Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EE810F038D211F1AAAC58FACE1D38B0.roa
File: 0EE810F038D211F1AAAC58FACE1D38B0.roa (raw, json)
Hash identifier: z/4CGdxa20ruEzkJ2qnHhl0v0AUqwXJoad+hIQq9WBo=
Subject key identifier: FE:E2:F0:98:B6:D5:5E:4F:5E:C3:5D:32:A0:27:06:48:22:94:E5:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C56C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EE810F038D211F1AAAC58FACE1D38B0.roa
Signing time: Wed 15 Apr 2026 13:50:27 +0000
ROA not before: Wed 15 Apr 2026 13:50:22 +0000
ROA not after: Thu 30 Apr 2026 13:50:22 +0000
asID: 32043
IP address blocks: 154.195.8.0/24 maxlen: 24
154.195.9.0/24 maxlen: 24
154.195.10.0/24 maxlen: 24
154.195.11.0/24 maxlen: 24
154.195.12.0/24 maxlen: 24
154.195.13.0/24 maxlen: 24
154.195.14.0/23 maxlen: 24
154.200.8.0/22 maxlen: 24
154.200.12.0/22 maxlen: 24
154.200.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116076 (0x1c56c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 13:50:22 2026 GMT
Not After : Apr 30 13:50:22 2026 GMT
Subject: CN=69df97a3-f8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6f:12:b6:3c:42:79:d7:90:be:63:52:ea:af:
50:1a:f6:68:b6:fd:44:6c:16:98:6e:06:94:c6:c6:
22:e2:61:f2:fe:76:80:eb:45:2c:ac:77:1d:66:51:
e3:32:de:a6:54:4d:82:5b:dc:3b:e6:38:3f:23:e8:
17:8d:93:dd:96:cf:8b:bd:49:e5:79:d2:7c:85:9e:
19:27:f2:cb:76:bb:82:d3:45:2c:17:04:8d:83:e6:
d7:7d:c5:1d:98:17:69:06:77:a3:a0:5b:a5:50:7b:
93:2b:1e:64:54:36:17:50:93:34:fb:1b:86:ae:00:
5e:77:9f:59:fe:cf:e2:51:bc:ef:8a:d6:e1:ef:10:
8c:6b:61:22:45:31:e3:14:7a:14:03:16:87:dc:41:
b9:ad:c1:6f:0b:46:95:46:fe:7b:32:59:8f:22:d6:
4d:83:81:56:33:a4:76:1c:f6:8d:b2:23:ad:6e:81:
91:aa:a4:17:8c:61:7e:2d:b3:33:df:12:05:28:b3:
05:81:4c:41:f1:b0:8a:99:0e:91:ad:08:14:92:50:
fc:e0:3a:ac:df:63:5d:a3:38:fc:03:8c:65:c6:0b:
fd:0d:6e:11:00:f5:ab:fe:56:ae:93:7a:39:9f:58:
ac:83:49:fd:01:99:ad:8d:e6:bf:e7:2d:be:b4:b8:
ef:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E2:F0:98:B6:D5:5E:4F:5E:C3:5D:32:A0:27:06:48:22:94:E5:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EE810F038D211F1AAAC58FACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.8.0/21
154.200.8.0-154.200.17.255
Signature Algorithm: sha256WithRSAEncryption
aa:8f:cf:13:7a:03:aa:23:03:eb:76:4a:50:01:a5:72:10:7a:
5a:d3:b5:4a:b4:e4:08:fb:3f:87:73:7c:e7:a5:9f:b3:e5:5a:
6d:eb:13:13:f7:7a:a6:ab:1c:64:d5:d4:6e:39:db:62:8c:be:
d7:90:fe:20:28:3f:d4:31:dd:b6:5e:b7:5f:b3:e4:cf:e0:53:
14:f6:a1:81:1b:22:36:0e:a8:c0:cc:a7:1c:fd:ab:c7:9e:01:
7a:b5:4e:68:c3:3f:d8:89:2b:46:74:7a:4d:be:aa:1c:20:64:
8e:7a:54:e8:71:92:79:26:35:59:41:eb:ae:64:84:5f:ea:a8:
03:2c:3c:25:92:91:ec:f9:8e:e3:79:c1:14:db:49:04:2a:3f:
9e:7d:45:a1:79:13:17:dc:85:a1:ac:44:f2:17:d2:48:37:51:
91:9f:a4:fb:4c:bd:58:6b:77:e5:5c:83:ed:87:3f:26:00:ab:
59:95:d2:72:a1:c0:b7:42:9b:ad:b9:6f:c4:a7:99:9b:bf:6d:
79:ff:d2:37:d1:62:5e:00:11:34:d8:12:e4:3a:00:ea:4d:2a:
e3:bf:ca:aa:b1:f9:ee:cd:10:62:77:44:50:d6:02:5e:2e:67:
05:84:04:64:45:e9:d5:08:de:fc:c9:19:dd:ca:e1:bd:85:70:
af:0f:ab:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:25:20 2026 by rpki-client