Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6D7D88E42D211F1A1BBDAB7CE1D38B0.roa
File: D6D7D88E42D211F1A1BBDAB7CE1D38B0.roa (raw, json)
Hash identifier: zZrh/tk3eQWA+eNVRo9BxmCBV7gTXOWhFLueeniPAk4=
Subject key identifier: D2:91:37:C8:D8:C9:A1:2E:55:D2:D9:37:13:6C:EE:8D:2F:EB:93:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C7A9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6D7D88E42D211F1A1BBDAB7CE1D38B0.roa
Signing time: Tue 28 Apr 2026 07:21:14 +0000
ROA not before: Tue 28 Apr 2026 07:21:08 +0000
ROA not after: Tue 27 Apr 2027 07:21:08 +0000
asID: 328608
IP address blocks: 154.200.241.0/24 maxlen: 24
154.200.242.0/24 maxlen: 24
154.200.248.0/24 maxlen: 24
154.200.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 May 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116649 (0x1c7a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 07:21:08 2026 GMT
Not After : Apr 27 07:21:08 2027 GMT
Subject: CN=69f05fea-032c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:a8:a6:aa:cc:45:10:72:57:e5:01:24:94:
b8:e9:f9:19:59:2b:cf:62:ec:4f:da:64:c4:05:b5:
f0:b0:8e:38:f2:b7:83:89:08:45:09:59:ec:65:ce:
59:d1:10:33:0e:97:59:8c:9d:b9:63:e5:f1:61:dd:
bd:bd:30:e9:81:d8:e7:96:50:59:74:04:46:5f:11:
53:b8:ff:a4:69:89:3e:29:b1:52:04:ef:c6:28:a7:
b6:0b:aa:21:3e:9d:37:95:d3:4c:fb:42:db:be:55:
b3:4a:4a:3b:36:37:da:ba:1e:d5:fb:32:79:cd:89:
46:89:cd:8f:27:dc:94:8d:19:ae:65:ac:ae:87:b6:
73:f1:75:3b:ad:10:ee:38:c5:aa:cc:13:9d:1f:e1:
07:e9:b3:42:57:69:19:41:ac:18:da:21:c2:ad:34:
3b:ff:4a:3e:17:7a:c9:b0:32:3c:a6:8e:55:e6:0b:
56:b1:e2:5c:d1:6a:49:ca:09:69:e7:d9:c1:15:15:
ad:e4:70:f5:cf:ee:f3:49:6d:73:93:62:1f:03:42:
23:e2:ed:b1:18:08:da:51:8a:21:64:13:06:c0:12:
10:1f:c4:03:d0:62:b3:b1:26:4d:1d:f3:41:63:cb:
b1:c7:b8:e2:ac:af:15:b1:25:88:6b:42:d4:74:87:
7d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:91:37:C8:D8:C9:A1:2E:55:D2:D9:37:13:6C:EE:8D:2F:EB:93:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6D7D88E42D211F1A1BBDAB7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.241.0-154.200.242.255
154.200.248.0/23
Signature Algorithm: sha256WithRSAEncryption
17:57:26:21:3e:dd:08:06:e9:91:5f:f0:a6:4a:17:79:f9:34:
f4:cb:ba:38:c6:db:1d:11:56:21:a9:6c:45:20:ff:bb:72:3c:
ea:72:2f:1f:cb:e9:78:04:42:3d:f6:bc:fe:d8:fa:06:be:46:
16:fe:5c:a5:99:fe:4e:6e:31:2b:48:2b:21:64:db:66:83:dc:
e1:9f:bb:ae:be:3c:74:ee:e2:9d:7a:a3:da:55:86:64:25:8e:
c6:83:eb:b1:0f:74:9b:86:4f:a9:cf:e6:47:95:e3:25:03:30:
d6:81:b1:22:d6:3e:20:ef:42:04:92:41:7b:c7:f0:25:8e:e5:
f9:b1:01:b0:02:34:6f:a0:cc:dc:9e:eb:e3:26:ea:b2:ff:71:
63:35:b3:60:c0:82:ae:f8:d0:f1:62:92:d9:20:63:dd:fd:64:
b8:2f:fa:53:09:21:b3:93:d5:85:43:be:1b:a1:5a:48:be:94:
74:c3:9e:c3:62:dd:e7:92:17:5f:a2:71:86:eb:01:0c:af:02:
d5:43:74:8f:6c:da:4d:35:90:76:c8:dd:d7:1b:0f:61:01:e4:
09:96:ed:2c:72:93:e9:fa:71:c3:6d:79:61:03:e9:99:ed:cc:
ae:da:a6:85:b9:5f:68:30:91:aa:83:67:fa:29:d1:1c:9e:d4:
ec:69:2e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 23:49:01 2026 by rpki-client