Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B68C0DB0493B11F19803B1AECE1D38B0.roa
File: B68C0DB0493B11F19803B1AECE1D38B0.roa (raw, json)
Hash identifier: ytGnjDgEgrkwTclWIANz/h/GeKfQddOVXXIayFBwcQw=
Subject key identifier: 8E:08:3E:6E:5E:C0:8B:70:50:6A:89:6B:63:4C:2E:62:BD:AD:7E:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C9A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B68C0DB0493B11F19803B1AECE1D38B0.roa
Signing time: Wed 06 May 2026 11:07:04 +0000
ROA not before: Wed 06 May 2026 11:06:59 +0000
ROA not after: Sun 06 May 2029 11:06:59 +0000
asID: 17561
IP address blocks: 154.85.238.0/24 maxlen: 24
154.85.239.0/24 maxlen: 24
154.85.240.0/24 maxlen: 24
154.85.241.0/24 maxlen: 24
154.85.242.0/24 maxlen: 24
154.85.243.0/24 maxlen: 24
154.85.244.0/24 maxlen: 24
154.85.245.0/24 maxlen: 24
154.85.246.0/24 maxlen: 24
154.85.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117157 (0x1c9a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 11:06:59 2026 GMT
Not After : May 6 11:06:59 2029 GMT
Subject: CN=69fb20d8-8f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ec:50:f5:c3:cb:60:e1:ab:48:35:2a:10:25:
8e:b4:54:aa:8e:79:4e:31:62:9e:33:23:b9:56:3d:
49:ad:57:b2:a9:65:f3:4c:50:f0:e0:86:89:be:d3:
68:0e:14:e1:f7:80:11:ba:93:a0:9f:05:23:91:1c:
61:4f:32:be:c8:42:d8:0f:f9:72:f5:d3:cc:b2:75:
5a:b5:7b:ce:75:04:a0:87:ae:6d:84:02:4a:d6:e8:
4d:82:85:c6:1c:95:e5:fa:27:b7:32:23:16:2b:3c:
da:fe:e1:dd:15:6f:ba:88:38:86:f9:2d:9f:ae:78:
f4:d2:ba:70:18:c8:4d:d9:ca:f2:fe:5c:3c:06:93:
43:1e:f0:c1:3b:4a:09:6a:be:d9:78:0e:d1:ae:0a:
d4:97:b0:d8:e1:d6:d8:a2:e8:3f:9f:0d:34:d0:0e:
2b:81:0f:c1:e7:85:c8:9a:81:0a:b0:8f:b2:55:26:
47:f6:cc:56:e5:54:f2:37:da:04:ed:1d:47:28:26:
a7:c0:d7:08:20:58:24:4a:b1:ba:01:0e:ef:c1:ee:
a0:71:32:1d:06:7c:4e:45:65:0a:94:7e:d3:41:21:
5c:db:5a:2b:47:9a:15:89:5e:23:ab:14:9c:9e:52:
40:6c:66:a7:e0:0a:01:06:df:37:8d:02:8f:ef:c4:
61:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:08:3E:6E:5E:C0:8B:70:50:6A:89:6B:63:4C:2E:62:BD:AD:7E:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B68C0DB0493B11F19803B1AECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.238.0-154.85.247.255
Signature Algorithm: sha256WithRSAEncryption
a2:6b:87:1d:ea:ca:f7:f9:62:71:f5:23:76:26:e6:8e:2f:37:
21:ff:2c:af:73:b3:e3:a8:0a:36:6f:27:c0:71:db:c1:9e:8d:
7d:38:42:4e:29:dd:65:60:50:ab:e4:53:c3:97:86:d6:8a:9f:
b4:67:a1:57:cb:65:4e:2a:2f:c6:7d:d7:57:35:25:36:63:16:
3c:bd:16:f2:18:1c:2f:b2:bf:e4:5f:82:40:52:91:19:dd:c6:
ab:7b:91:ee:d2:06:37:6c:67:74:d0:3d:7f:66:7e:87:d0:76:
a4:06:d2:3f:27:18:d9:0e:6c:c8:7e:5f:58:8f:d5:93:e7:5d:
09:4d:8f:96:32:cd:24:77:8c:c8:56:ff:6d:fd:7c:98:15:60:
bd:7e:55:37:af:cb:0f:80:21:15:2e:7f:08:1b:50:e9:f4:5f:
b1:e8:14:9d:51:24:4b:74:59:2a:aa:28:ad:b1:86:b3:6b:5e:
1d:a5:62:16:a3:6b:53:da:77:c3:5c:d0:a9:93:4d:bc:c4:35:
d4:70:f0:9d:d2:f1:8b:f1:27:59:4f:fa:48:76:c6:f4:71:36:
43:c5:ec:c1:b1:39:25:48:a5:01:f2:38:f9:ae:b3:6d:eb:d6:
8b:59:b2:61:e8:9d:c2:a3:5e:28:d1:c2:aa:0c:21:e2:3e:f9:
17:ca:67:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:05 2026 by rpki-client