Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/870A177446B311F1BFB666D2CE1D38B0.roa
File: 870A177446B311F1BFB666D2CE1D38B0.roa (raw, json)
Hash identifier: lzfnkvj4+jnIkS1iTbOsgifHgKp2a0hVRigjqv6R+/Y=
Subject key identifier: 3B:6F:9F:68:97:57:3D:FF:61:49:48:3E:0A:03:A7:4D:E4:B3:04:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C944
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/870A177446B311F1BFB666D2CE1D38B0.roa
Signing time: Sun 03 May 2026 05:47:11 +0000
ROA not before: Sun 03 May 2026 05:47:06 +0000
ROA not after: Wed 10 Jun 2026 05:47:06 +0000
asID: 51896
IP address blocks: 154.194.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117060 (0x1c944)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 3 05:47:06 2026 GMT
Not After : Jun 10 05:47:06 2026 GMT
Subject: CN=69f6e15f-442f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f6:ee:38:db:89:78:dc:0d:3d:d1:e7:4b:2c:
59:d7:0d:7d:e5:75:d4:44:e2:27:43:cd:8d:4b:15:
69:43:25:b0:25:18:0b:ef:ef:72:9e:20:d3:d1:b2:
86:b4:9c:b1:cb:74:93:49:2b:04:1d:84:c0:f2:bf:
86:83:8d:93:92:d1:fd:75:a7:8f:d3:5e:70:e1:92:
ea:b0:ed:cb:b5:b4:aa:6a:c4:2c:05:7d:3c:b0:69:
cf:03:e4:a3:2a:d6:a4:89:88:3e:bf:cf:54:e1:9e:
e3:3a:85:1d:92:7a:c5:f6:d9:09:19:bc:c6:40:93:
80:00:ce:bd:df:c6:2e:87:0c:ef:7c:9f:c2:33:98:
f1:48:d4:64:d3:ed:be:ff:ae:9e:01:e2:d5:f3:fb:
1c:51:57:86:09:7e:c5:7e:a6:6b:3c:23:16:d9:23:
55:2d:3e:ac:88:d8:6c:2d:4e:39:91:f4:b7:41:89:
e1:cf:ee:0a:7f:e7:40:37:62:64:17:bd:01:b0:26:
fa:e3:81:d4:c3:60:fe:60:6f:17:6b:a0:51:8b:16:
d2:c2:b3:17:bd:b1:ed:c7:47:e6:6a:2d:73:85:97:
f6:fc:63:18:45:ea:d6:c3:69:4d:a7:df:9f:3d:4f:
f8:ec:82:6f:09:de:cb:7e:02:f3:bc:6e:99:10:13:
de:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6F:9F:68:97:57:3D:FF:61:49:48:3E:0A:03:A7:4D:E4:B3:04:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/870A177446B311F1BFB666D2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.43.0/24
Signature Algorithm: sha256WithRSAEncryption
49:1a:6f:8a:a8:7a:d2:1b:36:20:d9:82:d3:81:d8:6e:c0:bc:
e8:79:be:3b:52:c1:a8:b5:f6:59:e8:1b:03:e1:18:43:ec:20:
63:a3:be:ab:cc:d2:fe:ca:87:3f:fe:a5:38:3e:ba:44:ac:06:
ce:b9:7b:a8:60:22:c4:1c:9c:d1:9f:30:55:7c:33:8f:3d:b1:
6e:25:ea:75:5b:fa:53:41:8d:22:48:04:cf:45:d4:1e:69:52:
95:77:2e:36:c6:40:e6:e6:89:20:42:6a:5d:46:6b:81:a4:6e:
0c:1b:13:3d:27:34:4d:c4:75:ab:9d:21:93:a9:c8:ce:9b:7e:
be:d9:ff:44:cc:b8:e9:e4:15:19:b4:81:e3:d1:e4:67:26:05:
81:d0:4b:35:4d:a0:3f:b6:84:01:e1:cd:1e:61:35:23:6c:0c:
be:41:26:3e:07:24:be:8f:99:21:64:27:2e:4f:17:5a:2a:f6:
cd:ce:ed:e7:45:db:14:3d:25:92:2c:a6:8f:2e:3c:31:f8:7a:
54:eb:aa:0f:97:3b:9c:36:70:14:e4:a4:2a:81:4c:e4:27:16:
0a:ee:aa:fc:8d:5e:d8:08:95:3f:64:e4:23:27:9a:6c:a2:74:
a6:52:1f:ba:fc:c5:68:57:1e:54:89:c5:9a:15:41:15:f6:c8:
3b:8d:14:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:04:01 2026 by rpki-client