Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/845526A2454D11F19869E3C5CE1D38B0.roa
File: 845526A2454D11F19869E3C5CE1D38B0.roa (raw, json)
Hash identifier: 1tiUF99nBUHsqxOHMDGNslyTHa2o4YTVPGIdrPlTZSQ=
Subject key identifier: D3:3F:F6:28:B5:4B:5E:91:B3:CB:61:31:56:31:A5:B7:08:72:AC:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C86F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/845526A2454D11F19869E3C5CE1D38B0.roa
Signing time: Fri 01 May 2026 11:04:26 +0000
ROA not before: Fri 01 May 2026 11:04:21 +0000
ROA not after: Fri 05 Jun 2026 11:04:21 +0000
asID: 199707
IP address blocks: 154.83.246.0/24 maxlen: 24
154.90.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116847 (0x1c86f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 11:04:21 2026 GMT
Not After : Jun 5 11:04:21 2026 GMT
Subject: CN=69f488ba-17c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:35:ae:6c:87:2c:f8:f6:90:90:e3:1e:c7:
f4:e3:d2:c6:e3:75:1b:d7:59:66:7d:9d:32:ef:c4:
af:9c:d1:88:14:cd:59:d8:dd:55:b7:ee:9a:7a:94:
00:61:ba:96:29:48:3a:ae:25:b0:67:ae:a2:9e:3f:
29:78:af:e7:3f:d9:16:8f:1d:95:c4:f3:8a:c5:9a:
08:89:9e:69:ae:c0:8d:c4:6b:1b:c9:8a:8f:49:25:
6e:9f:9b:b0:9b:b9:3f:30:d8:73:ca:d4:3e:57:17:
3b:7c:33:a4:f5:cb:cf:d9:7a:96:ef:08:8c:d0:12:
07:10:28:56:3b:58:68:2b:b5:f4:53:62:48:30:c0:
73:ef:59:3b:f2:40:30:6a:ca:76:3a:19:b7:89:9e:
49:20:31:17:95:9e:69:40:ee:4a:f7:3a:c2:6a:96:
f7:85:db:47:28:07:f1:09:29:86:b3:dd:da:27:0e:
f0:62:ba:a7:c0:8c:f6:f4:ce:14:40:e0:17:06:3f:
80:98:71:60:ee:7a:ee:3a:8e:b1:6a:d8:2b:42:1d:
67:74:37:83:d0:0a:5a:ea:1c:b5:78:b1:14:dc:1a:
ea:ee:a9:ba:61:f2:df:cc:bc:ef:0b:83:d7:90:cc:
c4:87:1f:de:74:62:8d:6e:4a:c2:be:d2:2b:ed:d8:
6f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3F:F6:28:B5:4B:5E:91:B3:CB:61:31:56:31:A5:B7:08:72:AC:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/845526A2454D11F19869E3C5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.246.0/24
154.90.66.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:84:c8:1d:01:4a:2f:95:9a:dc:32:36:39:86:a2:d0:0d:d1:
ff:f1:1f:47:f9:98:e0:3d:2c:51:40:21:04:21:10:9b:c6:8a:
0b:fe:2f:2a:95:92:5b:28:67:e4:e5:af:26:5d:e3:a3:88:a8:
93:e9:ad:f9:83:c8:6f:d2:54:2d:78:66:4e:e8:39:93:68:19:
f9:71:65:58:88:f3:8a:7c:24:a2:73:74:0f:17:79:96:81:1d:
85:f0:a0:5f:15:86:91:6a:90:cc:5d:72:7f:96:16:5a:7d:be:
43:47:16:69:e7:f0:91:3b:a4:4a:3b:f5:3e:7b:ff:f9:af:42:
d5:3f:ba:64:5a:59:e1:47:9b:0a:90:48:cb:63:49:89:af:19:
75:67:27:23:5d:2a:fd:01:be:0a:cc:53:bb:fd:7b:7b:87:b8:
7a:e1:3d:72:8f:f5:e8:20:4c:5c:fc:6c:80:ce:1d:2d:a0:a6:
80:e9:d0:d5:30:d6:f0:79:06:8b:11:79:f1:2f:9b:7b:dc:ef:
86:9d:c0:ac:a4:b8:d6:d4:bb:f9:a4:3c:8b:c2:f0:ad:49:02:
db:9f:d8:98:72:89:26:fe:a1:71:91:25:ab:e6:36:23:95:35:
79:16:45:8f:9d:a6:3a:43:54:57:98:5e:92:b1:5c:d4:f5:c0:
b4:1d:18:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:03:40 2026 by rpki-client