Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59762DE23FCA11F18BA2B2B4CE1D38B0.roa
File: 59762DE23FCA11F18BA2B2B4CE1D38B0.roa (raw, json)
Hash identifier: sTd4KkY5H4to4x5dNBx3GpttDI3RZL5sswRuLO1Q+xE=
Subject key identifier: CD:BF:C7:CA:39:FC:0F:69:B6:77:AD:E5:AE:B5:02:EE:EC:59:52:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C744
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59762DE23FCA11F18BA2B2B4CE1D38B0.roa
Signing time: Fri 24 Apr 2026 10:42:54 +0000
ROA not before: Fri 24 Apr 2026 10:42:50 +0000
ROA not after: Sun 31 May 2026 10:42:50 +0000
asID: 62240
IP address blocks: 154.196.45.0/24 maxlen: 24
154.196.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116548 (0x1c744)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 10:42:50 2026 GMT
Not After : May 31 10:42:50 2026 GMT
Subject: CN=69eb492e-fd8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0b:98:9f:88:84:1e:fb:87:41:54:e1:1b:b4:
1f:46:fc:77:17:67:95:27:db:f4:0e:03:76:e8:ca:
5b:93:df:78:a3:22:6e:49:41:29:86:bd:55:c2:c1:
9b:e1:3f:95:cb:6c:c1:95:fb:c0:3e:df:50:0d:b3:
3b:05:0c:bd:86:6c:34:12:f3:13:3f:79:e1:cd:b6:
c9:23:e4:6a:b9:b7:36:16:56:82:4d:90:be:24:4e:
ba:35:bf:2d:0e:d5:93:75:0d:c4:29:16:24:d0:9c:
9e:25:39:67:66:0e:d0:17:53:92:51:33:49:a0:3c:
d9:c7:38:58:45:6a:94:1d:b2:f8:29:78:c4:5d:57:
ce:09:3d:d1:48:9c:ef:23:83:83:cd:ea:b2:d5:a2:
ae:94:c0:59:2d:a6:61:3f:7c:53:a1:58:a9:c2:86:
d6:0f:b3:b7:f1:7e:b5:a8:60:52:cf:bd:22:f9:b9:
c2:15:3a:97:36:f3:b8:54:02:a4:f6:31:45:62:c1:
bd:fa:41:80:cf:d4:ac:0f:ee:db:17:5c:11:57:55:
dc:02:aa:cd:fd:7c:f9:e1:53:aa:d6:2d:d5:b8:e7:
3f:24:be:21:ea:e5:15:90:5a:ee:28:22:40:e7:68:
37:d9:87:02:f1:97:cb:c6:d2:6a:13:08:a0:86:d2:
bd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BF:C7:CA:39:FC:0F:69:B6:77:AD:E5:AE:B5:02:EE:EC:59:52:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59762DE23FCA11F18BA2B2B4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.45.0-154.196.46.255
Signature Algorithm: sha256WithRSAEncryption
87:52:9c:d6:7d:06:bd:55:b8:05:6d:42:05:65:4f:7e:26:3d:
b0:0e:e1:6f:6f:ad:67:27:4e:20:d2:d2:ef:e0:dc:7f:d7:13:
f6:85:76:04:a1:0b:d3:67:fd:1b:54:31:83:85:9f:db:f5:79:
54:12:c9:3d:10:d9:cc:49:bc:bb:62:1b:ae:4d:64:96:6c:8a:
04:53:c3:84:a7:4b:3f:fe:04:62:66:13:1c:bd:0b:e8:98:b4:
e0:68:09:16:60:4a:6c:8c:d6:77:7b:96:24:7d:bd:ea:ea:04:
f8:fd:a5:ce:a0:e8:16:22:0e:44:e0:19:f4:00:ec:44:d5:2d:
1a:2c:80:dc:0a:16:28:bb:c5:71:c5:d4:2a:c2:bb:9d:49:ba:
5e:20:92:66:d0:25:84:f1:20:f4:30:35:85:3d:d6:04:30:3c:
f1:77:a6:b0:07:6e:42:53:58:1d:60:83:26:78:fd:8c:6b:b8:
5e:52:63:8e:35:70:f5:77:59:6c:40:b4:a6:80:e3:9f:86:25:
af:be:2a:9f:a7:bb:d8:8f:3b:81:d1:e1:99:14:b9:4c:60:1b:
72:b3:e1:fe:67:5d:64:58:55:ac:35:40:94:07:8a:ad:f5:40:
3f:10:63:9d:cc:41:70:70:c4:f6:8b:e4:d3:8b:b5:b4:7f:0a:
a7:63:9f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:34 2026 by rpki-client