Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1B130BC3E7011F1AC228DE6CE1D38B0.roa
File: A1B130BC3E7011F1AC228DE6CE1D38B0.roa (raw, json)
Hash identifier: NyDfYaJQkw4isRySnFLsa2Ym6Ojb7GznuOdZEuzys34=
Subject key identifier: CA:24:18:41:4A:95:ED:E6:3B:55:05:1A:3E:7A:D5:5C:71:DE:44:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C69D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1B130BC3E7011F1AC228DE6CE1D38B0.roa
Signing time: Wed 22 Apr 2026 17:28:10 +0000
ROA not before: Wed 22 Apr 2026 17:28:04 +0000
ROA not after: Tue 09 Jun 2026 17:28:04 +0000
asID: 401783
IP address blocks: 154.196.208.0/24 maxlen: 24
154.196.209.0/24 maxlen: 24
154.196.210.0/24 maxlen: 24
154.196.211.0/24 maxlen: 24
154.196.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116381 (0x1c69d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 17:28:04 2026 GMT
Not After : Jun 9 17:28:04 2026 GMT
Subject: CN=69e9052a-6658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a0:31:b7:2b:6f:72:62:eb:d1:39:42:ab:84:
68:be:88:58:c0:7c:13:fa:e0:3b:40:15:81:7c:e1:
cf:01:bc:dd:3e:af:99:40:73:54:c8:dd:fd:5d:87:
5a:d8:a2:5d:94:98:f9:08:92:85:95:3c:d4:8b:9e:
4a:77:bb:73:43:ca:45:2e:76:a4:2b:d5:e4:b2:83:
d2:1e:bd:a6:20:6e:01:ee:36:23:5a:81:31:05:f9:
b6:44:b2:87:14:04:67:77:a8:19:48:f4:b5:fc:67:
df:87:64:6a:10:75:46:20:7d:88:fc:17:ae:12:64:
82:75:cc:d2:66:bb:4e:fd:38:d2:d0:73:06:7f:e0:
0d:e2:91:07:38:99:94:38:c2:f2:1e:09:35:63:74:
de:db:b3:9c:0d:ee:a5:27:14:f8:93:d5:b2:5a:6d:
12:a1:cf:45:67:e7:0a:91:1e:8d:86:e6:a4:45:70:
7c:c5:04:75:5f:c6:2f:84:26:96:35:d8:1b:58:90:
b8:ca:ca:26:11:aa:b6:0f:40:ac:81:04:80:46:2b:
35:30:98:f6:f7:6d:72:cb:e2:e7:8c:ce:6a:c0:db:
3f:77:14:56:b4:34:8c:45:ab:9d:fc:7c:73:78:72:
8a:04:ee:97:c0:e8:d4:92:ae:d6:27:59:c0:93:54:
65:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:24:18:41:4A:95:ED:E6:3B:55:05:1A:3E:7A:D5:5C:71:DE:44:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1B130BC3E7011F1AC228DE6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.208.0-154.196.212.255
Signature Algorithm: sha256WithRSAEncryption
8f:77:90:89:87:02:80:4e:58:36:fa:92:97:03:8f:86:8f:51:
af:11:9f:8a:db:cf:49:9a:41:71:07:3f:3b:ca:8d:23:6d:89:
bf:ad:c3:38:b5:5b:4b:7f:1b:97:85:60:3b:be:50:32:dc:25:
71:97:9f:53:ac:b0:8a:05:92:0f:d1:b0:22:47:e4:d0:b1:e7:
86:8a:98:88:f9:cb:5d:d2:2c:37:a8:56:74:b6:8d:47:56:d6:
0d:f7:94:91:c2:d8:86:ac:54:58:ff:eb:8d:cf:7b:5c:8f:4a:
35:a4:27:50:66:80:45:71:79:0d:d0:c1:9c:7f:6d:7e:78:b3:
35:a5:11:cf:54:58:b7:5b:8c:a1:a7:0f:44:48:a9:ff:f9:fb:
15:27:89:f1:9a:c2:d8:84:1d:f3:b6:df:6a:f6:fa:5f:61:da:
5e:76:64:a2:2c:9e:fa:c3:af:dc:a0:7d:32:de:91:d4:6a:56:
73:46:ca:43:c1:2d:90:f1:75:61:50:98:96:62:46:f2:52:52:
a8:9a:4f:a8:3c:97:a9:79:40:d8:88:15:7c:75:06:bd:1e:9a:
6b:db:a3:86:2c:d6:dd:4f:91:98:0f:77:b8:bf:20:b7:54:f8:
9c:a2:52:64:4d:97:6b:61:96:58:52:f6:bd:2e:9a:a1:a7:ec:
5f:ce:59:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:03:49 2026 by rpki-client