Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4934F883FB811F18D5445CBCE1D38B0.roa
File: F4934F883FB811F18D5445CBCE1D38B0.roa (raw, json)
Hash identifier: 8a0ht3IdmGBPKWJD6FP0RgfJHu6SlKa+sHGEcvrgY9E=
Subject key identifier: 6B:0B:90:17:90:57:14:DE:39:E5:76:9A:E8:62:41:2C:B4:1F:75:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C717
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4934F883FB811F18D5445CBCE1D38B0.roa
Signing time: Fri 24 Apr 2026 08:38:24 +0000
ROA not before: Fri 24 Apr 2026 08:38:19 +0000
ROA not after: Sun 31 May 2026 08:38:19 +0000
asID: 62240
IP address blocks: 154.194.126.0/24 maxlen: 24
154.195.3.0/24 maxlen: 24
154.195.97.0/24 maxlen: 24
154.195.98.0/24 maxlen: 24
154.195.99.0/24 maxlen: 24
154.195.101.0/24 maxlen: 24
154.195.102.0/24 maxlen: 24
154.195.103.0/24 maxlen: 24
154.195.104.0/24 maxlen: 24
154.195.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116503 (0x1c717)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 08:38:19 2026 GMT
Not After : May 31 08:38:19 2026 GMT
Subject: CN=69eb2c00-d452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:05:d9:3c:b2:4e:a0:41:fa:65:7a:c9:8c:16:
ea:ac:a7:f3:73:2a:b5:8a:6d:88:08:7f:49:69:27:
4e:dd:f6:04:53:ca:e4:af:3d:cd:80:45:7a:2a:36:
c3:af:8c:26:dc:f3:92:1c:87:ee:88:c9:da:22:8d:
da:89:0d:7f:55:3a:67:37:e2:74:3e:35:ea:18:5c:
c8:79:57:cc:b6:d6:8f:27:c6:04:0e:a1:87:30:c2:
f2:78:37:02:77:9b:0f:46:34:09:c9:b3:8a:ad:e0:
4e:b2:99:b6:33:98:a6:b2:80:f2:70:d3:bd:89:7b:
55:2d:43:be:83:52:17:c4:bb:83:0a:89:d7:e7:99:
f8:f9:bd:77:10:90:20:c2:a1:92:e1:a5:61:0b:e9:
21:91:93:2c:bb:b1:19:f0:22:2e:e4:2a:eb:b2:57:
1f:f2:4e:1a:d5:3d:08:66:3c:0a:79:a6:76:5a:95:
05:33:5f:ec:0c:88:88:2c:09:ba:93:23:47:ef:98:
c0:46:00:4b:23:17:c1:0e:2a:d2:68:3f:c4:61:51:
71:b2:47:06:5d:85:78:98:a4:12:29:75:6a:8f:8a:
44:fe:24:3a:d7:56:0e:56:64:3e:f4:b9:a9:e1:25:
6b:7e:98:d4:81:08:54:33:b0:14:7c:ca:ff:77:18:
bb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0B:90:17:90:57:14:DE:39:E5:76:9A:E8:62:41:2C:B4:1F:75:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4934F883FB811F18D5445CBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.126.0/24
154.195.3.0/24
154.195.97.0-154.195.99.255
154.195.101.0-154.195.105.255
Signature Algorithm: sha256WithRSAEncryption
a2:0d:72:9a:d1:42:df:8f:b1:3f:fc:31:a2:69:ae:55:89:23:
ff:e6:a2:48:a6:32:bd:02:7f:ab:af:10:89:fa:05:ab:7e:21:
3d:9b:11:17:65:de:a3:5f:e0:d8:82:d2:0e:7e:54:b7:75:c5:
94:88:92:ab:bf:49:77:b0:72:be:e6:b1:2e:62:09:7f:39:4c:
95:e5:96:95:b7:b9:59:e7:65:17:71:27:7a:03:65:d6:d7:6a:
51:9e:a0:35:ee:09:03:67:67:0d:6b:16:6a:f0:5c:e7:d9:95:
18:74:83:1c:7e:e8:b2:19:18:f6:67:da:f4:47:00:06:28:3c:
3e:eb:ec:e5:67:b9:33:12:fc:90:63:73:ed:c6:e1:ee:58:d3:
57:bc:17:00:ce:27:68:9d:6d:82:c8:4c:69:9e:ae:68:b1:72:
bc:9b:fd:fe:43:d9:0c:9b:f0:69:26:cf:71:1e:be:2b:cc:43:
ee:a0:74:93:d3:1b:c9:00:d4:86:6b:55:92:85:fc:95:85:c9:
1b:49:8f:98:28:b7:fa:48:c7:40:99:17:5a:e1:fc:6a:22:a1:
ef:ba:25:78:d0:97:89:8f:0d:f5:31:e9:01:9a:f0:60:7b:a9:
fe:a4:71:0f:4e:cf:06:d4:06:e3:7f:df:28:29:68:62:5d:8c:
38:69:11:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:59 2026 by rpki-client