Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D5E99D242CF11F1B4B22EA3CE1D38B0.roa
File: 5D5E99D242CF11F1B4B22EA3CE1D38B0.roa (raw, json)
Hash identifier: +Vv5ikTpMC+zFgVew3EbY4HxKwwJLkllz53TmktOkHc=
Subject key identifier: CE:C9:00:AB:E9:F7:5A:F1:32:E3:A3:CA:DB:2A:6A:82:0A:95:AD:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C7A1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D5E99D242CF11F1B4B22EA3CE1D38B0.roa
Signing time: Tue 28 Apr 2026 06:56:22 +0000
ROA not before: Tue 28 Apr 2026 06:56:17 +0000
ROA not after: Thu 04 Jun 2026 06:56:17 +0000
asID: 199707
IP address blocks: 154.90.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116641 (0x1c7a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 06:56:17 2026 GMT
Not After : Jun 4 06:56:17 2026 GMT
Subject: CN=69f05a16-7c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e4:f3:ff:d0:d9:90:d3:73:09:b9:dd:2f:47:
59:1d:78:b8:41:47:79:83:3a:5c:67:06:86:d0:5f:
59:d2:56:07:f8:8a:be:1d:bc:c5:16:b3:f8:af:25:
61:ad:0c:63:07:1e:74:75:55:6f:61:d0:37:75:c4:
91:0f:41:af:8f:0c:84:24:2c:c5:0a:18:90:31:8f:
f0:82:68:6b:e2:01:83:9d:ab:71:fa:db:ae:d8:60:
8c:31:e1:94:c8:94:ea:1c:81:73:96:fa:25:5b:36:
dd:e9:36:a9:2c:c1:7b:33:17:85:7b:97:ad:ec:ed:
c9:7b:96:9a:4d:82:e3:8d:97:6d:82:a6:aa:e5:95:
55:35:33:ed:66:f2:a2:e0:ae:5e:c0:09:bb:f1:e2:
d6:24:1d:d7:b0:a8:21:ce:0f:71:d5:18:ab:17:cb:
19:66:4e:1e:80:bd:cb:02:17:a2:08:23:19:ca:e3:
16:c4:57:a7:fe:54:16:19:8d:4a:5f:f9:55:50:87:
7b:42:6f:f9:f4:af:99:35:7b:6c:a5:cd:a3:a1:74:
a1:fa:e9:bf:b9:75:cd:7c:d6:bd:21:fe:4a:1e:17:
e1:38:52:c8:4e:02:b9:94:2c:37:eb:de:74:91:ea:
29:0f:2d:3e:6e:58:42:71:a0:bf:1c:2a:ee:bf:f7:
8a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C9:00:AB:E9:F7:5A:F1:32:E3:A3:CA:DB:2A:6A:82:0A:95:AD:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D5E99D242CF11F1B4B22EA3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.66.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:0d:f4:d1:94:82:5a:3f:c0:dc:69:8d:1a:60:d6:bb:59:39:
85:29:6a:a5:2c:0d:f6:cd:13:c4:17:b1:33:d1:dd:08:77:c9:
7c:93:c9:e2:1b:91:09:2c:06:2e:8d:a3:df:9f:c1:4c:ea:84:
64:53:a8:76:f3:ea:3a:d7:72:be:59:52:73:96:38:8a:20:e3:
ec:fd:a3:07:b7:c0:28:73:88:54:b2:3a:b3:54:57:dd:cf:e9:
87:ad:e7:17:fb:7b:09:1b:2b:bd:45:83:c5:79:f8:30:7e:ed:
be:3e:72:a6:49:66:3f:4c:82:17:94:0a:57:20:47:c3:b2:af:
29:80:46:c7:f1:03:95:d6:64:b9:3f:e2:96:df:ac:f6:77:2f:
7d:b0:ba:a7:39:a3:7a:45:f1:c4:fc:f1:c4:00:ea:75:48:61:
e1:a0:ab:56:44:d3:31:3d:a4:11:85:ab:bc:b5:13:c7:da:f7:
55:73:95:5d:7f:da:80:72:b8:46:01:82:79:e8:75:a3:f7:81:
f0:12:52:f1:6a:3c:2b:36:df:2f:5b:b3:f9:47:b7:9e:b8:52:
45:3d:65:8a:5e:de:38:01:9b:11:76:95:23:55:ca:a2:6d:41:
a6:78:7e:d2:00:7c:f0:31:53:20:23:74:41:06:f3:ec:ad:48:
70:85:4d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:58 2026 by rpki-client