Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB4C2AEA3D6811F196732314CF1D38B0.roa
File: FB4C2AEA3D6811F196732314CF1D38B0.roa (raw, json)
Hash identifier: hEzxg+kzgnrOK6yK6MZUEwGZgPnsilVKEn7ExRneips=
Subject key identifier: 31:4C:77:26:C5:73:B2:CC:66:03:BD:DB:AD:8A:F1:1C:A9:07:BE:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C64C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB4C2AEA3D6811F196732314CF1D38B0.roa
Signing time: Tue 21 Apr 2026 10:00:53 +0000
ROA not before: Tue 21 Apr 2026 10:00:47 +0000
ROA not after: Thu 28 May 2026 10:00:47 +0000
asID: 49581
IP address blocks: 154.83.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Apr 2026 11:21:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116300 (0x1c64c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 21 10:00:47 2026 GMT
Not After : May 28 10:00:47 2026 GMT
Subject: CN=69e74ad5-441c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7f:33:be:73:0c:79:13:8c:cc:37:ea:04:06:
fc:fd:8b:7d:b3:ea:56:1d:2d:cb:8e:8d:b9:0a:0d:
0c:51:3b:fd:9d:bc:03:0a:95:2c:35:62:1e:14:9f:
06:82:06:14:c2:9f:95:15:57:c8:85:97:87:a9:10:
7e:ac:09:d5:68:cc:fe:f0:3e:4d:14:9f:1a:c0:35:
f1:08:91:da:6c:35:71:bc:89:67:1d:8a:39:08:04:
6f:94:d9:52:c6:50:97:cf:7f:4b:ed:e6:d0:8e:84:
5c:a4:f4:55:bc:26:77:05:de:72:45:3f:4d:e3:6a:
74:a4:23:e3:52:0d:74:c2:23:7e:0c:e8:d5:ee:e9:
3e:44:24:a3:09:65:bc:eb:ed:b1:1d:f7:c5:69:97:
85:01:6a:1a:50:9b:eb:db:6a:fb:44:f5:30:0b:51:
f1:e3:22:18:44:82:b4:59:b7:d8:43:1f:f5:74:e8:
5b:47:c2:c2:2d:a5:b5:81:e2:df:14:c6:7b:4b:44:
91:b1:5d:26:09:eb:13:eb:5a:ad:14:11:f5:8e:80:
29:fc:99:fd:9f:b0:0e:fd:33:bd:e3:20:85:77:7f:
dd:70:a1:2a:10:28:63:85:2c:e2:74:b1:0f:3f:8d:
3a:12:22:08:a4:85:d7:37:9c:02:c1:7d:48:cd:8f:
33:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4C:77:26:C5:73:B2:CC:66:03:BD:DB:AD:8A:F1:1C:A9:07:BE:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB4C2AEA3D6811F196732314CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.208.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:92:28:0a:47:ed:df:79:4a:30:1c:d3:18:85:78:d4:6c:50:
3f:96:50:47:fa:b7:f8:c5:03:31:ea:aa:5d:c8:7a:9e:79:6e:
41:8d:d1:d8:8e:34:5e:08:97:6a:7c:bd:5b:d6:29:88:e2:78:
3b:c0:1d:08:71:4e:35:ae:96:28:34:de:db:ae:ec:c8:30:61:
10:0b:ed:5c:f2:07:14:c9:2b:c4:ae:0a:bc:a2:97:84:0c:5f:
85:cc:9d:2c:60:53:99:f9:3b:6c:2f:5d:dc:d1:5c:87:00:77:
59:09:fb:ca:9c:3d:57:7f:f1:b0:fd:18:83:60:9a:84:08:ce:
82:26:78:84:aa:fa:80:79:95:47:9b:50:19:d6:c1:11:4b:0a:
12:e3:7a:9e:07:4f:a5:c6:a5:63:37:c7:10:33:90:62:59:9b:
c6:82:fc:e0:59:0e:c0:81:3d:ef:cf:4d:d4:f4:9b:27:a3:85:
e2:a4:26:7b:cc:ce:6a:f5:3b:19:74:45:35:ac:9e:7f:2e:58:
9f:84:e9:05:14:2e:c7:b1:d8:2a:53:05:45:76:e2:25:b6:04:
56:38:79:42:88:00:ed:7b:91:5f:f2:54:c5:87:a8:47:30:36:
89:37:1f:c9:5a:0b:39:4c:d7:17:1e:36:e4:9e:e8:17:32:65:
41:14:5b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 01:22:22 2026 by rpki-client