Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8647CCD83CD011F1850477DFCE1D38B0.roa
File: 8647CCD83CD011F1850477DFCE1D38B0.roa (raw, json)
Hash identifier: ZzHyH4ssiem19vnrKLzR90SRvGlb5N6yM+OfcPAIOTI=
Subject key identifier: EC:17:17:41:07:39:C1:7B:9D:33:DC:43:09:04:C8:DA:C3:3C:10:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C63C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8647CCD83CD011F1850477DFCE1D38B0.roa
Signing time: Mon 20 Apr 2026 15:49:33 +0000
ROA not before: Mon 20 Apr 2026 15:49:28 +0000
ROA not after: Wed 27 May 2026 15:49:28 +0000
asID: 138915
IP address blocks: 154.93.72.0/24 maxlen: 24
154.93.74.0/24 maxlen: 24
154.93.96.0/24 maxlen: 24
154.93.97.0/24 maxlen: 24
154.93.98.0/24 maxlen: 24
154.93.99.0/24 maxlen: 24
154.93.102.0/24 maxlen: 24
154.94.87.0/24 maxlen: 24
154.94.100.0/24 maxlen: 24
154.94.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116284 (0x1c63c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 20 15:49:28 2026 GMT
Not After : May 27 15:49:28 2026 GMT
Subject: CN=69e64b0d-001a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3e:fc:39:4a:2c:52:c8:f5:30:a9:13:f5:d1:
d0:ba:ff:7e:b2:f9:6b:ec:00:c5:f7:ff:01:74:54:
d8:c5:6f:20:3d:ad:51:a0:62:9a:f9:2c:9b:bf:56:
c5:fc:8e:76:f3:47:ae:b4:1d:70:30:60:fd:3a:bb:
04:ab:36:33:79:82:02:ae:2a:0a:61:f8:ac:67:b9:
c2:b6:3c:b6:35:d0:a3:42:16:fe:fe:d8:c6:7d:7c:
4e:05:89:b8:bc:5c:dc:15:3a:4f:85:44:ac:d6:31:
f6:32:61:ed:cd:00:4d:04:3d:2c:19:c3:d5:b0:02:
44:2f:11:0e:cd:19:27:39:2d:74:ec:d1:60:f7:b2:
ac:27:ce:f7:b6:c1:1f:d1:94:ee:73:0b:38:7d:cb:
3f:63:d9:c3:a1:90:2a:ca:76:d1:5a:d9:a9:62:74:
e3:a9:73:0e:9a:17:a8:71:b6:6b:b3:f0:a8:48:44:
09:62:0c:d4:3e:d7:26:db:cb:3e:06:b0:e6:56:4a:
c8:9c:73:1f:ae:56:d7:11:24:8f:38:ca:ec:7d:91:
42:27:cf:0f:08:6d:aa:37:35:0a:ad:2b:73:f4:12:
cb:44:1d:1c:53:51:09:49:4a:8c:7a:3a:75:c5:76:
fa:25:82:00:31:e2:9d:c6:e4:f9:c1:dc:7c:e1:9c:
5c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:17:17:41:07:39:C1:7B:9D:33:DC:43:09:04:C8:DA:C3:3C:10:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8647CCD83CD011F1850477DFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.72.0/24
154.93.74.0/24
154.93.96.0/22
154.93.102.0/24
154.94.87.0/24
154.94.100.0/24
154.94.123.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:4d:21:4e:00:bc:93:78:8c:fb:78:c6:2c:be:d3:7d:ab:dd:
d6:78:8e:73:18:aa:30:c4:2f:63:c9:9c:77:48:fe:85:6d:39:
c3:79:f4:c3:bd:f2:fd:85:78:9c:fc:eb:c0:a6:4f:85:a9:6f:
bc:22:d9:2a:3c:a6:7e:8a:54:b6:3c:40:73:be:15:0b:1d:21:
b1:6a:f5:2f:72:77:09:77:4d:72:aa:21:16:7e:02:87:a7:36:
32:e7:32:d3:95:13:ed:34:51:06:4a:c4:c8:b6:c4:02:ef:da:
eb:3e:95:a8:33:7d:32:ee:d2:c7:77:68:54:d9:01:dd:65:dc:
49:a5:ad:4f:42:be:98:43:4a:66:b8:f1:ac:99:51:4b:91:b4:
9e:1b:e9:d6:00:d1:f4:c8:fd:25:80:ab:c5:ce:81:9b:ae:82:
62:02:38:c3:5c:cc:d2:f4:9c:96:41:58:15:50:76:d6:b0:9d:
d1:2c:9d:f2:42:bc:12:93:41:5f:68:f3:57:f3:9c:0b:07:ab:
9c:ab:8f:0d:1c:76:0a:0e:90:b1:f7:d7:a8:6e:94:71:84:b0:
1c:db:c1:b5:14:3d:1a:64:96:6a:1a:7c:6e:18:55:e7:6b:11:
c1:75:20:00:dc:4a:d3:29:7e:85:a4:54:ff:14:d8:26:4d:cb:
e6:06:4b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:00:22 2026 by rpki-client