Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DBB7142459211F19D6D7EE2CE1D38B0.roa
File: 9DBB7142459211F19D6D7EE2CE1D38B0.roa (raw, json)
Hash identifier: zu60/TXdrvqRoUbqxjobkYY+YcIt5wjt2VYCOz9+OCU=
Subject key identifier: D5:7F:18:07:B5:E7:E3:40:CD:9C:E5:41:90:1D:16:1A:5C:65:6E:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C8EF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DBB7142459211F19D6D7EE2CE1D38B0.roa
Signing time: Fri 01 May 2026 19:19:04 +0000
ROA not before: Fri 01 May 2026 19:19:00 +0000
ROA not after: Fri 05 Jun 2026 19:19:00 +0000
asID: 48031
IP address blocks: 154.215.12.0/24 maxlen: 24
154.215.13.0/24 maxlen: 24
154.216.1.0/24 maxlen: 24
154.218.1.0/24 maxlen: 24
154.218.16.0/24 maxlen: 24
154.218.17.0/24 maxlen: 24
154.218.18.0/24 maxlen: 24
154.218.19.0/24 maxlen: 24
154.218.22.0/24 maxlen: 24
154.222.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116975 (0x1c8ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 19:19:00 2026 GMT
Not After : Jun 5 19:19:00 2026 GMT
Subject: CN=69f4fca8-ab35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:12:d0:34:dc:dc:84:4e:56:49:eb:4e:fe:
cc:7f:cf:d5:2f:2d:57:11:8c:f5:79:06:7d:14:d4:
3b:23:f9:81:c9:87:0e:c1:16:fd:37:02:5b:fa:43:
d9:fc:d4:cd:4a:38:92:a7:a3:0c:f6:c5:4f:91:85:
38:68:c6:6f:a8:0e:cd:32:b2:5a:d6:0f:e7:4e:a9:
16:63:cf:3a:8c:fc:7c:5e:4e:a9:f9:af:b7:7c:76:
73:6a:7a:9f:e9:fa:ad:45:65:a0:83:b1:97:45:ca:
86:18:64:ce:9e:f4:c1:4b:56:d7:c9:5c:fc:10:0b:
ed:2e:09:b7:2a:00:01:ab:94:e6:6a:d6:f1:49:3e:
f0:14:4b:ca:29:a6:c9:6d:26:20:dd:71:74:6c:d8:
c3:24:9d:7f:1a:0d:87:9d:48:cd:56:5c:1b:06:03:
fa:73:d0:73:f7:ed:ae:92:4a:59:ea:68:1a:83:56:
c2:35:cd:1f:e1:13:a5:ed:b5:b9:80:d0:b8:25:1f:
6e:6e:ab:19:84:c9:f7:af:f1:be:e7:ec:8d:d2:d3:
9b:2e:0d:32:bd:07:de:53:a2:2c:d0:bc:36:ad:89:
7f:71:40:b2:d9:b6:70:6e:4f:53:fd:2f:0d:35:24:
ee:bc:4f:b5:b2:97:19:bb:84:e4:33:98:a8:bb:c4:
4a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7F:18:07:B5:E7:E3:40:CD:9C:E5:41:90:1D:16:1A:5C:65:6E:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DBB7142459211F19D6D7EE2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.12.0/23
154.216.1.0/24
154.218.1.0/24
154.218.16.0/22
154.218.22.0/24
154.222.215.0/24
Signature Algorithm: sha256WithRSAEncryption
83:9c:1d:5e:47:92:4d:94:1a:c9:dc:a2:11:0d:96:5b:45:7c:
ba:59:ab:71:c4:1f:f4:ce:25:79:1d:98:4d:e2:a9:3a:63:55:
7a:bd:1b:3d:84:dc:e9:0c:50:33:4c:a2:48:09:97:e6:17:af:
db:5f:d3:44:28:7b:a2:9d:6e:b9:af:69:3d:98:5f:11:39:f4:
ee:6b:b3:0c:fd:3c:37:fd:d6:c1:f7:d7:0c:c7:20:a4:9b:79:
0a:f8:50:e6:11:1f:2f:ac:0c:73:19:96:0b:69:2b:d6:f7:53:
26:b3:57:07:c9:3d:e3:8c:17:a6:ec:9a:1d:2e:b6:6f:99:93:
1a:f5:41:83:a7:f6:87:15:bf:31:51:7a:74:c4:82:dc:cd:78:
7c:ee:81:a7:6f:81:67:a1:26:3f:da:44:64:e5:a3:79:4d:29:
e6:35:55:55:1d:25:85:68:47:41:15:55:f8:9b:91:bc:77:74:
5b:dd:9b:77:3c:b7:74:52:7c:ac:fd:3e:c7:a8:9c:17:43:dd:
85:1c:71:31:db:20:20:a6:3c:78:06:9e:e4:98:ad:f8:d6:7a:
98:6d:4d:24:02:64:ef:2f:e4:2b:0a:8f:ee:58:41:12:f1:a6:
ce:20:33:c0:22:02:2e:d8:70:b1:8f:f9:1f:63:da:59:8c:99:
71:0a:62:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 10:59:56 2026 by rpki-client