Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA27D846551A11F18FC188E3CE1D38B0.roa
File: CA27D846551A11F18FC188E3CE1D38B0.roa (raw, json)
Hash identifier: tnQT62W05au+AZJedcbvjfdZBt0fyaYt97foJf8/iOM=
Subject key identifier: 07:BA:AB:C2:5A:8B:3F:C5:4F:9F:58:46:51:66:2C:92:5E:13:0E:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CD75
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA27D846551A11F18FC188E3CE1D38B0.roa
Signing time: Thu 21 May 2026 13:41:38 +0000
ROA not before: Thu 21 May 2026 13:41:33 +0000
ROA not after: Fri 26 Jun 2026 13:41:33 +0000
asID: 63139
IP address blocks: 154.93.64.0/24 maxlen: 24
154.93.65.0/24 maxlen: 24
154.93.66.0/24 maxlen: 24
154.94.91.0/24 maxlen: 24
154.94.112.0/24 maxlen: 24
154.94.113.0/24 maxlen: 24
154.94.114.0/24 maxlen: 24
154.94.115.0/24 maxlen: 24
154.94.116.0/24 maxlen: 24
154.94.117.0/24 maxlen: 24
154.94.118.0/24 maxlen: 24
154.94.119.0/24 maxlen: 24
154.94.120.0/24 maxlen: 24
154.94.121.0/24 maxlen: 24
154.94.122.0/24 maxlen: 24
154.94.123.0/24 maxlen: 24
154.94.124.0/24 maxlen: 24
154.94.125.0/24 maxlen: 24
154.94.126.0/24 maxlen: 24
154.94.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118133 (0x1cd75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 13:41:33 2026 GMT
Not After : Jun 26 13:41:33 2026 GMT
Subject: CN=6a0f0b92-50e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:86:a9:42:52:ae:89:74:6b:18:dc:2c:b7:
8a:25:db:03:d5:60:0d:55:7b:63:60:9b:c6:e4:68:
5c:e4:c0:c6:c4:34:59:82:90:ec:d4:7d:35:a5:aa:
42:28:2d:a6:6a:14:b6:b3:e2:d8:4f:11:e8:05:36:
eb:47:74:cb:ef:38:a1:6b:90:8b:0d:8a:15:f2:df:
e2:88:b1:69:77:f8:87:d9:26:ff:08:cc:f4:27:23:
1c:6c:af:a3:3a:2c:29:65:eb:a2:29:47:17:a4:bd:
e1:08:04:99:91:12:78:f0:18:ed:ae:92:e2:00:cd:
90:1c:04:dc:c5:df:ef:68:a1:d5:29:31:d6:72:96:
61:f5:bf:61:f9:07:e2:1d:21:9b:62:07:84:71:6b:
5a:30:e8:2c:c8:32:c1:6d:97:dc:92:2a:d6:6e:70:
c8:f6:43:05:7a:a5:7d:26:26:38:bf:32:7c:7a:a7:
4c:76:fe:da:5f:dc:e5:cd:ff:27:17:fb:55:ec:27:
81:03:71:b2:da:00:38:f1:1a:3f:78:3b:6b:d4:a0:
26:22:16:ad:d8:24:81:4b:5c:ed:06:9e:a5:16:d9:
71:75:70:53:cc:01:3e:6c:b1:d0:f5:a3:f0:9e:08:
ae:58:7e:30:5d:7e:ed:3c:b9:c1:04:57:2e:c1:d3:
40:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BA:AB:C2:5A:8B:3F:C5:4F:9F:58:46:51:66:2C:92:5E:13:0E:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA27D846551A11F18FC188E3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.64.0-154.93.66.255
154.94.91.0/24
154.94.112.0/20
Signature Algorithm: sha256WithRSAEncryption
08:fd:ba:ae:b8:c8:1f:34:84:2a:c6:6b:bf:d0:ae:19:32:29:
3d:18:51:59:9d:4f:02:51:58:19:7e:1d:3b:cd:18:23:07:6d:
e2:c5:b5:ea:8c:1c:79:70:fc:6e:65:fd:81:4b:a9:01:0e:6d:
8b:03:9a:72:01:c0:fa:8a:91:2c:64:6f:7a:e5:13:7d:e8:bc:
2b:fc:6e:dc:9d:de:ff:c1:ca:49:70:bd:4c:f8:ca:23:81:28:
69:b2:1f:0e:05:10:8c:16:5a:0e:22:1c:0d:ed:8e:4a:6f:59:
16:2e:e5:9a:c1:d0:73:5c:b4:c3:98:50:3d:b4:1e:a5:1e:e5:
2c:d4:07:89:87:7c:97:dc:4b:75:a5:d6:26:25:ee:8d:c7:23:
c1:a7:f7:b6:6d:08:2b:d6:52:5d:9f:d5:41:16:e3:48:a2:08:
e6:e8:ca:62:6a:a7:d6:df:66:40:ac:4d:6f:07:24:20:be:ec:
59:64:22:8b:f6:3a:ee:8d:4c:3f:ca:4a:22:bb:c3:1d:f2:a7:
99:19:9c:36:c9:4d:7a:27:b5:d3:32:78:2d:71:f7:ef:d7:bd:
d3:18:96:47:1c:df:09:10:a7:66:67:c3:4b:39:31:53:09:c2:
a1:1f:5e:bf:1e:40:97:7a:de:aa:11:0a:3f:3c:c7:3f:b2:f7:
6f:1b:06:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:30:55 2026 by rpki-client