Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D4C1E384E8C11F1B23C1B04CF1D38B0.roa
File: 5D4C1E384E8C11F1B23C1B04CF1D38B0.roa (raw, json)
Hash identifier: ZHPtme0hVPLNbJ00snGuD6Kn0MyQX10y1x7WRGILjmE=
Subject key identifier: 4C:3E:5E:22:74:1A:BA:CA:13:BF:CC:F7:A8:B9:FB:AF:2D:AA:24:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CB57
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D4C1E384E8C11F1B23C1B04CF1D38B0.roa
Signing time: Wed 13 May 2026 05:27:00 +0000
ROA not before: Wed 13 May 2026 05:26:55 +0000
ROA not after: Tue 16 Jun 2026 05:26:55 +0000
asID: 22773
IP address blocks: 154.85.22.0/24 maxlen: 24
154.85.23.0/24 maxlen: 24
154.85.104.0/24 maxlen: 24
154.85.105.0/24 maxlen: 24
154.85.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 May 2026 08:26:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117591 (0x1cb57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 13 05:26:55 2026 GMT
Not After : Jun 16 05:26:55 2026 GMT
Subject: CN=6a040ba3-6ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:80:77:57:37:3d:56:a9:f6:48:01:dd:c4:74:
d0:86:73:69:f9:7d:d9:27:2a:31:87:67:17:aa:12:
96:3a:59:6e:8f:a1:42:53:d6:b4:78:e8:04:4e:5f:
ff:36:3b:5a:1a:55:ee:a3:ba:13:3a:03:2e:ad:c8:
aa:4b:bc:d2:1a:61:44:e7:e6:fa:e9:81:e6:7c:bd:
d2:95:4e:2f:13:e6:f5:44:df:7c:08:00:ee:e6:7a:
f4:e9:50:88:37:77:eb:27:ea:7f:71:4d:00:df:6b:
96:62:a7:f7:ba:8e:9b:e3:0e:73:a5:42:ed:46:32:
ff:38:84:77:b2:5c:e6:44:90:54:ab:7d:27:bd:aa:
a6:36:05:0e:1c:0e:77:80:f9:a5:b6:c0:fe:f9:ff:
73:af:f0:3c:2b:84:8d:9c:05:0b:13:df:1e:e4:e5:
92:17:ef:c7:bd:0e:ab:38:59:01:a1:9f:0b:db:01:
ca:25:76:78:e0:e0:4d:f5:bd:6b:85:2d:22:4c:e2:
70:02:cb:3e:f3:13:13:3b:30:56:c0:2a:a6:b8:7e:
1f:a1:48:d8:03:39:9a:d9:4c:31:eb:5f:fc:e2:f2:
cb:63:6c:69:8c:46:76:5d:96:5c:bd:c7:04:7c:d3:
9e:a6:1b:89:87:29:dd:b6:0f:16:95:79:60:f9:cf:
b9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3E:5E:22:74:1A:BA:CA:13:BF:CC:F7:A8:B9:FB:AF:2D:AA:24:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D4C1E384E8C11F1B23C1B04CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.22.0/23
154.85.104.0-154.85.106.255
Signature Algorithm: sha256WithRSAEncryption
bb:4a:fd:84:2f:c7:c1:1e:3e:3c:73:41:d7:8d:fa:01:f4:e9:
a3:89:d8:cd:db:c9:ff:0e:fa:04:03:55:d5:e3:eb:cd:fc:56:
e3:c2:d4:bf:b0:fe:dd:0a:dc:41:7f:ef:44:c4:f2:11:eb:bb:
41:79:b4:3d:db:4a:f1:b6:a4:3c:69:e2:53:49:d7:dd:e9:93:
31:eb:94:38:ff:7f:f4:23:3a:33:47:74:63:2a:14:1a:de:41:
c0:69:b2:4b:f6:56:6c:12:37:c5:5e:53:9f:cc:24:82:82:6e:
44:e1:6b:03:51:a7:e2:33:59:e0:47:5f:7b:f5:84:9f:4e:34:
9e:76:96:d8:5f:d3:9f:4b:b3:31:54:7c:5f:27:a3:74:f4:87:
f5:fd:48:cd:bf:89:34:0d:45:f0:47:09:96:0a:1d:f9:66:f7:
73:7f:d8:b5:85:cc:93:02:73:9f:89:2d:02:dd:4c:ed:6d:03:
ea:18:21:66:08:d4:16:b3:4d:ca:f6:05:d3:24:aa:ec:57:87:
4b:b6:73:47:75:d4:43:a8:7c:7d:75:b3:5e:7a:b9:90:44:a0:
eb:71:67:3e:3b:7d:07:e5:a8:da:d7:10:b5:22:d3:46:fd:8e:
60:39:26:e4:2b:1a:ea:25:49:ba:d0:b6:b5:56:0a:c4:64:a6:
c2:3c:01:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 20 21:20:04 2026 by rpki-client