Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F3CC6C8444311F1A8BF54ECCE1D38B0.roa
File: 5F3CC6C8444311F1A8BF54ECCE1D38B0.roa (raw, json)
Hash identifier: x4qJgQB8i3YEbpJ8uiN7X8kJ3mRgoYSe18JxbRIjBmw=
Subject key identifier: EB:17:F5:F9:B6:BB:E5:AA:67:2D:3C:0D:38:63:80:F8:F5:5E:E2:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C7EF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F3CC6C8444311F1A8BF54ECCE1D38B0.roa
Signing time: Thu 30 Apr 2026 03:19:18 +0000
ROA not before: Thu 30 Apr 2026 03:19:12 +0000
ROA not after: Sat 30 May 2026 03:19:12 +0000
asID: 401783
IP address blocks: 154.90.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116719 (0x1c7ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 03:19:12 2026 GMT
Not After : May 30 03:19:12 2026 GMT
Subject: CN=69f2ca36-9488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d7:05:9f:d5:87:52:43:9c:85:c2:15:82:56:
22:10:6c:39:95:d4:6b:3f:b9:e4:51:ab:53:a6:eb:
e6:11:34:36:f6:fc:b2:74:dd:45:3f:38:0a:57:ed:
8c:61:9a:3c:ca:d6:ef:a6:38:70:ce:8a:91:11:75:
b6:0c:65:6c:1f:ae:69:7d:de:55:33:fb:d2:08:fc:
55:d0:da:f5:20:91:53:c6:a4:58:0a:5f:30:49:aa:
52:31:dc:75:30:21:b6:d4:3c:3b:f0:07:c1:f5:a9:
47:2a:76:03:56:17:ab:48:88:cb:3d:05:08:f8:9c:
a1:ba:d1:6d:e8:f0:31:f9:e7:34:e8:16:88:6f:36:
cf:7b:54:3e:b9:7d:ed:a1:21:7e:53:f7:03:7d:5d:
3b:a9:c5:fa:75:69:25:a4:3d:a0:37:05:c9:30:a1:
1e:ae:b0:7c:54:4c:73:2e:2e:72:08:72:71:c5:1e:
94:ab:e3:ab:96:28:06:c3:be:75:67:1f:17:54:ce:
07:1f:65:5c:4a:a7:2a:d6:36:d4:b6:8e:5d:7f:bf:
af:fb:39:0b:4c:9d:2e:a2:f3:7b:21:5d:98:3b:2e:
26:df:5e:e1:22:9c:56:d5:56:14:e6:54:d4:41:0a:
92:2b:bb:81:25:25:c2:4a:d8:d5:15:ee:b2:93:e4:
fe:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:17:F5:F9:B6:BB:E5:AA:67:2D:3C:0D:38:63:80:F8:F5:5E:E2:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F3CC6C8444311F1A8BF54ECCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.67.0/24
Signature Algorithm: sha256WithRSAEncryption
83:40:47:47:ac:a3:59:e2:02:8a:f5:d5:d2:e7:03:02:9c:6c:
9e:98:8d:be:9e:c0:a6:09:83:cb:f1:aa:00:47:9a:4e:d2:80:
e5:09:17:17:a9:5b:0f:61:d1:14:b7:70:d8:43:34:bf:02:e6:
26:68:c4:d9:00:5e:d0:f1:03:0c:4a:02:a5:81:68:a9:de:04:
e7:4a:77:ff:58:80:b1:91:55:36:1d:42:82:48:c7:60:53:bc:
bf:bf:54:81:eb:f4:55:e0:66:44:9b:10:f5:6e:82:90:f0:98:
1e:20:d6:0c:a0:3a:bd:46:33:cb:94:f3:78:f1:1e:e1:7d:b8:
f1:7d:47:0f:1f:ed:a1:f9:56:5e:3b:87:27:28:2e:54:03:ca:
7d:d3:4e:ca:83:ef:0e:8c:72:da:e7:6d:2d:df:0c:10:3a:30:
14:c4:43:26:76:6b:07:b1:aa:7d:d9:52:df:e0:26:72:25:41:
c2:af:a7:b5:1c:05:38:9b:3f:27:38:bf:0d:1f:7a:36:9b:fb:
23:82:1b:02:0d:58:73:95:ad:67:45:76:43:c4:89:43:32:bd:
91:9e:ec:e6:a1:60:b9:9f:c5:e6:00:01:9d:95:57:82:15:11:
aa:5a:96:a3:bd:37:0b:1e:c0:37:23:43:05:95:c4:14:d0:e7:
58:88:f3:38
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcfvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDMwMDMxOTEyWhcNMjYwNTMwMDMxOTEyWjAYMRYw
FAYDVQQDEw02OWYyY2EzNi05NDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp9cFn9WHUkOchcIVglYiEGw5ldRrP7nkUatTpuvmETQ29vyydN1FPzgK
V+2MYZo8ytbvpjhwzoqREXW2DGVsH65pfd5VM/vSCPxV0Nr1IJFTxqRYCl8wSapS
Mdx1MCG21Dw78AfB9alHKnYDVherSIjLPQUI+JyhutFt6PAx+ec06BaIbzbPe1Q+
uX3toSF+U/cDfV07qcX6dWklpD2gNwXJMKEerrB8VExzLi5yCHJxxR6Uq+OrligG
w751Zx8XVM4HH2VcSqcq1jbUto5df7+v+zkLTJ0uovN7IV2YOy4m317hIpxW1VYU
5lTUQQqSK7uBJSXCStjVFe6yk+T+TwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOsX
9fm2u+WqZy08DThjgPj1XuJqMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81RjNDQzZDODQ0NDMxMUYxQThCRjU0RUNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlpDMA0GCSqGSIb3DQEB
CwUAA4IBAQCDQEdHrKNZ4gKK9dXS5wMCnGyemI2+nsCmCYPL8aoAR5pO0oDlCRcX
qVsPYdEUt3DYQzS/AuYmaMTZAF7Q8QMMSgKlgWip3gTnSnf/WICxkVU2HUKCSMdg
U7y/v1SB6/RV4GZEmxD1boKQ8JgeINYMoDq9RjPLlPN48R7hfbjxfUcPH+2h+VZe
O4cnKC5UA8p9007Kg+8OjHLa520t3wwQOjAUxEMmdmsHsap92VLf4CZyJUHCr6e1
HAU4mz8nOL8NH3o2m/sjghsCDVhzla1nRXZDxIlDMr2RnuzmoWC5n8XmAAGdlVeC
FRGqWpajvTcLHsA3I0MFlcQU0OdYiPM4
-----END CERTIFICATE-----
Generated at Sat May 9 11:00:43 2026 by rpki-client