Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82CB2E0A3C9A11F1BAD9391BCF1D38B0.roa
File: 82CB2E0A3C9A11F1BAD9391BCF1D38B0.roa (raw, json)
Hash identifier: y4ooi/pJSOEkmalFWFCe9ixBsj0nHOSTRDL+D8l/8Ag=
Subject key identifier: 82:84:E5:4B:47:3E:08:26:50:67:8E:33:A5:0E:39:73:71:B2:62:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C62C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82CB2E0A3C9A11F1BAD9391BCF1D38B0.roa
Signing time: Mon 20 Apr 2026 09:22:54 +0000
ROA not before: Mon 20 Apr 2026 09:22:50 +0000
ROA not after: Wed 27 May 2026 09:22:50 +0000
asID: 63139
IP address blocks: 154.194.68.0/24 maxlen: 24
154.203.160.0/24 maxlen: 24
154.203.161.0/24 maxlen: 24
154.203.162.0/24 maxlen: 24
154.203.163.0/24 maxlen: 24
154.203.164.0/24 maxlen: 24
154.203.165.0/24 maxlen: 24
154.203.166.0/24 maxlen: 24
154.203.167.0/24 maxlen: 24
154.203.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116268 (0x1c62c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 20 09:22:50 2026 GMT
Not After : May 27 09:22:50 2026 GMT
Subject: CN=69e5f06e-b434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0c:25:cb:e4:7e:2a:f4:27:4f:55:48:4e:39:
56:c3:10:86:18:f4:49:80:0b:4a:c9:e6:2b:fd:45:
14:34:51:83:1f:80:f1:e6:05:b2:f8:4a:74:a9:49:
18:c7:2a:bf:18:84:bf:e5:49:23:8a:61:2e:2e:6d:
0a:fe:6b:35:0a:62:83:5c:f9:0b:a4:3d:3d:c8:9f:
0d:ae:67:ac:b1:5a:40:06:1a:29:35:fb:fe:db:77:
df:bd:ea:37:70:26:b8:57:3c:ce:15:53:d9:e1:90:
b0:04:9f:29:cd:c3:71:ce:e9:33:61:5f:b0:c3:b5:
5f:61:66:b1:54:3e:c6:fc:29:00:d1:f3:43:d9:e4:
9d:5b:f7:11:a7:2c:94:86:c1:52:6a:46:e2:b1:30:
58:98:31:99:09:25:ad:85:72:85:81:97:bd:70:0c:
09:78:8b:f7:17:a6:16:0b:da:05:d7:34:03:9f:ae:
cd:f7:40:b3:b3:71:90:62:7e:3b:2a:3f:17:b5:20:
0a:16:9a:eb:b7:f9:e3:81:49:cd:c9:2e:09:b5:5d:
1f:2a:ad:32:83:28:e6:70:f7:95:60:64:93:40:08:
37:ea:bb:54:60:b2:9c:40:49:de:f4:3b:f2:d8:03:
f1:b5:d9:1d:b2:7d:43:1a:d8:f5:c3:0a:1d:d7:cd:
b3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:84:E5:4B:47:3E:08:26:50:67:8E:33:A5:0E:39:73:71:B2:62:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82CB2E0A3C9A11F1BAD9391BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.68.0/24
154.203.160.0-154.203.168.255
Signature Algorithm: sha256WithRSAEncryption
d7:ab:6e:58:43:a0:2a:2b:bd:f4:4c:62:e1:04:ad:69:dd:16:
1a:4b:38:dc:c0:6f:17:dd:9d:56:5d:6b:e9:bf:73:54:e9:de:
f8:2f:88:46:d9:95:5f:ff:fb:39:aa:42:22:ab:68:44:50:6c:
84:35:2a:3a:86:21:dd:fb:09:63:51:31:8e:a4:79:8e:cf:d7:
c5:1d:ca:08:21:f8:6d:76:ad:ef:1f:ea:93:ce:bd:11:e7:04:
30:ce:02:5a:50:20:a0:6e:3b:0e:77:50:f6:94:09:aa:7f:12:
18:6c:4e:52:ef:61:b9:00:c7:61:5f:aa:62:07:7e:d7:d0:f2:
c9:9b:84:75:79:ef:f6:25:03:51:c4:56:8b:01:a9:ca:f5:3d:
0d:9e:cc:14:56:84:25:39:3b:b6:db:ec:f5:1e:51:32:17:40:
08:6f:e5:fc:e2:33:db:78:5a:cf:31:06:d1:d0:8b:7a:d0:8b:
64:f2:76:b9:c9:12:c7:a7:51:18:ce:48:1a:29:0c:c9:a0:9c:
8a:ee:f4:78:bb:e1:ab:29:0d:59:fa:8b:c5:cc:89:78:5f:d0:
fb:6d:c6:7f:eb:e9:ed:56:ee:cb:e0:e1:db:d4:a8:68:8c:d0:
96:08:8a:df:5b:37:df:f4:77:55:16:dd:77:ca:d6:15:37:c7:
e3:68:00:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:45 2026 by rpki-client