Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AD4BBB0409011F18C024AEDCE1D38B0.roa
File: 5AD4BBB0409011F18C024AEDCE1D38B0.roa (raw, json)
Hash identifier: eUmJsyEqg1JV1VXK/xpCr+6Au0/hJtiItAvuG1/5IJk=
Subject key identifier: CD:B1:54:DE:0E:10:8D:11:14:13:92:68:12:16:AB:1D:9C:8D:57:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C76F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AD4BBB0409011F18C024AEDCE1D38B0.roa
Signing time: Sat 25 Apr 2026 10:20:17 +0000
ROA not before: Sat 25 Apr 2026 10:20:09 +0000
ROA not after: Mon 01 Jun 2026 10:20:09 +0000
asID: 44559
IP address blocks: 154.203.224.0/24 maxlen: 24
154.203.230.0/24 maxlen: 24
154.203.231.0/24 maxlen: 24
154.205.234.0/24 maxlen: 24
154.205.235.0/24 maxlen: 24
154.205.236.0/24 maxlen: 24
154.205.237.0/24 maxlen: 24
154.205.238.0/24 maxlen: 24
154.205.239.0/24 maxlen: 24
154.205.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116591 (0x1c76f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 25 10:20:09 2026 GMT
Not After : Jun 1 10:20:09 2026 GMT
Subject: CN=69ec9561-0a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c9:3c:1f:f9:8a:5c:57:46:6b:9a:8f:40:60:
86:ae:81:e4:39:db:b0:5c:9b:cc:fb:40:65:a9:70:
d5:f3:cc:8c:1d:48:98:51:61:af:d6:b0:15:53:1b:
d5:af:ed:a2:66:db:41:d9:2d:5f:b7:1a:3a:be:9e:
7d:3f:27:5a:cf:24:da:e8:a7:a2:f3:79:db:3e:12:
80:48:11:44:93:7b:80:69:79:59:17:c3:3a:75:6d:
9a:fa:32:6e:5f:ab:99:df:3d:40:17:90:51:ea:17:
a0:ee:23:f3:d0:70:87:76:e7:13:d5:06:98:ad:47:
e4:c8:8c:f6:ba:5e:2f:36:ea:e2:59:1d:ff:af:4c:
f1:66:f4:45:f7:b8:f4:c8:ab:f2:be:11:ca:e5:1f:
8e:27:c4:af:44:8e:70:f7:c9:1e:cc:da:ee:dc:6a:
bd:78:de:33:33:98:a6:3c:48:c4:1d:e3:79:03:46:
86:8f:2f:6a:b1:47:7c:c9:c7:af:57:5e:d8:77:df:
58:23:b0:08:48:06:bf:0f:e0:90:0c:f4:50:f9:04:
c9:7b:d9:a3:f9:2a:ed:17:7b:16:c6:98:d0:61:bb:
61:3b:c7:42:b6:d7:79:71:7d:41:dd:2c:b5:8e:ac:
3c:eb:0d:1e:a4:d2:58:8e:e6:ab:f0:da:dc:87:89:
7e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B1:54:DE:0E:10:8D:11:14:13:92:68:12:16:AB:1D:9C:8D:57:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AD4BBB0409011F18C024AEDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.224.0/24
154.203.230.0/23
154.205.234.0-154.205.240.255
Signature Algorithm: sha256WithRSAEncryption
91:2a:0c:d2:f6:c7:62:cf:35:d6:ea:13:db:5c:5b:0b:5f:f0:
fa:b1:e8:6d:4b:c1:b6:d7:bb:dd:85:8a:13:dc:9e:0c:a0:2b:
99:d4:b3:b6:69:99:f2:81:33:1c:bb:72:04:10:60:f5:40:ff:
07:42:e9:09:f5:d1:0d:72:f7:34:55:c3:2d:e9:4d:f4:4e:48:
86:81:99:c2:b0:ef:04:c3:65:78:2c:f5:34:0a:12:ab:14:b2:
6e:ab:2a:4c:ac:1c:a4:aa:b0:c2:f2:aa:ae:de:e5:77:5f:6e:
1b:1f:84:a9:30:ce:89:26:93:67:76:c5:e7:6e:df:71:d4:ba:
6a:02:1e:da:70:0b:aa:2d:cc:72:1f:d2:08:32:dd:07:66:90:
64:48:f8:d0:34:20:c8:68:49:f2:9a:a2:76:1e:71:7a:ea:76:
fc:2d:03:36:06:7e:18:89:23:27:49:ff:45:2a:e1:42:cb:81:
9a:9b:e9:f2:90:ac:76:d4:fe:fe:3a:60:f4:54:db:d3:3f:0d:
95:93:8f:2d:70:d4:ec:56:83:83:73:a5:93:b6:3f:3f:32:96:
a9:6d:e8:ef:f6:39:71:ea:ce:f3:d4:aa:6b:cc:f4:bb:55:19:
40:1b:74:e2:ce:64:45:0d:ba:0d:72:51:f2:aa:ff:03:ef:1e:
2b:eb:13:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:00:42 2026 by rpki-client