Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/798318403FAF11F1A079F510CF1D38B0.roa
File: 798318403FAF11F1A079F510CF1D38B0.roa (raw, json)
Hash identifier: tDZEQ6NwDTi+tUA6RPC+5PQpmDKVf1Roxwpn0/2URxE=
Subject key identifier: 35:6E:C3:C8:06:04:EF:04:FD:3F:E7:13:30:8E:F2:66:B0:23:44:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C6FD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/798318403FAF11F1A079F510CF1D38B0.roa
Signing time: Fri 24 Apr 2026 07:30:32 +0000
ROA not before: Fri 24 Apr 2026 07:30:27 +0000
ROA not after: Sat 30 May 2026 07:30:27 +0000
asID: 8796
IP address blocks: 154.201.72.0/21 maxlen: 24
154.201.88.0/22 maxlen: 24
154.201.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116477 (0x1c6fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 07:30:27 2026 GMT
Not After : May 30 07:30:27 2026 GMT
Subject: CN=69eb1c18-f123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:07:33:52:45:90:64:67:48:07:9e:a6:d0:1d:
fc:ce:15:6f:ec:26:af:91:2c:27:52:da:03:0a:f5:
f3:e2:3d:b3:11:e6:52:7c:14:2c:b9:59:bb:53:4a:
85:3b:7f:b9:4a:69:cf:34:8c:fa:8f:b4:c3:48:77:
7f:40:bd:46:04:16:ba:0b:e0:3c:5a:97:c9:7f:65:
43:ba:f3:d5:cf:1a:ca:70:e8:6e:75:ed:a2:26:22:
b3:30:ce:8a:ab:77:3f:6f:bd:f0:9f:21:9c:16:51:
dc:26:d5:6e:eb:24:7f:a6:fb:c1:32:18:c4:1d:68:
47:b9:c2:11:27:75:9f:10:ec:10:6c:d2:0a:68:53:
58:0e:ca:a3:5f:7a:de:ec:89:5b:31:a9:89:4a:51:
49:69:13:d8:29:6f:4c:65:32:5c:77:03:d3:26:8b:
0d:d4:d7:36:84:fc:b2:14:48:88:e3:d9:b4:4c:24:
61:1e:03:dd:d7:8a:73:1d:60:39:c3:8c:a3:15:12:
6b:02:e3:81:5e:09:01:84:3b:30:b4:8d:78:6d:9b:
60:28:24:93:13:ef:5d:59:39:b4:e0:f1:20:20:f8:
47:98:4f:da:a5:b9:fc:01:07:b8:8d:66:58:d7:f6:
da:b8:f2:94:99:8e:15:f6:4f:df:81:b1:a5:12:54:
42:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6E:C3:C8:06:04:EF:04:FD:3F:E7:13:30:8E:F2:66:B0:23:44:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/798318403FAF11F1A079F510CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.72.0/21
154.201.88.0-154.201.93.255
Signature Algorithm: sha256WithRSAEncryption
0f:91:5b:12:3a:71:a0:eb:2b:a1:78:77:e1:aa:59:06:1c:69:
1a:26:e2:f0:5d:b6:c8:a4:58:b9:78:5d:b0:bb:55:c7:09:fc:
ab:8d:e6:a4:be:70:2f:1a:5c:9c:16:4b:58:52:d9:a6:3b:4d:
c7:49:fc:82:aa:d1:c6:44:0b:e7:00:ce:76:db:f6:ba:93:13:
8f:3f:06:97:9b:8d:b2:f6:4b:15:3b:73:fa:c7:54:2a:f1:9e:
60:1a:6b:96:d7:cf:75:1e:f6:a9:ff:ea:45:a9:7e:59:93:74:
37:83:1b:39:c2:c1:b9:bf:3d:7b:86:6b:b0:dc:9e:bd:6c:0e:
b8:ca:78:8a:ed:c0:3c:73:4a:78:73:fe:24:24:f4:73:3f:65:
61:59:95:2e:3a:6f:ff:2a:9e:d2:1b:95:53:85:77:76:1d:e2:
ba:1d:3a:92:3f:fc:d9:b8:e4:7c:00:70:15:6f:30:4e:1d:2d:
03:7b:cd:5d:50:bf:13:4e:93:33:28:5d:fe:a1:a4:e1:4d:99:
23:cd:4e:ee:9e:f3:08:11:53:28:4a:79:d8:03:76:de:f0:18:
9d:37:31:c3:49:c3:c3:42:fa:6b:85:fe:05:8a:d1:9c:eb:ef:
65:94:2f:5d:0c:77:23:eb:d6:2d:07:b6:48:b7:62:fc:7b:a9:
c5:16:0a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:05 2026 by rpki-client