Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EF76204340D11F1BDD29EF0CE1D38B0.roa
File: 0EF76204340D11F1BDD29EF0CE1D38B0.roa (raw, json)
Hash identifier: reXJ8lPfPAkOeeztsOh3kQWfLF9HJbuHeY6RENVNQcg=
Subject key identifier: 9D:89:5C:11:90:AB:70:08:DE:E2:0B:B6:C6:56:E3:5A:83:84:0B:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C3E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EF76204340D11F1BDD29EF0CE1D38B0.roa
Signing time: Thu 09 Apr 2026 12:10:12 +0000
ROA not before: Thu 09 Apr 2026 12:10:07 +0000
ROA not after: Sun 19 Apr 2026 12:10:07 +0000
asID: 9304
IP address blocks: 154.82.134.0/24 maxlen: 24
154.82.148.0/24 maxlen: 24
154.82.153.0/24 maxlen: 24
154.82.158.0/24 maxlen: 24
154.82.196.0/24 maxlen: 24
154.82.197.0/24 maxlen: 24
154.82.198.0/24 maxlen: 24
154.82.199.0/24 maxlen: 24
154.83.65.0/24 maxlen: 24
154.83.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 12:10:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115684 (0x1c3e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 12:10:07 2026 GMT
Not After : Apr 19 12:10:07 2026 GMT
Subject: CN=69d79724-a597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0b:ae:76:90:b3:28:a8:f6:35:5f:5a:59:7d:
75:a2:b6:47:b7:2f:4d:5c:0d:dc:27:7a:f3:7d:54:
e4:da:a8:96:19:b0:3c:16:3a:f3:8b:bb:e5:5f:a1:
14:42:00:d0:79:ea:13:13:ca:9b:bb:00:32:ae:1e:
3f:c0:ee:b6:db:c8:9e:23:89:9c:b6:a2:62:76:3f:
11:ad:73:8c:12:bf:97:5a:24:75:6e:aa:11:6c:bb:
0e:f1:fe:da:79:e7:b9:35:da:d7:ae:8a:16:1d:e7:
2b:d0:99:7b:44:49:e0:81:90:64:dc:3a:90:70:16:
4e:8c:b3:28:b9:53:c2:e2:5c:85:c6:e8:02:48:04:
89:92:81:42:89:b6:75:3c:d3:8e:f1:00:e0:8d:1f:
c9:5b:b4:64:0d:58:7e:80:03:8b:b3:54:63:cd:53:
fa:e5:4b:e5:f6:75:63:8c:7d:68:07:a7:25:73:71:
fe:00:6c:30:0e:b5:2b:11:14:c6:7f:34:ea:b8:66:
fd:15:d8:13:0b:c9:6a:5d:4a:b8:b1:dc:ac:0a:2c:
a8:ab:f2:6a:44:76:ec:e2:da:af:e0:e7:a0:32:3f:
2d:31:bc:8d:26:9e:26:e0:0f:37:3d:ef:1b:f7:02:
a3:ab:16:a0:fb:67:f1:6f:ee:47:94:9c:48:27:9b:
4f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:89:5C:11:90:AB:70:08:DE:E2:0B:B6:C6:56:E3:5A:83:84:0B:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EF76204340D11F1BDD29EF0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.134.0/24
154.82.148.0/24
154.82.153.0/24
154.82.158.0/24
154.82.196.0/22
154.83.65.0/24
154.83.67.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:35:7a:c4:72:20:bc:b6:11:3b:f5:47:54:4a:a0:f2:f0:49:
0e:39:fb:3a:16:fa:27:0f:0f:be:91:e3:c8:5e:68:b9:7b:71:
d7:fd:e9:1f:7b:e4:11:5a:4e:fa:81:6f:ba:10:8c:bb:81:3c:
b2:1c:8d:55:e3:bc:ec:e5:4c:e1:ff:d0:1a:70:8b:c7:52:97:
63:8a:fb:bb:7b:8e:7f:44:45:ec:54:0c:0c:b5:43:1e:32:44:
95:33:46:cb:ba:67:2d:89:e5:91:da:66:df:5e:c4:18:59:ed:
8a:ec:9a:74:fd:d7:67:bc:08:7d:54:ff:dd:4c:4a:80:8c:ed:
ff:f2:0b:0f:e7:a7:f6:97:ce:74:05:78:c2:d6:2c:b2:7b:74:
ea:c0:79:2e:b2:35:c1:a6:51:b0:77:ba:d4:78:67:b1:f8:41:
e1:ac:5f:3d:e9:9e:53:5b:b7:ac:2c:58:d5:21:5a:91:2c:1c:
f2:ba:b3:67:09:bd:68:3d:b9:9b:76:a6:d2:2a:1c:48:14:ab:
07:ba:27:a1:1a:bd:2f:ec:5b:d7:86:ad:ba:59:87:12:b7:aa:
c8:0b:2c:c7:53:ed:74:92:6d:df:8a:90:92:fc:78:e7:85:08:
3b:56:19:24:e6:18:ba:0d:a5:95:1d:9e:a5:37:e4:9e:14:15:
3d:0a:91:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:41:50 2026 by rpki-client