78:cf:c8:
b1:5c:b5:14:b7:54:03:2a:57:7b:75:ef:36:8b:f1:a9:1b:4c:
ef:21:4d:0d:1b:49:6f:8e:53:75:e2:54:2c:de:56:cb:4e:86:
b5:f3:07:01:84:7d:f9:97:1d:68:18:9d:9a:9b:be:55:17:a5:
6c:d9:69:75:b0:44:2f:d7:36:63:92:46:52:e3:8f:c8:08:af:
41:2c:b3:d7:49:38:75:5d:24:69:15:12:46:f7:4e:53:c7:69:
01:4d:12:3b:68:06:b6:e2:8b:ec:09:c3:58:92:8a:3f:bc:e0:
5c:c3:c9:40:3b:53:9e:33:bb:e6:e5:70:91:c8:70:9c:5d:ac:
33:86:1d:f9:60:aa:3b:89:3a:37:58:66:0c:58:8b:23:22:34:
97:88:6b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 23:49:01 2026 by rpki-client