Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C391BCE5F1111F1BC993809CF1D38B0.roa
File: 4C391BCE5F1111F1BC993809CF1D38B0.roa (raw, json)
Hash identifier: +3LvoUE8w7DU190JQMagnpNuw9iL/xaZa/uyfQwxg8c=
Subject key identifier: 4D:FE:5A:EE:54:36:0F:4D:03:4D:82:07:32:AC:D7:CE:18:B7:D3:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D165
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C391BCE5F1111F1BC993809CF1D38B0.roa
Signing time: Wed 03 Jun 2026 05:58:53 +0000
ROA not before: Wed 03 Jun 2026 05:58:47 +0000
ROA not after: Fri 10 Jul 2026 05:58:47 +0000
asID: 17497
IP address blocks: 154.90.174.0/23 maxlen: 24
154.90.174.0/24 maxlen: 24
154.90.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119141 (0x1d165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 3 05:58:47 2026 GMT
Not After : Jul 10 05:58:47 2026 GMT
Subject: CN=6a1fc29c-d00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:eb:49:7e:d7:53:48:fb:40:4d:ad:56:43:62:
64:09:e6:a5:eb:94:21:db:fd:ec:90:88:4f:06:ef:
b0:e1:4f:ac:c5:bb:4b:19:15:17:17:2b:7a:e5:f6:
47:bf:cf:09:40:1a:0d:76:cb:70:48:d1:3c:ae:37:
8b:3e:12:82:ae:cc:c0:a6:20:06:65:bb:11:ae:30:
e1:08:84:5f:94:b7:ef:9b:a8:e6:1e:08:2f:13:83:
5e:f8:10:f8:1c:50:30:d5:47:b7:2c:e0:3c:42:7a:
cd:ee:bd:e5:37:0b:26:31:c1:db:b3:6c:54:18:5c:
ea:1c:0d:f4:53:0f:4f:3e:dd:24:bf:17:4b:35:0c:
60:16:32:31:17:dd:80:30:53:48:40:7a:6a:f9:93:
73:c3:3e:e1:a4:49:9b:d8:a8:ef:33:c5:df:14:ba:
9a:bb:c7:5d:ab:5e:51:cb:77:20:b2:73:77:e0:5e:
ee:dc:60:27:af:24:4a:38:fa:4a:f7:67:ad:6c:21:
fe:05:46:71:46:80:d8:77:99:19:80:44:c5:66:37:
92:37:2a:db:c9:35:45:df:25:d9:3a:21:27:4d:42:
20:6a:6c:da:24:b1:c1:36:33:8f:1b:a6:cd:56:14:
b3:49:e0:28:f5:fe:dd:ca:a4:42:24:cc:8e:8b:ce:
74:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FE:5A:EE:54:36:0F:4D:03:4D:82:07:32:AC:D7:CE:18:B7:D3:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C391BCE5F1111F1BC993809CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.174.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:16:c2:6d:78:26:0c:eb:ad:4f:c4:81:74:39:bc:78:54:b6:
c3:3d:49:06:9e:9f:43:eb:36:47:50:a0:a1:81:5f:4b:b2:dd:
de:6d:92:8b:8d:2c:1e:f8:f0:ee:e0:7e:2d:2c:b8:05:6d:34:
53:02:26:f7:7f:ca:3f:0f:b9:c7:1c:96:0f:64:ee:68:b0:5a:
10:e9:ef:91:07:ef:0d:4c:e5:5e:84:02:72:bb:18:47:69:96:
a0:b8:e4:4f:b3:7e:da:3c:ef:0f:5e:cb:12:f4:bd:0b:63:09:
a4:d3:80:e8:fa:a6:51:4f:6b:91:a5:29:25:a8:e2:71:24:10:
3d:24:f9:ca:32:c7:1e:ff:12:8f:69:d7:0a:53:bc:55:ac:7c:
bf:30:17:b9:f8:0c:15:d2:d3:7f:76:82:c6:f1:76:27:f0:b9:
51:2c:12:36:55:46:40:13:b2:8f:b7:6c:a5:76:15:92:4d:ac:
12:ec:e6:30:42:fa:7f:6b:21:56:34:2b:37:7b:2c:f9:03:3c:
d2:b8:d7:75:d7:cd:d0:03:59:21:64:cb:a5:b8:f8:99:0d:1a:
98:b5:ea:a6:ae:b4:1c:75:47:f0:aa:3d:60:fd:82:f5:c3:52:
c4:17:29:2b:3a:0e:40:0f:96:c0:f5:0c:06:25:30:a1:de:8f:
8b:9c:8b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 11:57:03 2026 by rpki-client