Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8E67F8A3FDE11F1B64737AECE1D38B0.roa
File: A8E67F8A3FDE11F1B64737AECE1D38B0.roa (raw, json)
Hash identifier: 78VCfe61uX2xL81Y0DrQE7Fvk9IBB3pujZaDolp7S9s=
Subject key identifier: D1:90:19:0F:58:27:D2:3F:A8:89:85:A5:5C:5F:8C:14:FD:13:3A:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C752
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8E67F8A3FDE11F1B64737AECE1D38B0.roa
Signing time: Fri 24 Apr 2026 13:08:18 +0000
ROA not before: Fri 24 Apr 2026 13:08:13 +0000
ROA not after: Mon 01 Jun 2026 13:08:13 +0000
asID: 11427
IP address blocks: 154.82.26.0/23 maxlen: 24
154.82.28.0/22 maxlen: 24
154.85.0.0/23 maxlen: 24
154.85.100.0/22 maxlen: 24
154.90.168.0/22 maxlen: 24
154.90.184.0/22 maxlen: 24
154.94.8.0/22 maxlen: 24
154.94.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116562 (0x1c752)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 13:08:13 2026 GMT
Not After : Jun 1 13:08:13 2026 GMT
Subject: CN=69eb6b42-658f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bf:63:90:f4:ac:67:36:54:74:1b:24:aa:c3:
04:12:23:f1:03:90:74:5d:95:b2:a6:e1:bb:46:1c:
eb:0e:be:8c:7e:65:81:62:99:73:94:3f:5b:34:ca:
26:cf:70:c7:04:1c:0a:c3:a3:79:9d:e7:c6:1d:62:
61:12:5b:cd:df:d1:9f:17:a6:9c:62:df:b9:97:c1:
5a:e6:46:6e:97:c8:8d:55:83:fc:02:28:74:50:bf:
b9:fe:f7:11:58:90:db:d0:46:19:64:ff:52:05:da:
c9:a4:15:61:81:6b:cd:ef:f9:2f:e1:de:de:c4:26:
69:6f:e3:9a:24:eb:62:51:24:8d:28:67:30:ed:9b:
d3:5c:86:a3:63:aa:9b:93:bc:d3:67:27:5b:73:df:
b9:65:2e:40:e4:9e:3d:e2:d7:a6:74:4c:04:e7:35:
b3:3a:f2:c3:79:b8:05:36:bd:67:2d:03:71:00:1c:
96:6a:55:82:76:7e:88:ca:5c:b6:49:93:bf:c9:56:
84:63:b2:fd:27:18:2b:e0:1d:a7:08:d3:53:1e:b8:
d5:56:3b:92:42:a3:2b:3c:ba:e9:45:ff:09:05:88:
86:21:15:e9:52:9a:a6:ac:41:2b:cb:f8:b6:0b:6e:
b1:70:2b:ff:1a:7a:0c:70:d4:05:16:de:9b:aa:5f:
cb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:90:19:0F:58:27:D2:3F:A8:89:85:A5:5C:5F:8C:14:FD:13:3A:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8E67F8A3FDE11F1B64737AECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.26.0-154.82.31.255
154.85.0.0/23
154.85.100.0/22
154.90.168.0/22
154.90.184.0/22
154.94.8.0/22
154.94.128.0/18
Signature Algorithm: sha256WithRSAEncryption
54:46:f4:cd:1f:7f:aa:c5:78:92:9b:8b:51:b4:ce:06:cd:1d:
f4:f8:6a:0a:86:52:28:2b:f6:63:5f:09:13:17:01:b1:40:f9:
f9:f9:9e:ea:60:d1:2b:16:0d:98:97:b0:93:37:b5:80:ad:b7:
ba:68:16:f3:5c:49:6d:e2:8b:17:a8:55:c2:72:84:d9:94:b7:
65:df:61:24:86:8a:97:20:df:47:ca:18:6a:e2:ea:e2:ba:b1:
42:f0:c5:ef:1f:f5:16:4c:27:6d:c4:6f:10:56:79:ab:64:f5:
26:d0:b8:0c:16:5d:0c:05:da:2c:ba:b7:d0:2a:60:64:f1:4e:
98:79:42:75:2c:68:36:ed:33:f0:15:06:82:f4:fa:54:d4:79:
10:72:99:48:10:a4:16:d0:c8:8e:e5:a1:e5:cb:68:16:bb:ce:
b2:ae:74:f8:ec:ac:6a:db:59:f5:26:a8:cd:4c:01:c5:c4:d9:
a8:77:8a:25:ec:27:cf:a6:d2:4e:41:10:04:34:bf:d2:54:e1:
4d:37:66:7d:1a:ab:ac:0d:8d:73:a1:ec:b3:cb:6c:86:c5:0d:
9c:18:f3:59:14:54:03:ab:02:eb:3c:40:52:f0:16:89:73:32:
2c:8e:1d:12:ad:d4:a4:5f:38:02:05:68:cb:57:55:64:b5:57:
85:d2:39:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:59 2026 by rpki-client