Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/751A263A3FB011F1A9F62515CF1D38B0.roa
File: 751A263A3FB011F1A9F62515CF1D38B0.roa (raw, json)
Hash identifier: n7xjZJ+q4ImfwpUQjaphS/DvnSpMWyIEMyAivyaxa0w=
Subject key identifier: 2B:E8:AC:44:D9:08:F8:0F:F3:99:F2:28:20:3E:22:5C:74:B7:CE:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C703
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/751A263A3FB011F1A9F62515CF1D38B0.roa
Signing time: Fri 24 Apr 2026 07:37:34 +0000
ROA not before: Fri 24 Apr 2026 07:37:28 +0000
ROA not after: Mon 04 May 2026 07:37:28 +0000
asID: 139880
IP address blocks: 154.209.160.0/19 maxlen: 24
154.214.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 29 Apr 2026 00:07:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116483 (0x1c703)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 07:37:28 2026 GMT
Not After : May 4 07:37:28 2026 GMT
Subject: CN=69eb1dbe-bb6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:c9:63:ff:cf:ab:c0:02:27:15:6e:34:d3:
2d:78:18:89:ce:98:07:27:3b:4b:fb:67:c2:47:5a:
b3:aa:d8:a0:6a:90:b1:1e:9b:09:91:5f:95:c9:29:
f3:05:08:c7:d2:f9:6a:c0:bd:f6:8d:f3:df:67:e7:
40:e9:b5:1c:e2:e9:66:50:df:8e:e3:ef:61:6e:24:
eb:74:3a:e1:4a:fa:94:6d:a2:63:a0:ae:20:88:1f:
7d:f4:ae:d3:53:94:51:65:f2:6e:57:47:8d:0b:84:
9f:18:c2:70:6d:fa:bc:4f:55:33:d3:04:a9:a7:cf:
39:49:43:4e:9d:e9:63:83:e5:bf:40:f9:d3:19:fe:
c3:19:38:7e:48:e8:f3:4d:4c:a3:9b:87:4c:da:dc:
6d:8a:6d:dc:47:e9:c5:45:b1:05:56:78:dd:40:bc:
a4:37:3b:e5:a6:83:ac:10:0f:8a:45:a7:22:57:0d:
de:65:66:f6:1c:8e:7d:0f:2f:dd:a0:20:17:17:8e:
b4:16:2a:6e:6c:be:42:b3:b5:ef:fb:cd:17:72:43:
05:cd:75:a6:a9:33:13:d9:48:b7:31:71:af:ab:9c:
9a:d8:31:6e:99:19:82:2d:88:dd:40:79:d7:f3:d6:
c4:50:5f:c4:b9:56:a1:04:ef:e4:8f:91:2a:88:d0:
53:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E8:AC:44:D9:08:F8:0F:F3:99:F2:28:20:3E:22:5C:74:B7:CE:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/751A263A3FB011F1A9F62515CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.160.0/19
154.214.64.0/18
Signature Algorithm: sha256WithRSAEncryption
42:a0:45:09:f0:58:3c:55:a9:18:ec:d8:73:59:11:fe:9b:44:
35:cc:16:44:82:c1:1c:a9:5a:47:93:5c:52:ec:2d:0d:9e:13:
92:d2:17:db:52:9c:57:04:a2:8c:c1:1c:4a:e2:47:bd:7b:87:
66:e2:2f:82:6d:63:88:37:da:3a:e1:91:f9:78:b4:3c:0d:ad:
f4:d6:2f:b5:79:55:26:05:12:b3:a0:c2:01:83:56:18:a9:42:
64:a2:79:07:50:6c:55:45:4d:94:51:3f:94:9e:d6:91:21:13:
8d:40:53:c2:f5:90:dd:0f:b3:56:03:58:d5:de:b3:32:c4:a4:
d1:71:b5:c3:6e:92:cd:c0:cf:cc:82:44:d7:5c:80:f6:9a:a2:
64:e3:89:f3:aa:5e:6a:7d:1e:eb:3f:7b:c7:0f:a6:de:db:f4:
84:5c:b2:55:f6:d1:11:2b:2e:99:11:d8:c9:ff:b5:86:34:bf:
94:28:20:3e:e3:5a:48:c7:52:6a:6c:e4:8f:1f:34:6c:48:e2:
f7:23:1e:e2:3c:73:51:7c:b1:6b:4f:66:14:c6:a0:eb:98:eb:
b4:70:f7:1c:18:8c:2c:e7:67:cb:13:d1:ae:7d:5c:fb:d7:34:
70:5a:49:7c:7e:c5:52:2c:c7:de:86:a4:f6:50:51:0b:80:0d:
3e:70:1e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:34:18 2026 by rpki-client