Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/835F0198409611F1A68FC311CF1D38B0.roa
File: 835F0198409611F1A68FC311CF1D38B0.roa (raw, json)
Hash identifier: RzQXY9evpotXvmrg0ZUBJnWPdn/j8eRlqGn9dQZF8jU=
Subject key identifier: CA:AF:C0:A5:F1:1A:50:1B:E1:74:0B:97:3D:8B:B9:4E:DD:F4:3B:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C77D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/835F0198409611F1A68FC311CF1D38B0.roa
Signing time: Sat 25 Apr 2026 11:04:22 +0000
ROA not before: Sat 25 Apr 2026 11:04:17 +0000
ROA not after: Thu 18 Jun 2026 11:04:17 +0000
asID: 20326
IP address blocks: 154.193.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116605 (0x1c77d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 25 11:04:17 2026 GMT
Not After : Jun 18 11:04:17 2026 GMT
Subject: CN=69ec9fb6-dd28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d9:fe:98:24:1b:76:48:18:3b:27:53:25:05:
07:d1:05:8a:b2:2f:e8:d8:9c:51:5d:4b:3d:0e:e3:
63:01:b3:be:13:c3:d9:e6:0f:e6:d7:d6:c9:f6:cf:
ca:f3:be:9b:65:13:90:ab:3c:4d:5b:5d:40:1b:57:
9a:73:51:1e:ba:4b:a2:81:c4:f0:57:7a:ad:67:57:
2d:01:b9:f1:b8:3b:a8:de:d4:67:78:4b:35:c9:8d:
3b:88:29:d3:ce:81:3c:d3:6b:81:f6:32:a0:89:ed:
f5:66:7a:11:92:25:43:2f:59:a5:a6:34:6a:88:85:
2d:20:8c:75:de:13:ec:5e:29:2a:af:e3:06:b5:df:
a1:e2:73:67:56:95:fd:b5:75:fa:25:4e:b0:d6:a8:
31:5e:71:fa:96:c3:cb:25:04:23:72:46:73:9b:ee:
68:22:64:8f:49:42:84:2c:55:7e:7d:f9:b2:bc:c9:
7f:47:4a:da:63:74:30:13:79:da:13:76:24:98:12:
2c:1f:8b:4d:eb:59:f2:bf:d1:00:7a:dd:03:4c:42:
bb:4f:68:2f:d1:4a:b9:69:18:2b:87:c6:23:e3:94:
08:b0:f1:b6:44:8b:f8:50:53:e0:19:66:9e:49:f4:
f9:52:6f:af:0d:4b:f4:a8:37:9c:8a:cd:d6:0a:c7:
be:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AF:C0:A5:F1:1A:50:1B:E1:74:0B:97:3D:8B:B9:4E:DD:F4:3B:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/835F0198409611F1A68FC311CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.130.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:8b:69:1f:13:1a:5f:52:85:24:cf:8f:2d:ca:b2:96:0c:28:
81:a8:ad:e7:58:0b:5e:90:5b:8f:1f:ed:52:b0:9e:3f:62:4b:
03:f2:e5:d0:89:1a:1f:59:ce:a3:7f:59:d3:e4:8b:1c:c0:4a:
f0:95:9a:f8:77:57:16:9c:11:8b:19:b3:a4:2d:9f:1f:03:76:
d2:ed:9a:54:f3:6e:5a:07:c9:2f:e9:8d:e9:a1:ef:10:41:d6:
21:26:76:78:10:0e:77:9c:6a:06:8b:a9:cd:07:87:47:89:f9:
f5:c7:2b:a1:80:44:22:c1:16:7c:a9:11:7e:32:b4:25:54:37:
19:77:0b:53:49:c8:0d:e0:9b:85:9f:e9:fc:bb:1f:01:36:45:
56:d0:7f:4e:27:d7:ea:35:3e:cf:13:55:9c:9d:5e:80:c4:ca:
e0:36:e7:f9:f2:f1:20:97:25:5d:03:d7:a5:35:d3:4f:a2:15:
8b:7d:23:c2:8c:39:c0:9a:79:9f:4a:2e:a4:ad:fb:56:98:37:
b0:4e:67:6c:4f:04:6f:5c:f4:9c:84:b1:fe:f6:d5:f3:b4:7e:
5d:9d:c2:dc:4d:53:bf:48:72:de:30:f2:f9:4a:21:75:f5:e3:
37:e2:b1:eb:d6:c7:af:62:7d:04:50:de:75:13:8e:bb:41:83:
5c:b5:4a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:06 2026 by rpki-client