Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93C68D28192F11F19FB345DADAE4EC9C.roa
File: 93C68D28192F11F19FB345DADAE4EC9C.roa (raw, json)
Hash identifier: JDOx+PJMgpVrpKq5ZzXplLUkPlF6H/C0O6Tc9T/NK0c=
Subject key identifier: 5E:02:75:23:66:ED:3F:77:AB:18:1E:72:AC:40:3A:12:78:34:F1:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BDE9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93C68D28192F11F19FB345DADAE4EC9C.roa
Signing time: Fri 06 Mar 2026 07:39:16 +0000
ROA not before: Fri 06 Mar 2026 07:39:11 +0000
ROA not after: Mon 13 Apr 2026 07:39:11 +0000
asID: 17497
IP address blocks: 154.90.138.0/23 maxlen: 24
154.90.138.0/24 maxlen: 24
154.90.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114153 (0x1bde9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 6 07:39:11 2026 GMT
Not After : Apr 13 07:39:11 2026 GMT
Subject: CN=69aa84a4-3a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:71:1f:d4:7f:d1:e3:e4:58:bd:4d:9e:bc:39:
b4:e4:12:16:a0:62:43:2d:c0:6e:7b:11:6e:5a:78:
a6:05:5f:6d:72:48:c0:b4:89:1a:97:03:a8:8b:cb:
d8:60:90:1d:5d:c0:55:74:a1:f7:97:08:79:bc:1f:
09:3a:7e:d1:b0:14:35:30:f8:0c:38:58:ea:f9:1a:
8b:07:49:24:c5:42:5a:65:f2:01:a4:37:39:02:d4:
4d:1f:cb:38:f9:ff:86:3c:6e:59:1a:be:37:5e:46:
a3:15:dd:b4:a4:ac:d3:75:75:d6:d4:f1:70:85:4c:
61:8c:d2:15:cd:4b:ec:b2:94:82:8b:78:9a:78:eb:
73:c8:68:94:a7:05:71:f9:da:7f:63:24:d8:21:f9:
05:02:6c:de:99:1c:81:9a:6d:e9:56:c1:0e:db:5c:
d0:7b:fe:92:dd:7e:a0:8a:77:15:12:8c:f9:e7:8b:
54:55:69:b1:8f:60:62:9a:5f:8d:e3:7e:2b:af:83:
d4:c6:89:4d:25:c7:82:e6:2a:a8:dd:74:e0:ee:23:
71:54:45:12:61:f5:7f:ea:58:04:69:31:ac:f1:5e:
9a:8e:12:e0:74:2c:ba:d5:19:39:d1:58:89:f0:3b:
dc:34:15:86:a6:67:cb:11:f0:cf:b8:3b:95:ba:3a:
70:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:02:75:23:66:ED:3F:77:AB:18:1E:72:AC:40:3A:12:78:34:F1:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93C68D28192F11F19FB345DADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.138.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:dd:40:96:73:5d:46:96:84:4c:2c:7e:40:6e:97:0c:67:45:
23:92:56:0c:26:0f:76:49:c7:65:57:2a:b9:3c:cc:f4:1f:43:
95:6f:f3:3e:65:df:fb:77:9f:e9:4e:3e:94:29:d0:60:8d:be:
a1:90:a2:41:d5:f8:61:96:b7:6f:15:15:27:20:c2:25:f6:cc:
df:20:a7:a8:bd:75:ce:57:93:f3:12:72:53:6a:64:96:09:06:
39:89:32:31:94:aa:34:02:5d:db:b3:0f:79:7a:9c:c7:a4:e8:
5e:67:3a:09:65:de:f3:de:65:d6:00:23:29:fa:c0:0e:c8:22:
c2:7a:50:f6:b3:64:4e:48:c7:4c:53:48:ae:4a:f7:d9:3f:32:
99:0a:81:df:08:4f:36:51:46:0f:8a:4a:9e:42:63:e2:93:d3:
13:a0:ba:9b:a2:b9:00:dd:67:45:39:8c:2b:95:39:03:25:da:
83:5e:69:f0:10:79:8a:a5:4b:31:2a:f1:c0:83:eb:ce:9a:a2:
9e:16:d3:0c:a9:c7:e0:9e:58:b2:90:f9:12:4e:43:3b:e0:15:
ce:0c:b7:ae:6d:a5:aa:4c:60:b5:a9:9c:4f:d0:bc:09:e2:46:
ab:01:a6:a5:52:1a:8a:46:78:48:1e:4b:52:db:ad:73:c9:93:
6a:49:04:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 09:34:00 2026 by rpki-client