Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B655C2C30B311F1BCE770EFDAE4EC9C.roa
File: 8B655C2C30B311F1BCE770EFDAE4EC9C.roa (raw, json)
Hash identifier: izzd6KE9NRTuEIYvjaKzrZZzKF2oTyb8yabyJPDjJd0=
Subject key identifier: 37:A3:4E:CD:1E:C1:09:35:E7:F1:C7:DC:B9:27:DE:A5:29:EE:DA:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C2ED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B655C2C30B311F1BCE770EFDAE4EC9C.roa
Signing time: Sun 05 Apr 2026 05:51:52 +0000
ROA not before: Sun 05 Apr 2026 05:50:21 +0000
ROA not after: Sun 12 Apr 2026 05:50:21 +0000
asID: 2914
IP address blocks: 154.197.12.0/22 maxlen: 24
154.222.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Apr 2026 08:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115437 (0x1c2ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 5 05:50:21 2026 GMT
Not After : Apr 12 05:50:21 2026 GMT
Subject: CN=69d1f878-4035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a1:ff:1f:1a:af:fa:52:80:f2:ca:25:88:e1:
2c:f6:64:ae:fc:fe:7a:ef:61:48:e1:4b:88:aa:4d:
af:e8:ab:cf:00:fe:1f:c9:bb:99:22:0d:6f:57:15:
a2:9a:34:8f:57:2a:d3:ee:70:63:72:6d:92:9e:01:
aa:4f:33:54:f7:fa:ed:bc:84:56:11:85:00:fb:f3:
97:c5:b3:4f:75:fe:2e:45:f1:13:5b:88:9b:13:9f:
28:a6:45:f0:3a:b0:0f:be:c6:b4:c1:8b:a1:69:76:
9b:89:73:3d:5f:de:e5:55:2f:bc:af:c0:9e:a1:1c:
a9:ba:25:86:7a:63:1e:77:86:cf:1b:b9:01:43:87:
a3:fe:e5:ad:00:f9:17:1b:65:3a:24:07:7b:ee:a1:
25:80:2d:82:4b:90:fa:9e:52:63:2d:ff:e7:8a:52:
55:5d:a8:82:0f:63:e3:7e:aa:d9:ff:e8:bc:db:9f:
f7:4d:e2:21:e7:06:33:95:e6:ae:e4:1b:3d:1c:e7:
69:35:5f:b0:8b:88:d9:fe:1c:05:cd:84:00:3a:f5:
78:e7:b9:cb:ca:df:98:5b:e6:f3:65:b0:91:23:d7:
87:9f:33:c6:0e:3d:ef:23:40:3c:18:1b:70:ea:7a:
89:8a:04:59:a9:f6:17:5a:dc:7d:d8:53:31:cd:5e:
2a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A3:4E:CD:1E:C1:09:35:E7:F1:C7:DC:B9:27:DE:A5:29:EE:DA:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B655C2C30B311F1BCE770EFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.12.0/22
154.222.74.0/23
Signature Algorithm: sha256WithRSAEncryption
03:08:cc:f6:0e:1a:54:56:d1:63:a8:01:9e:86:95:98:4b:dc:
a8:91:e8:f6:e4:2d:5c:32:24:b0:22:f5:7b:0a:c6:52:f0:d8:
db:43:c6:3f:8b:ce:d4:0f:b6:be:fc:9a:fb:dc:71:e3:4a:46:
00:4f:7e:93:b6:6a:65:9d:3e:c2:27:77:b2:ed:10:f4:c4:09:
f1:d5:c9:c9:ea:21:ef:73:ee:5b:01:a2:59:42:e0:e7:00:f7:
9d:fd:51:5c:5e:dd:c2:5e:f4:8d:f1:73:d0:fc:66:5c:9a:e1:
17:e7:49:04:3c:e0:e4:8b:06:ac:81:1d:dd:d8:e2:9d:d2:aa:
01:27:39:f6:2f:2f:77:b5:d6:51:d1:14:33:4f:e2:b6:1f:65:
f2:40:1a:f6:7a:fc:bd:e6:c3:3e:0f:a8:6f:73:a9:44:c2:ac:
11:26:40:f3:1e:6b:de:20:7b:9e:22:65:64:d5:f0:2f:50:28:
68:2a:0f:b6:7e:81:54:df:93:0d:6a:85:e4:3c:da:a5:c1:fd:
09:7e:01:83:eb:4a:66:2d:a0:50:4d:e4:61:60:f1:11:8c:fc:
fa:58:fd:4a:be:6c:68:10:8e:23:e4:fe:7a:59:18:4e:33:7d:
47:5f:30:cb:8e:ef:ff:65:5b:ce:c0:e0:67:a6:eb:ce:47:e3:
0e:ef:b1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:50:11 2026 by rpki-client