Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1D5D7083FBF11F1A63766F2CE1D38B0.roa
File: C1D5D7083FBF11F1A63766F2CE1D38B0.roa (raw, json)
Hash identifier: Lkx+bT6Rwo/6bugzY/VRMq+2zb8zdmeWrr393bjq8J8=
Subject key identifier: 42:91:D8:50:F1:9D:11:13:9B:CA:43:32:BE:86:AC:E8:3B:EC:41:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C727
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1D5D7083FBF11F1A63766F2CE1D38B0.roa
Signing time: Fri 24 Apr 2026 09:27:05 +0000
ROA not before: Fri 24 Apr 2026 09:27:00 +0000
ROA not after: Sun 31 May 2026 09:27:00 +0000
asID: 62240
IP address blocks: 154.194.99.0/24 maxlen: 24
154.194.100.0/24 maxlen: 24
154.196.54.0/24 maxlen: 24
154.196.55.0/24 maxlen: 24
154.196.56.0/24 maxlen: 24
154.196.57.0/24 maxlen: 24
154.196.58.0/24 maxlen: 24
154.196.59.0/24 maxlen: 24
154.196.60.0/24 maxlen: 24
154.196.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116519 (0x1c727)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 09:27:00 2026 GMT
Not After : May 31 09:27:00 2026 GMT
Subject: CN=69eb3769-1d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1e:81:fe:71:cf:d6:76:f0:76:99:3d:0c:56:
15:58:c5:b6:04:c3:47:da:3d:6b:26:42:d2:44:fc:
73:18:85:a3:87:7a:4e:9a:f4:be:54:df:74:f5:fb:
06:d7:56:19:0f:66:cb:3d:3f:83:f3:68:26:88:fc:
f8:7e:2f:1e:63:67:f6:7d:65:d9:dd:2f:63:ac:03:
09:cd:36:e0:24:81:94:24:1f:b3:0e:16:55:1a:c4:
1a:36:d2:ee:77:5b:fa:1f:f4:52:cf:68:15:33:af:
20:8a:18:5a:56:8c:e9:da:c8:f6:e3:5b:ff:78:4b:
6c:d8:60:a2:4f:47:b6:f0:9f:e0:44:71:a9:4f:e5:
83:85:83:2d:dd:da:5f:29:b0:b6:bb:47:f7:80:a6:
71:75:ca:2b:98:3d:60:c9:c5:d3:f7:bd:f2:65:3f:
e8:75:db:be:ab:e9:9b:70:0b:6b:16:9a:33:09:18:
2b:bd:f8:41:cf:8a:7f:c0:56:42:e2:9d:04:8b:23:
33:da:f6:2c:78:62:9d:1a:ce:0b:65:81:f8:6f:b1:
77:b4:40:5d:8c:f6:f5:a2:16:b1:01:5f:aa:29:6e:
3c:e1:c2:a1:f0:59:ee:b4:54:e3:2f:ec:30:1d:82:
a9:51:fa:b4:4c:5c:2e:5f:e9:16:39:fe:48:5c:d8:
ff:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:91:D8:50:F1:9D:11:13:9B:CA:43:32:BE:86:AC:E8:3B:EC:41:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1D5D7083FBF11F1A63766F2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.99.0-154.194.100.255
154.196.54.0-154.196.61.255
Signature Algorithm: sha256WithRSAEncryption
12:d7:64:0f:5a:e3:50:69:e7:80:7f:1c:a2:83:40:9e:9a:3f:
e1:35:b1:b8:ae:20:1a:e9:63:33:ae:93:5d:c1:c6:47:a6:5d:
bd:fd:e8:19:4a:6f:8e:e7:72:63:c6:a3:81:e4:d0:5e:99:ac:
d4:3b:dc:94:43:e7:e5:d7:62:8d:03:7b:97:b6:b8:99:46:29:
b7:a2:8b:db:b5:b6:be:d9:1c:1b:9d:06:3f:46:6b:84:73:6c:
b0:db:b1:62:9d:17:f1:08:06:c0:52:6b:84:9e:13:7a:a9:d4:
5e:61:2f:28:1a:98:17:ab:8f:97:47:32:d9:79:cd:6a:a6:8e:
e7:f0:00:24:55:ee:ea:09:cf:42:1c:6c:73:b2:38:54:e7:7f:
7f:5c:af:4d:4c:dc:3a:4b:b2:98:c5:b2:67:39:12:c0:8c:0e:
1f:8a:85:72:2f:9f:ba:e1:90:ef:fe:69:2b:e0:5c:dd:06:0a:
87:89:47:0f:ce:4d:e1:3d:d3:42:65:ad:73:35:ed:bd:a0:5f:
c4:ca:e0:27:e8:1c:80:74:b3:5b:70:dc:d9:1e:40:32:d7:ee:
dd:6e:2a:83:1a:bc:10:07:64:bf:1a:4b:e5:59:6e:05:76:73:
64:2d:07:3d:55:28:d6:ed:c7:3b:ae:51:fb:be:a8:e9:50:4e:
0b:8f:20:3d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 9 11:01:50 2026 by rpki-client