Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24FEDDD4332711F19A1D98FBCE1D38B0.roa
File: 24FEDDD4332711F19A1D98FBCE1D38B0.roa (raw, json)
Hash identifier: EnIqRD4wqhXoQTQVipFHxvCqVGmkkBI9sTvraosI9lE=
Subject key identifier: E4:EF:0E:70:27:FF:9C:1E:DC:F8:18:CE:72:C0:19:82:3A:28:0A:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C386
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24FEDDD4332711F19A1D98FBCE1D38B0.roa
Signing time: Wed 08 Apr 2026 08:44:24 +0000
ROA not before: Wed 08 Apr 2026 08:44:20 +0000
ROA not after: Sun 30 May 2027 08:44:20 +0000
asID: 141109
IP address blocks: 154.209.93.0/24 maxlen: 24
154.209.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115590 (0x1c386)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 8 08:44:20 2026 GMT
Not After : May 30 08:44:20 2027 GMT
Subject: CN=69d61568-f09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:4c:2f:e7:98:b2:54:55:0c:91:fb:e4:ac:02:
2a:54:1d:fc:ca:6c:0c:93:ad:65:84:76:b2:67:51:
2d:5b:2a:36:3a:ac:c2:06:92:ea:13:ef:99:5d:a4:
7e:1f:a6:f4:bc:4e:30:b4:8b:41:f2:88:40:88:52:
3d:4a:c2:b2:6c:97:e5:92:e0:33:ed:3d:9e:5e:a0:
b0:94:a6:da:1f:1d:de:04:e5:c6:11:19:4f:31:92:
43:5a:0e:70:1f:ea:52:53:40:18:9e:57:4f:fd:99:
fc:01:38:f6:30:50:65:5a:0f:b4:6e:5c:11:2b:f4:
b2:c8:0a:6f:56:a5:5a:4b:28:44:01:25:5f:43:3d:
00:bf:ff:69:e8:cf:08:29:ea:5c:dd:b2:98:1f:c2:
94:3b:e8:5d:65:b7:7a:80:96:a0:77:0b:1b:c3:d1:
ad:4c:66:e5:e5:45:4e:f5:49:7c:3b:eb:e2:5b:a6:
db:a7:b5:a8:30:6b:43:e4:71:65:e1:7a:d9:20:f4:
8d:7a:1f:3f:f0:7f:55:bd:a5:05:c9:e6:03:4c:08:
86:bb:0b:80:5a:cb:85:a6:5d:0f:10:16:43:b3:78:
b6:d5:59:b2:c6:e0:26:4b:6b:92:7d:c3:52:c0:9d:
cc:ad:8f:a2:8d:a8:05:49:aa:b7:1c:a0:fc:6a:5a:
26:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EF:0E:70:27:FF:9C:1E:DC:F8:18:CE:72:C0:19:82:3A:28:0A:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24FEDDD4332711F19A1D98FBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.93.0-154.209.94.255
Signature Algorithm: sha256WithRSAEncryption
af:81:af:97:9b:47:f6:46:e4:7f:5a:d2:b8:9a:e1:af:34:8f:
7c:d2:ae:1f:32:36:76:8d:fe:6c:5b:4d:fc:7f:94:7d:e4:2f:
73:2d:4d:d8:da:97:f3:98:ff:92:d7:f5:85:5a:74:b5:7c:08:
14:fe:d5:83:35:27:82:d4:07:04:ab:4f:0f:54:23:f2:de:e3:
bd:d7:36:43:59:c0:66:93:0b:34:ad:63:4f:5b:5c:3e:e8:53:
26:ba:cc:fe:a0:79:cc:68:36:28:34:be:6e:7f:3a:4c:5a:8a:
8d:92:f3:3c:15:6a:ae:a8:9e:ab:e2:54:b7:86:b7:e2:4e:13:
43:23:1f:4a:6a:b6:f3:63:80:9d:62:88:09:6a:36:be:e6:ba:
40:09:fb:35:76:25:4b:a9:73:6a:80:25:c5:27:c7:56:6d:ad:
33:e8:e5:77:43:06:c5:9f:23:38:50:6c:25:7b:76:dc:39:88:
c5:ea:16:26:25:4e:1b:0f:1e:9c:0f:b1:4c:35:91:c3:6c:05:
39:03:6f:b4:90:e1:7c:ad:3b:e1:ee:1b:70:db:55:e6:1f:aa:
91:5f:18:b1:36:93:93:d2:2c:6f:d8:71:63:86:84:71:89:3c:
d7:7e:d7:82:db:a8:d1:e0:ad:63:19:58:2e:d3:5e:58:88:46:
b0:95:f0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:28:29 2026 by rpki-client