Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4577702493A11F198FB9EAACE1D38B0.roa
File: F4577702493A11F198FB9EAACE1D38B0.roa (raw, json)
Hash identifier: m+icziB8T1/FnajiM5EN6QYAU1o7/XxbWe5FBhYW5qU=
Subject key identifier: 6B:54:0A:B0:4B:5C:13:C4:CE:D1:18:77:7F:01:E6:FF:BD:CB:82:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C9A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4577702493A11F198FB9EAACE1D38B0.roa
Signing time: Wed 06 May 2026 11:01:38 +0000
ROA not before: Wed 06 May 2026 11:01:34 +0000
ROA not after: Sat 13 Jun 2026 11:01:34 +0000
asID: 4515
IP address blocks: 154.92.10.0/23 maxlen: 24
154.203.0.0/23 maxlen: 24
154.203.204.0/23 maxlen: 24
154.203.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117155 (0x1c9a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 11:01:34 2026 GMT
Not After : Jun 13 11:01:34 2026 GMT
Subject: CN=69fb1f92-8dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3e:82:19:76:c3:9b:c2:ae:74:08:dc:91:02:
4b:38:58:58:9f:90:a4:84:89:44:f2:52:65:cd:7f:
26:dc:09:72:ae:d8:02:4c:07:cd:56:64:46:4d:c0:
76:3c:51:65:28:23:6c:62:88:07:7d:ec:6c:9b:03:
0f:a3:ab:f1:43:25:cb:b7:6b:67:64:19:2d:40:4e:
cd:90:3f:93:6d:68:26:9e:0a:83:92:1d:dd:65:40:
fe:44:22:60:1a:63:ee:f6:df:e3:92:aa:d6:37:ad:
4c:90:41:0a:bc:e5:1b:5f:b3:81:68:34:2f:2e:26:
e7:32:72:01:13:5e:07:45:bb:d7:6b:5f:5b:4a:72:
fd:1d:3c:ad:f6:66:84:fe:49:02:3e:18:1c:2c:68:
a7:f2:82:15:92:f6:ec:f0:d3:f2:cf:da:99:89:84:
fb:de:2c:0a:80:89:4e:54:39:43:69:5f:b8:75:bf:
92:09:5d:42:fc:c7:66:68:89:c2:00:c0:4b:36:30:
72:b6:e2:f9:90:93:a6:f6:fe:e3:d0:aa:8c:f7:d3:
5e:fe:60:63:67:cf:65:fd:3f:5e:3f:e8:35:0b:20:
b0:e7:72:81:fd:b3:c2:1e:1e:aa:e2:86:3e:da:dc:
b2:68:d4:69:d5:bd:cb:24:0f:a0:11:44:5b:18:82:
ae:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:54:0A:B0:4B:5C:13:C4:CE:D1:18:77:7F:01:E6:FF:BD:CB:82:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4577702493A11F198FB9EAACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.10.0/23
154.203.0.0/23
154.203.204.0/23
154.203.244.0/23
Signature Algorithm: sha256WithRSAEncryption
24:8b:37:12:40:f8:5c:60:4c:0e:70:12:e6:53:7e:b8:ff:e9:
07:6d:ee:97:fe:f5:be:b2:70:c3:c4:ec:4f:d9:69:aa:ea:66:
38:6c:93:97:f9:d3:1a:10:7c:d0:9d:31:f1:6e:d2:70:66:3b:
cc:ec:60:3e:41:06:ce:76:94:86:ed:03:20:66:f8:31:29:11:
4d:31:a4:08:1a:69:bd:44:61:bd:09:ca:a1:fb:8e:c8:5d:8c:
14:b0:b5:40:fb:b7:12:83:fe:0d:16:68:0f:d1:38:1e:31:41:
38:ba:ce:5a:30:3a:00:8a:06:c7:22:8f:28:32:1d:f0:9f:3e:
35:e4:0f:28:05:19:0b:18:65:76:83:51:b8:0a:c7:71:b3:8c:
72:93:0a:f7:aa:ca:97:39:99:67:7c:2c:d4:98:81:2b:46:cf:
b2:e3:aa:62:cc:46:ff:2e:00:3d:75:79:da:cc:6f:dc:1d:3a:
20:1c:28:6e:20:c7:50:ac:41:be:e5:1b:9b:d8:e7:12:10:41:
d8:1f:46:28:da:14:20:ca:6b:eb:05:89:1a:a4:bf:84:50:62:
ca:37:2e:04:ae:4d:77:36:cc:32:71:5e:d3:19:3e:1d:fb:cc:
af:6c:c1:9a:cf:b7:4d:53:33:5b:88:da:ec:3e:2a:d9:27:33:
fb:70:ea:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:44 2026 by rpki-client