Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B274BFF0454F11F1B6D837D3CE1D38B0.roa
File: B274BFF0454F11F1B6D837D3CE1D38B0.roa (raw, json)
Hash identifier: GSY0OZYzlLiJ6mskLD5gIN7xJUrjTGJBBhI1zRlg4E4=
Subject key identifier: A5:6C:24:1F:D6:75:60:0C:B1:8C:9F:FE:29:88:5A:F1:EB:E1:96:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C873
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B274BFF0454F11F1B6D837D3CE1D38B0.roa
Signing time: Fri 01 May 2026 11:20:03 +0000
ROA not before: Fri 01 May 2026 11:19:58 +0000
ROA not after: Wed 15 Jul 2026 11:19:58 +0000
asID: 135377
IP address blocks: 154.197.56.0/23 maxlen: 24
154.197.56.0/24 maxlen: 24
154.197.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116851 (0x1c873)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 11:19:58 2026 GMT
Not After : Jul 15 11:19:58 2026 GMT
Subject: CN=69f48c63-7d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9a:a4:cc:c7:79:af:9f:65:58:59:ed:a3:a1:
31:97:41:17:42:d0:07:ed:5d:cf:93:73:5a:af:6a:
20:48:ca:5a:c2:98:18:54:ae:9f:cb:b5:30:28:53:
3b:e2:22:c3:c4:32:19:20:d7:9c:34:9d:82:47:f3:
d1:b6:6f:23:e7:fe:f8:70:f7:19:1e:ba:77:29:5c:
e1:d2:1a:25:bd:6b:db:aa:3f:3e:7f:46:10:42:e5:
dc:88:14:af:f3:7f:15:af:5c:60:21:b4:1e:a2:de:
bb:14:cf:af:d5:96:76:80:8d:9e:37:b7:90:17:02:
8a:22:5b:78:cc:62:87:a8:00:56:b2:a8:17:61:90:
00:5c:e1:3a:0d:8c:66:cd:50:2a:50:a1:cd:6f:d8:
b8:54:ed:db:ca:8f:2a:95:d3:45:67:4d:04:dd:af:
82:70:5b:1a:20:67:15:ce:f8:b4:e8:d2:db:21:fc:
48:a4:56:b8:7a:96:6b:63:53:57:43:d0:f6:c5:d9:
03:46:f2:82:63:1b:e5:5b:a8:2f:e2:7a:fa:4d:98:
48:ad:d6:4f:92:5c:cd:a7:80:7b:fb:00:fb:52:48:
a1:69:6f:04:91:84:8d:41:80:1f:ce:15:7f:d4:45:
99:75:bf:ec:ce:0e:51:4d:64:df:2d:47:fa:7e:7b:
c7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6C:24:1F:D6:75:60:0C:B1:8C:9F:FE:29:88:5A:F1:EB:E1:96:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B274BFF0454F11F1B6D837D3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.56.0/23
Signature Algorithm: sha256WithRSAEncryption
43:8a:c4:b8:8c:0a:f9:5a:64:85:7c:ac:67:7b:30:db:0f:c4:
85:90:81:e4:d1:25:1c:54:48:43:57:86:5c:10:94:26:df:5f:
d4:5e:60:9f:d3:45:91:19:ca:d4:10:f9:4e:c3:85:4c:ac:19:
02:6c:9a:d0:d3:46:e2:ae:99:68:71:ca:0b:5e:cf:4b:80:32:
3c:29:2d:ce:d6:33:f7:11:7e:d8:e0:58:0f:41:42:45:5f:22:
51:a8:fe:23:c7:59:93:37:07:46:3a:e7:e9:e5:73:47:67:61:
45:53:5c:40:95:88:07:bc:bc:64:ac:cf:50:89:b3:d2:2d:ec:
f4:8d:c8:43:a6:34:56:be:ce:73:dd:18:c0:5c:f5:e4:9b:4d:
6e:9b:e7:71:60:0a:80:9d:f8:02:9e:77:4e:7b:51:0e:b9:d0:
9f:38:53:41:e0:ea:76:e1:bc:6e:b6:4b:73:f0:f8:81:82:42:
d1:8b:b9:04:a0:42:9f:24:fa:16:2c:08:58:f2:6c:8e:e6:0f:
d3:c6:28:16:50:7a:f7:f5:18:37:e9:96:65:7e:52:45:ac:b4:
88:22:11:0f:c5:98:85:39:90:33:0d:6d:e3:83:d2:69:19:df:
27:a7:c6:10:a5:34:2c:bf:9d:6d:67:7e:ad:4e:3f:29:06:4e:
18:f8:cc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:04:00 2026 by rpki-client