Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA1C761C493A11F1B9F5C0A8CE1D38B0.roa
File: DA1C761C493A11F1B9F5C0A8CE1D38B0.roa (raw, json)
Hash identifier: 8Jr1dbmtzvmPiiczy+8fgROkddJS5fCn3JJJJyWqLFA=
Subject key identifier: 66:CA:41:6C:E1:CF:9D:D3:C3:8B:58:AF:41:E3:AC:9B:C0:65:EE:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C9A1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA1C761C493A11F1B9F5C0A8CE1D38B0.roa
Signing time: Wed 06 May 2026 11:00:54 +0000
ROA not before: Wed 06 May 2026 11:00:50 +0000
ROA not after: Sun 06 May 2029 11:00:50 +0000
asID: 17561
IP address blocks: 154.85.228.0/24 maxlen: 24
154.85.229.0/24 maxlen: 24
154.85.230.0/24 maxlen: 24
154.85.231.0/24 maxlen: 24
154.85.232.0/24 maxlen: 24
154.85.233.0/24 maxlen: 24
154.85.234.0/24 maxlen: 24
154.85.235.0/24 maxlen: 24
154.85.236.0/24 maxlen: 24
154.85.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117153 (0x1c9a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 11:00:50 2026 GMT
Not After : May 6 11:00:50 2029 GMT
Subject: CN=69fb1f66-0ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c6:08:ea:04:a9:43:db:4a:d1:42:44:d5:1d:
07:15:73:dc:75:d5:aa:82:4e:50:8d:cc:4e:9d:12:
dc:0f:5e:1e:63:ba:8a:ed:1e:57:b8:6c:d6:c6:c1:
de:d8:aa:fd:c3:83:b1:84:dd:1d:52:8d:76:dd:95:
40:78:37:6f:d3:52:a9:e8:9a:17:11:2a:36:8f:8c:
fd:d6:4f:ee:ed:d1:68:c4:59:d0:68:4c:0d:66:01:
1c:29:90:5f:71:1f:6f:41:2d:67:3e:45:6f:92:69:
07:77:56:e0:fc:a3:75:1d:91:2e:89:65:b3:ee:59:
5c:ba:04:41:f2:c0:0d:61:d5:98:bc:b8:b4:ca:5d:
87:0f:fc:63:34:bc:0e:0b:dc:c4:df:7f:52:2c:3e:
ed:a1:f5:f5:d0:3c:a0:73:c0:20:ec:29:8c:98:9d:
29:43:73:1a:ac:5b:15:16:cd:d8:68:c3:64:1e:62:
63:4c:81:f4:36:64:e1:80:62:28:2b:47:ef:84:84:
52:1c:e1:ed:a4:ca:6a:ae:b8:e1:84:4e:d9:c8:9a:
86:ba:fa:6d:29:5b:2f:a6:cb:48:cf:dd:31:a7:43:
21:d4:f0:2c:4c:b7:12:72:87:a3:9b:1b:f2:89:8b:
53:b1:e2:f3:38:22:e6:60:3b:fc:5b:88:09:22:68:
85:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CA:41:6C:E1:CF:9D:D3:C3:8B:58:AF:41:E3:AC:9B:C0:65:EE:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA1C761C493A11F1B9F5C0A8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.228.0-154.85.237.255
Signature Algorithm: sha256WithRSAEncryption
cf:95:e9:56:b5:ae:16:6e:22:43:3c:16:bc:67:53:6e:2a:0f:
fb:2f:91:0f:03:23:6b:ad:69:5a:19:67:97:27:61:4c:9c:c7:
97:47:97:a9:92:26:70:69:93:95:6d:ff:31:a7:e9:c1:cf:7c:
09:c9:53:1f:0a:e4:26:0c:23:58:4b:53:00:2c:fc:b4:40:c3:
be:a3:7b:af:0a:02:94:85:8a:ad:db:da:6d:d1:48:fd:fd:a7:
69:90:c0:26:b5:8f:8b:98:e7:fb:ef:f0:64:b8:06:4a:bd:09:
09:27:d6:21:c6:56:37:06:f9:96:4c:b3:59:56:3d:02:35:91:
f8:35:89:c7:1b:9e:c1:28:9d:a2:de:3a:3d:c7:15:02:e9:15:
86:d1:64:56:36:7d:b4:71:3b:72:47:a8:31:66:27:55:f2:6a:
b1:a5:fe:db:1f:44:97:ae:cf:f2:d1:4a:59:0e:7d:68:3c:f0:
54:33:af:c4:ec:c5:63:6a:b7:1d:18:f3:97:9b:be:0b:ff:02:
dc:a2:65:77:b1:3a:cf:c9:c6:ab:2d:e9:b1:82:8f:79:e6:ef:
87:12:87:41:15:9e:41:37:69:56:ad:4a:38:04:44:f3:58:c3:
60:3b:aa:c3:f1:e8:96:ec:6d:fe:63:de:7d:8b:a9:16:2a:bd:
1a:f3:1d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:49 2026 by rpki-client