Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4BDFC6AE4A7C11F1AE26C0BECE1D38B0.roa
File: 4BDFC6AE4A7C11F1AE26C0BECE1D38B0.roa (raw, json)
Hash identifier: k9a1bzU8mQxO737WTmyuKTV8Pn3XQ/P8p+SGvr2hJKU=
Subject key identifier: E8:BC:B0:A2:7D:9F:8A:DA:39:F2:F7:7B:26:F2:16:B3:14:9A:9F:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CA1B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4BDFC6AE4A7C11F1AE26C0BECE1D38B0.roa
Signing time: Fri 08 May 2026 01:21:54 +0000
ROA not before: Fri 08 May 2026 01:21:49 +0000
ROA not after: Wed 07 Jul 2027 01:21:49 +0000
asID: 328608
IP address blocks: 154.200.186.0/24 maxlen: 24
154.200.187.0/24 maxlen: 24
154.200.188.0/24 maxlen: 24
154.200.189.0/24 maxlen: 24
154.200.190.0/24 maxlen: 24
154.200.192.0/24 maxlen: 24
154.200.193.0/24 maxlen: 24
154.200.194.0/24 maxlen: 24
154.200.195.0/24 maxlen: 24
154.200.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117275 (0x1ca1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 01:21:49 2026 GMT
Not After : Jul 7 01:21:49 2027 GMT
Subject: CN=69fd3ab2-e2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d7:aa:8a:63:3c:fe:e7:80:b6:c1:52:7b:02:
40:6a:c0:77:b3:17:85:83:09:1e:f7:c3:9a:1a:fc:
0b:c1:25:bb:97:e7:9c:1e:f7:6e:ed:d9:f5:2e:7f:
43:85:c6:d5:f1:33:e6:2c:19:f5:02:35:e6:68:4a:
e1:5c:71:1a:f1:c3:c4:eb:33:c1:6c:c1:7b:d6:53:
f1:e9:e8:f2:82:25:23:1a:a3:84:d1:b6:88:fc:3d:
77:8c:25:7a:96:e9:d5:83:e7:6a:16:20:cb:43:3c:
b6:d7:b5:7c:8d:e0:8d:47:d1:63:1f:a3:d5:48:a4:
06:c5:91:09:e4:4b:9e:ea:17:1c:b8:44:ba:b9:aa:
e9:d1:df:70:f4:0b:16:ad:a5:12:06:7d:eb:c1:ab:
82:b9:3c:ad:6c:6b:ed:5e:5e:4e:d5:21:1f:c4:96:
d4:31:ea:b9:d9:75:c5:4c:2f:7a:55:f1:bb:2a:d4:
b8:65:32:b6:38:d8:49:41:a2:82:fa:ab:fd:02:5d:
f5:a0:8e:d5:c1:69:c8:a6:b0:80:5a:e7:c4:40:06:
8d:00:04:65:8f:78:2a:b4:09:9b:c5:49:2f:22:d7:
7c:89:78:ae:a8:8d:e3:fe:38:3c:c3:a6:be:7a:85:
bc:f9:23:fe:8f:0d:a7:36:48:a6:a0:70:06:3c:f8:
9b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BC:B0:A2:7D:9F:8A:DA:39:F2:F7:7B:26:F2:16:B3:14:9A:9F:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4BDFC6AE4A7C11F1AE26C0BECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.186.0-154.200.190.255
154.200.192.0-154.200.196.255
Signature Algorithm: sha256WithRSAEncryption
28:47:e3:25:14:43:7a:9f:e1:e7:b0:85:bf:47:4f:a8:e3:fb:
bb:a6:20:d3:7f:1b:02:c8:8d:45:c8:c3:7d:48:39:6c:e1:bf:
02:8d:27:21:4b:45:f7:4d:e7:2f:80:0d:88:c4:2b:58:08:93:
1b:58:fa:55:87:95:3a:4e:a3:cf:4a:34:19:49:a1:9c:08:36:
ee:46:5d:9d:ad:2f:e5:d9:32:fd:85:71:43:d9:60:ba:6d:3f:
db:30:67:8f:fa:db:4a:fa:76:b8:ad:55:c7:93:2b:09:70:7d:
9b:b8:1d:b3:6f:83:d7:5f:40:d5:3e:fa:f1:8c:49:56:99:dc:
5f:cc:8d:62:a7:70:d7:b9:f5:0a:fd:80:3d:ca:14:7e:25:c0:
31:b6:0c:a7:80:88:06:4d:29:3d:a9:64:15:0e:a7:cb:71:21:
2f:f7:be:91:eb:f5:5d:a2:14:2f:1c:d4:66:f0:95:e3:78:49:
36:f6:f4:78:ac:48:18:a2:a0:2f:13:c9:4b:2e:86:3b:39:3c:
8f:99:d6:87:27:0e:c5:ff:1b:cb:0e:bc:e5:29:66:98:bf:35:
82:81:d4:2c:b6:e0:b2:39:1d:9c:40:8e:14:c7:b8:31:da:df:
92:ca:e3:51:06:8d:ba:71:9c:5d:d3:61:6e:5e:f0:36:93:3d:
43:bc:73:95
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 9 11:02:19 2026 by rpki-client