Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2D4FC0E49C911F1A206A70FCF1D38B0.roa
File: E2D4FC0E49C911F1A206A70FCF1D38B0.roa (raw, json)
Hash identifier: s3yZbu+Bp5WufUXl5PT5CIC71gUmxUHePks2HmDhEGk=
Subject key identifier: 5E:6A:0A:F0:39:FE:AF:8D:6D:56:AF:53:73:1B:68:60:69:01:33:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C9B4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2D4FC0E49C911F1A206A70FCF1D38B0.roa
Signing time: Thu 07 May 2026 04:04:47 +0000
ROA not before: Thu 07 May 2026 04:04:42 +0000
ROA not after: Fri 15 May 2026 04:04:42 +0000
asID: 137443
IP address blocks: 154.223.168.0/24 maxlen: 24
154.223.169.0/24 maxlen: 24
154.223.170.0/24 maxlen: 24
154.223.171.0/24 maxlen: 24
154.223.176.0/24 maxlen: 24
154.223.177.0/24 maxlen: 24
154.223.178.0/24 maxlen: 24
154.223.179.0/24 maxlen: 24
154.223.180.0/24 maxlen: 24
154.223.181.0/24 maxlen: 24
154.223.182.0/24 maxlen: 24
154.223.183.0/24 maxlen: 24
154.223.188.0/24 maxlen: 24
154.223.189.0/24 maxlen: 24
154.223.190.0/24 maxlen: 24
154.223.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117172 (0x1c9b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 04:04:42 2026 GMT
Not After : May 15 04:04:42 2026 GMT
Subject: CN=69fc0f5f-394c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5c:6a:d9:00:6d:63:50:46:58:be:9f:ab:2e:
2a:fc:73:78:f2:82:17:ad:34:1e:f2:a4:4e:c4:cb:
fe:c8:f2:3d:32:18:41:ad:4b:1f:cd:b2:14:fb:29:
46:3e:32:b0:f2:63:c4:da:4f:e1:a1:3e:f0:c7:e7:
26:97:a5:2a:74:76:0c:12:60:89:e3:7f:8c:cf:90:
c5:8b:63:77:55:3e:0a:a7:7d:c6:b3:22:db:ac:32:
26:43:fa:02:57:c3:64:bc:ff:77:01:1f:8a:ea:fd:
12:19:54:0e:31:53:2c:ad:16:d6:f9:59:d2:83:f8:
9e:59:f7:aa:93:8f:b8:03:09:47:65:e9:05:10:a9:
ab:ca:0d:ee:bc:66:3d:24:13:26:66:30:07:af:28:
49:1d:f8:eb:52:cc:19:cb:81:dc:ea:77:6f:d8:dd:
8e:be:c8:ca:80:c2:f7:d7:4d:6e:ed:e6:10:f2:98:
a9:19:cf:01:32:68:f0:0f:d0:d6:a2:58:b2:8f:d1:
90:3b:66:6c:6b:b2:10:d2:41:3f:48:b7:51:4e:80:
3a:0c:6d:6b:5d:2f:aa:46:9c:17:94:63:ce:c5:8f:
b4:71:87:f3:b0:6d:30:fe:a2:93:a6:58:06:2d:c3:
87:66:59:26:ff:93:0d:19:16:b0:2d:7e:38:b1:bf:
fe:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6A:0A:F0:39:FE:AF:8D:6D:56:AF:53:73:1B:68:60:69:01:33:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2D4FC0E49C911F1A206A70FCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.168.0/22
154.223.176.0/21
154.223.188.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:bb:37:26:a9:fb:75:4f:fd:f4:a2:61:67:a8:8b:ae:1a:3f:
17:7c:b4:6f:24:2a:c1:91:8a:7b:03:5a:2f:ff:a7:05:d7:d1:
a8:86:bc:43:dd:28:a0:1e:a9:2a:58:38:fb:3a:32:68:a4:47:
1c:07:9a:a6:54:bd:c0:ee:16:41:f3:0f:2f:fc:e1:a0:87:59:
3e:ff:ac:46:84:28:6c:75:b5:62:ac:b2:74:83:6a:f0:c5:13:
63:29:ea:22:bf:87:53:f1:85:7d:d7:c5:df:c7:c9:fa:96:a3:
db:e5:3b:33:c5:76:92:51:0c:b4:0e:c3:eb:d4:5f:11:05:03:
aa:7f:56:6d:ad:ee:75:b2:71:3a:bb:1c:44:82:8b:11:6c:db:
44:fc:72:c1:46:e7:f2:33:4d:0c:d2:c3:20:be:b8:bc:84:8f:
48:d8:59:10:73:e8:63:4f:fb:44:d9:9f:5f:cd:95:d0:4c:5c:
2d:d0:3f:9d:de:14:64:a2:63:31:47:7e:78:f8:f5:32:9b:31:
90:48:7f:3f:be:52:56:97:dd:87:1d:40:64:16:bc:b0:10:fd:
17:ee:93:2e:06:ca:a7:3e:28:f5:ca:a1:83:5b:63:6a:4b:3d:
05:ef:e6:87:1c:83:45:6f:6c:1b:49:2e:db:91:f8:38:6e:c2:
ff:72:bb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:58 2026 by rpki-client