Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53CB1BDE3FB411F1BA8FA2B0CE1D38B0.roa
File: 53CB1BDE3FB411F1BA8FA2B0CE1D38B0.roa (raw, json)
Hash identifier: 1oIa40hvj+sU4X+u0Yq/mu4+MY5NBVVcKQyoZ44v/xc=
Subject key identifier: A9:61:FF:EC:A1:58:2D:6C:8C:81:A1:7A:EB:73:79:C2:B4:F9:29:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C70D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53CB1BDE3FB411F1BA8FA2B0CE1D38B0.roa
Signing time: Fri 24 Apr 2026 08:05:16 +0000
ROA not before: Fri 24 Apr 2026 08:05:11 +0000
ROA not after: Sat 30 May 2026 08:05:11 +0000
asID: 137899
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116493 (0x1c70d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 08:05:11 2026 GMT
Not After : May 30 08:05:11 2026 GMT
Subject: CN=69eb243c-c4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8e:cf:fa:3f:93:68:aa:2e:67:0c:73:cb:f7:
43:2e:85:9b:d8:81:50:54:0d:48:a2:e2:4c:a2:e9:
08:ba:6d:f3:6b:49:23:0c:85:9a:a7:25:fd:ce:4f:
58:28:b5:00:6b:14:7c:ac:02:36:3e:3d:ae:4c:af:
fc:18:85:f3:0b:0d:95:fa:3f:7f:14:15:47:6d:41:
80:94:f7:da:20:1c:57:82:5c:18:e2:1a:5d:ee:aa:
8e:28:29:56:fd:1d:c8:ca:07:fe:f2:ab:25:4f:f8:
24:c9:75:a7:bf:a6:b1:22:63:3c:32:96:97:fa:b0:
c1:c5:d8:13:d0:35:8d:2c:77:3e:80:53:8f:4d:10:
5a:68:31:3b:5f:df:d3:14:b2:d6:60:61:6c:a5:3e:
d9:31:49:28:38:48:bb:ab:ef:f4:13:e1:73:14:51:
6f:73:a0:33:1e:d4:84:82:93:71:bb:73:2d:57:8f:
86:b9:f7:94:cc:a2:ac:a9:de:6e:80:12:65:5f:0a:
45:d7:2e:52:1d:a0:76:75:0a:ff:20:7b:78:24:30:
81:f0:8c:81:e7:b2:9e:d9:14:30:f9:f3:4c:8e:f2:
62:0f:64:39:51:ec:25:1e:eb:b6:20:60:7d:9a:8a:
65:1a:04:69:9f:dc:80:4c:e9:f0:1a:ae:2a:4f:11:
d9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:61:FF:EC:A1:58:2D:6C:8C:81:A1:7A:EB:73:79:C2:B4:F9:29:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53CB1BDE3FB411F1BA8FA2B0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
18:d0:36:4a:1b:2e:80:37:41:7a:a9:0b:0f:1f:81:a8:da:93:
88:c1:7b:4c:73:a7:a1:6a:97:27:04:42:9c:56:36:c1:6f:97:
75:75:6e:4c:a7:6e:e3:a7:f9:40:25:03:fc:d9:75:a8:bf:2c:
9c:48:7d:2d:fb:de:89:47:63:b2:94:67:af:48:9b:0f:b3:2b:
eb:cd:4b:47:fe:46:7d:32:6c:53:f2:04:d7:8e:c4:bf:c6:86:
6d:44:bf:50:ca:e6:f6:66:d8:9a:af:70:c6:87:6e:21:5d:85:
3f:3b:a3:b5:02:46:7b:e1:4d:80:23:92:4e:8d:95:a6:10:a2:
56:79:c0:ca:d4:f3:4a:8c:d2:ca:1f:83:73:e8:f4:43:56:2f:
8b:f8:ff:45:aa:29:6a:cf:f2:70:66:3d:86:24:47:82:b7:a4:
50:dc:32:c9:fd:5d:19:04:bd:fe:18:29:a5:8e:34:0b:e1:65:
c8:f9:55:cb:e0:49:5e:26:3e:4c:77:67:48:9e:24:3a:32:0c:
c7:46:e0:d3:01:05:da:b4:fa:83:98:42:e1:1e:8d:e5:28:42:
02:87:39:bc:4e:3a:3c:c1:ed:f6:47:27:6a:4c:00:f2:49:0f:
48:11:09:5e:dc:e1:cd:08:be:3e:91:8e:b8:4a:43:a8:ec:57:
7d:f0:1b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:31 2026 by rpki-client