Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C36BECA6421711F1AD4D2CC4CE1D38B0.roa
File: C36BECA6421711F1AD4D2CC4CE1D38B0.roa (raw, json)
Hash identifier: vsgEiovE+FcJ/uHJ/F/rlo5VjuyRPEpqTJbjkhHRlXk=
Subject key identifier: 5F:70:B5:B0:10:A1:07:CD:25:A3:00:44:14:9E:7C:64:A2:C2:51:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C79A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C36BECA6421711F1AD4D2CC4CE1D38B0.roa
Signing time: Mon 27 Apr 2026 09:02:06 +0000
ROA not before: Mon 27 Apr 2026 09:02:01 +0000
ROA not after: Fri 27 Apr 2029 09:02:01 +0000
asID: 17561
IP address blocks: 154.90.28.0/24 maxlen: 24
154.90.29.0/24 maxlen: 24
154.90.30.0/24 maxlen: 24
154.90.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116634 (0x1c79a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 27 09:02:01 2026 GMT
Not After : Apr 27 09:02:01 2029 GMT
Subject: CN=69ef260e-53ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b3:62:6c:74:79:bc:28:19:f8:56:2e:8a:bf:
ed:fd:b3:48:e0:25:a6:9a:26:e8:fa:42:d6:7e:28:
df:66:45:3f:f0:e5:ea:4c:5b:1b:40:fd:50:35:f5:
9e:52:c1:7c:db:97:7d:cf:d0:0a:b4:56:8b:b9:e8:
2a:03:45:54:7f:6c:36:eb:73:8d:10:7e:df:88:b4:
4f:b4:ae:48:11:5e:ec:34:5d:89:9c:c0:33:d0:de:
27:6d:66:2f:d8:b9:b5:0e:a6:47:4e:ae:a6:e6:cc:
fe:46:b9:da:75:d2:f7:48:4c:9f:05:43:e8:4f:ef:
21:c7:78:ab:71:4f:d1:07:39:96:4a:64:d9:67:0f:
2f:f7:68:7d:b8:ab:8b:01:5b:73:48:97:d4:7d:a3:
ab:de:84:d9:e2:2c:45:5a:9d:1c:1f:22:db:af:79:
7b:36:ce:1c:de:f8:f4:29:fa:6b:f1:bc:1f:54:22:
49:a9:23:c5:15:80:d2:0d:fd:55:95:92:ed:95:d4:
ba:76:cd:b1:e8:50:ae:74:ac:48:a2:24:97:5e:ef:
9e:67:24:28:a1:7f:3b:50:85:fe:a9:01:97:80:47:
0b:76:9a:07:55:9a:c5:64:09:8e:bf:72:f7:a2:27:
21:b2:ed:a3:71:0f:cd:26:45:73:4b:2f:92:25:e7:
f5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:70:B5:B0:10:A1:07:CD:25:A3:00:44:14:9E:7C:64:A2:C2:51:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C36BECA6421711F1AD4D2CC4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.28.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:59:c8:1c:61:c4:a1:e1:91:09:1a:bc:83:e2:73:52:01:e0:
f0:4e:cc:79:ba:99:79:14:23:9e:34:c7:53:59:6a:d8:fc:6a:
6f:f0:ec:cb:62:a2:39:f2:da:b5:d0:19:b8:26:00:3c:3b:63:
db:cb:11:bd:e4:a6:82:17:02:1e:8a:a5:ad:76:cd:04:23:a2:
c4:78:d3:37:66:85:90:7a:8b:4c:65:a4:23:5c:9d:61:79:df:
13:7d:33:ac:c2:fa:75:93:3b:33:61:29:f7:02:72:ad:c0:81:
ea:4f:8c:fd:f7:8f:d8:46:4d:f3:19:bd:f0:90:a7:f2:81:75:
95:09:77:61:03:1e:5b:24:97:fc:32:1a:71:fc:90:83:1e:38:
d9:9a:c0:c3:4e:3f:63:d7:7d:9c:e1:e8:d9:87:d2:58:5d:7c:
9a:10:cf:37:86:c2:ee:3c:40:30:6d:3e:7f:3e:50:06:46:6a:
45:89:5d:21:87:f2:35:28:fa:70:17:43:10:30:ff:ea:6f:c2:
0f:4c:3b:01:3b:33:9d:41:4a:7d:e3:e6:43:6c:2c:9d:af:1a:
31:1e:34:c1:3f:82:98:6c:92:ec:ba:98:12:a3:ca:fa:ad:bf:
97:14:12:37:90:e3:d4:1e:07:b7:83:58:3d:0e:37:3c:f1:ca:
4c:cf:62:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:00:12 2026 by rpki-client