Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83C4F6903FAD11F1BF46B704CF1D38B0.roa
File: 83C4F6903FAD11F1BF46B704CF1D38B0.roa (raw, json)
Hash identifier: MshIJVHq9em4z+AwQL+AomuOxmWiSRc1GDCNdyh2nhw=
Subject key identifier: F4:CD:D3:B9:EE:F2:65:64:AB:70:14:41:6D:83:0D:40:CA:1F:A2:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C6F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83C4F6903FAD11F1BF46B704CF1D38B0.roa
Signing time: Fri 24 Apr 2026 07:16:30 +0000
ROA not before: Fri 24 Apr 2026 07:16:25 +0000
ROA not after: Sat 30 May 2026 07:16:25 +0000
asID: 395886
IP address blocks: 154.201.72.0/21 maxlen: 24
154.201.88.0/22 maxlen: 24
154.201.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116468 (0x1c6f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 07:16:25 2026 GMT
Not After : May 30 07:16:25 2026 GMT
Subject: CN=69eb18ce-bbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3c:9b:f3:06:0f:4a:0e:af:43:fd:7b:fd:de:
12:d0:51:d8:11:76:19:d7:57:13:38:d9:dc:67:a6:
d1:d5:41:cf:67:30:7f:d3:1a:87:72:d7:5a:93:f1:
ca:54:bc:fb:41:cb:54:ff:d5:31:78:c2:c8:88:b5:
e0:7c:90:c3:a6:0f:95:19:ea:f6:e4:af:c0:88:27:
79:68:2c:e2:8a:8a:f4:e1:c4:45:5e:a5:2e:d0:3f:
43:30:f2:87:8b:5b:b8:41:29:4a:39:15:0f:5f:c9:
23:39:9e:36:47:87:35:ef:ac:d7:a9:aa:5c:7b:eb:
21:81:96:fd:57:ab:c9:10:90:11:0a:15:97:d3:c7:
36:2a:0f:f4:4e:48:01:06:b4:09:7e:91:70:b8:a9:
c2:ef:f0:84:0a:a7:2a:92:87:1f:4b:6d:cb:f5:8a:
f7:15:73:e3:08:a2:f3:f9:91:5b:47:7e:55:bd:6e:
2b:e8:20:d0:96:d1:c3:c5:f0:33:04:6a:c9:aa:60:
db:de:6f:f8:d6:92:ba:e3:e3:2c:e2:7e:cb:67:ff:
10:c2:3e:47:f3:8f:35:00:1f:cd:07:d3:e7:fe:8f:
ff:30:1c:22:17:3b:ea:ee:26:57:4e:fe:62:20:3d:
41:fe:71:58:6e:73:27:ae:b5:14:77:bd:be:e4:62:
b2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CD:D3:B9:EE:F2:65:64:AB:70:14:41:6D:83:0D:40:CA:1F:A2:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83C4F6903FAD11F1BF46B704CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.72.0/21
154.201.88.0-154.201.93.255
Signature Algorithm: sha256WithRSAEncryption
16:9c:68:ec:7d:6c:0c:fa:84:44:7c:74:35:7b:4a:b8:a7:58:
ed:33:2b:65:b2:06:09:4e:ed:3a:52:f6:2c:e2:ae:47:b2:59:
f0:b8:b7:18:ea:44:07:f1:db:39:7b:b3:6c:f7:da:19:97:25:
72:7a:54:5c:de:27:ca:ff:fe:52:6d:23:16:dd:17:a9:85:08:
5f:78:1f:10:16:2a:0f:1e:5b:bf:95:12:c9:0f:44:e0:09:f6:
41:61:92:70:e1:58:e2:e6:1c:bc:82:0b:f9:df:98:84:0a:35:
02:d7:32:9f:6b:9b:93:23:de:d6:f1:d4:17:4c:31:ef:5a:c2:
e6:52:77:65:26:b9:33:bb:de:65:c2:c4:55:cc:c3:90:dc:69:
9b:c8:c7:4b:67:1f:3f:24:42:66:17:a7:f8:3e:5a:fd:62:e3:
28:c6:38:df:80:5f:0c:d4:ab:2f:bd:5c:1b:30:40:cc:52:11:
a7:e5:66:4f:37:1c:80:52:e5:21:f4:12:4d:f4:a0:48:4c:7f:
ae:1e:d8:38:6a:64:06:de:5b:3c:b7:8b:66:79:f9:fe:19:9d:
2a:9b:18:58:df:e9:b6:1f:ab:1f:cd:6b:e7:e0:46:cb:5e:b0:
36:0b:b6:c9:f3:6b:69:16:c4:bb:89:55:a1:c2:40:2e:4e:53:
1a:78:56:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:00:45 2026 by rpki-client