Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C5633F2408B11F196B46BD0CE1D38B0.roa
File: 4C5633F2408B11F196B46BD0CE1D38B0.roa (raw, json)
Hash identifier: PY/uu9pdXwh6tzV77sRmTmtIef5sEkyCzz5cIKczrM0=
Subject key identifier: 04:5D:FE:AC:23:BB:B4:EC:B1:E5:5B:E9:C5:7F:0E:D3:45:40:30:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C763
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C5633F2408B11F196B46BD0CE1D38B0.roa
Signing time: Sat 25 Apr 2026 09:44:05 +0000
ROA not before: Sat 25 Apr 2026 09:44:01 +0000
ROA not after: Mon 01 Jun 2026 09:44:01 +0000
asID: 62240
IP address blocks: 154.223.208.0/24 maxlen: 24
154.223.209.0/24 maxlen: 24
154.223.210.0/24 maxlen: 24
154.223.211.0/24 maxlen: 24
154.223.212.0/24 maxlen: 24
154.223.213.0/24 maxlen: 24
154.223.214.0/24 maxlen: 24
154.223.215.0/24 maxlen: 24
154.223.216.0/24 maxlen: 24
154.223.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116579 (0x1c763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 25 09:44:01 2026 GMT
Not After : Jun 1 09:44:01 2026 GMT
Subject: CN=69ec8ce5-00c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:77:90:b8:1f:b8:ca:80:07:f5:88:9c:94:3b:
f4:5c:79:0f:55:66:0d:ad:7e:9c:14:64:aa:0a:80:
64:f2:21:cb:8d:93:71:b6:c0:04:32:e4:f8:b6:37:
e3:38:ff:8b:29:0e:f9:e0:fe:af:67:c2:5c:87:85:
66:b6:56:13:8f:fa:7f:96:2c:1e:ee:b2:6f:83:6c:
be:d1:0a:b9:cf:7e:65:42:2e:00:94:c8:31:78:4a:
04:09:63:7d:9d:81:14:a2:31:74:3d:18:be:3b:35:
0c:3d:f2:93:93:3f:03:f7:ec:99:04:2d:9f:2b:1e:
82:37:40:31:6a:6b:bb:5e:d7:f6:77:82:11:e2:b8:
a3:96:1c:1e:cf:8d:15:2f:4d:92:8f:f0:6a:c3:e5:
6d:8e:7a:35:4b:b1:6c:16:61:c6:36:84:61:85:33:
c2:3b:e3:c1:6e:55:fc:a8:54:e5:1c:df:00:59:a9:
33:db:2c:3e:0e:1a:e6:17:52:7c:e7:a9:20:71:6e:
76:03:c0:4c:57:89:d5:a9:37:ef:7a:4e:9d:81:08:
84:c8:52:0c:b3:f0:f7:30:06:96:9a:df:20:07:dc:
11:96:51:51:3c:7c:4d:24:23:50:97:91:a6:f8:49:
66:39:c4:18:c0:63:af:7b:6d:8b:ca:8e:9c:24:84:
2b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5D:FE:AC:23:BB:B4:EC:B1:E5:5B:E9:C5:7F:0E:D3:45:40:30:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C5633F2408B11F196B46BD0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.208.0-154.223.217.255
Signature Algorithm: sha256WithRSAEncryption
6e:8f:d2:28:7b:7b:4c:2b:ae:9d:ee:91:3c:b2:e9:3a:f4:4f:
09:9f:82:88:11:82:de:66:80:d9:8d:ae:71:db:1a:67:36:37:
d1:72:50:35:26:3d:7f:d8:88:45:41:2d:0a:3b:34:13:fc:5b:
49:f0:07:25:19:6d:e5:37:6d:37:88:5a:a8:2d:6a:b7:da:3e:
c5:98:47:54:48:21:7b:2b:d3:b2:f2:38:4a:bf:cd:5b:1f:be:
30:14:3a:c2:31:0e:92:ae:c3:55:18:26:15:8e:7a:b1:ae:e3:
83:02:c7:2c:f2:fa:94:72:0d:7c:16:44:97:cd:9d:eb:a2:a9:
a1:90:51:d2:72:41:e0:86:7c:1b:01:ed:84:9e:67:2b:61:3f:
78:92:a1:f7:19:c7:2c:5b:8d:2e:ab:34:9c:bd:cb:26:be:39:
71:aa:9f:c5:2f:fd:78:11:30:36:a3:05:0b:ab:0d:12:bf:61:
2f:cd:bc:74:5c:9c:3b:3f:16:65:e4:6f:6d:62:94:58:21:7f:
54:97:98:33:91:c0:12:97:d0:ca:a6:d7:a0:51:60:c7:5e:0d:
a7:04:07:62:31:a9:c6:fb:2f:31:b9:71:83:a2:f7:cd:7f:ec:
a2:ea:0e:99:21:59:81:d1:ab:84:ae:a1:fb:b0:de:88:0d:b0:
f7:89:10:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:46 2026 by rpki-client