Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0C80576493B11F18CBBBBAECE1D38B0.roa
File: D0C80576493B11F18CBBBBAECE1D38B0.roa (raw, json)
Hash identifier: /dKicJx7Qlg8sJDbKYr7MmcgefS60/Fd1VqFw26Fb1Q=
Subject key identifier: 80:0F:2B:70:1F:B3:2C:2A:F4:07:AB:14:89:04:5B:F9:D8:85:9E:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C9A7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0C80576493B11F18CBBBBAECE1D38B0.roa
Signing time: Wed 06 May 2026 11:07:48 +0000
ROA not before: Wed 06 May 2026 11:07:44 +0000
ROA not after: Sat 13 Jun 2026 11:07:44 +0000
asID: 10753
IP address blocks: 154.92.10.0/23 maxlen: 24
154.203.0.0/23 maxlen: 24
154.203.204.0/23 maxlen: 24
154.203.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117159 (0x1c9a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 11:07:44 2026 GMT
Not After : Jun 13 11:07:44 2026 GMT
Subject: CN=69fb2104-7a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:67:fc:5c:49:25:43:53:0d:17:84:44:2a:e1:
35:bf:89:64:58:ae:d1:68:ce:d1:e6:79:fd:dc:0a:
53:69:fe:b1:4f:bf:c0:70:6d:24:75:68:5d:98:73:
c1:0c:67:8d:73:91:c2:4a:e8:37:b3:c5:c9:20:59:
f3:54:ac:94:fe:db:e3:19:7d:85:da:9e:6b:27:e7:
2c:ae:af:99:4b:05:f4:bd:c9:92:76:2f:4d:86:89:
8c:e5:40:49:61:47:4a:4b:89:e6:5d:09:4b:ae:d7:
ab:26:55:5e:b1:d3:89:11:43:9a:a5:ec:c0:7a:68:
a9:22:d1:04:ce:11:94:89:57:66:dc:09:4d:e2:4c:
e4:72:54:fa:b8:bd:f5:96:d9:84:b8:7f:7c:d7:5d:
af:bc:48:e7:67:29:3e:6e:7e:4d:67:10:ba:d2:19:
64:cb:f3:9e:f1:2b:b7:2e:68:e2:df:4c:f3:ec:8e:
ef:e6:04:c2:61:0f:90:72:11:8b:d2:e2:fe:60:c9:
c9:9b:fb:da:f3:42:80:c5:c9:3e:0b:bc:6f:b2:f9:
0b:bf:29:69:22:2d:17:1e:a9:26:88:df:82:d8:bc:
11:32:9e:20:78:8b:1d:56:c7:4e:98:53:01:f4:c0:
ed:31:46:c2:b7:01:a9:b6:65:d6:96:26:19:32:f2:
31:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0F:2B:70:1F:B3:2C:2A:F4:07:AB:14:89:04:5B:F9:D8:85:9E:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0C80576493B11F18CBBBBAECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.10.0/23
154.203.0.0/23
154.203.204.0/23
154.203.244.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:55:c9:15:d7:2d:f2:8e:f9:f7:7a:72:db:cb:81:c4:3e:25:
8d:8c:1b:7b:11:a3:48:9a:58:9a:31:ae:f5:fd:68:fe:e2:09:
af:29:61:d9:59:6c:f8:d2:0a:71:fb:cf:13:df:be:38:f0:62:
cd:83:df:eb:fb:fc:44:54:5d:80:24:68:dc:1e:01:91:47:0a:
26:2c:b5:ad:f4:fb:14:59:3f:d1:6f:20:9f:8f:34:07:53:95:
03:a1:93:b2:dd:2d:dc:74:1e:53:4d:4a:ad:a5:f4:fc:2e:99:
4b:7b:a8:d6:8e:e4:6c:0a:90:dc:1c:86:c6:21:24:3e:f7:cc:
6a:b6:80:65:56:ad:ce:dd:8d:84:43:43:f9:19:ee:dc:88:00:
bb:80:87:67:6f:d4:e5:b2:e9:89:0e:17:9b:ea:71:38:8f:b8:
b9:85:62:dc:39:14:80:f8:4f:aa:d0:07:43:05:54:d6:54:cf:
d7:c8:8b:09:f1:ad:73:72:32:0b:5d:6b:e2:1f:44:6e:c3:e4:
9a:4e:53:50:a6:9f:5b:22:63:4d:a1:2c:62:5a:f1:95:4e:12:
7f:44:5d:7b:23:7e:0d:92:86:db:d3:b6:db:0f:f1:da:81:7c:
34:01:bf:59:2d:40:1f:d5:dd:ca:91:c1:5c:08:81:60:67:16:
98:22:90:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:18 2026 by rpki-client