Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29543218341111F19EF5E708CF1D38B0.roa
File: 29543218341111F19EF5E708CF1D38B0.roa (raw, json)
Hash identifier: 4rAHlRuqlqbWL7pHny6KGRdtccbdwx/7wTJSIfFIqzQ=
Subject key identifier: BF:10:8C:13:24:C3:70:21:1D:DA:AB:F1:AA:C0:BA:41:E4:E1:58:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C3EE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29543218341111F19EF5E708CF1D38B0.roa
Signing time: Thu 09 Apr 2026 12:39:34 +0000
ROA not before: Thu 09 Apr 2026 12:39:29 +0000
ROA not after: Sun 19 Apr 2026 12:39:29 +0000
asID: 9304
IP address blocks: 154.200.37.0/24 maxlen: 24
154.200.43.0/24 maxlen: 24
154.200.46.0/24 maxlen: 24
154.200.48.0/24 maxlen: 24
154.200.51.0/24 maxlen: 24
154.200.52.0/24 maxlen: 24
154.200.53.0/24 maxlen: 24
154.200.54.0/24 maxlen: 24
154.200.60.0/24 maxlen: 24
154.200.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 12:39:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115694 (0x1c3ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 12:39:29 2026 GMT
Not After : Apr 19 12:39:29 2026 GMT
Subject: CN=69d79e06-13b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:12:1a:4f:2d:bb:ac:8a:0c:89:db:cd:ba:83:
69:63:58:00:b6:56:28:74:6a:94:2e:12:d5:98:dc:
97:ec:2b:92:f8:52:55:f4:0a:5f:2b:c5:aa:37:c3:
fc:30:e7:7f:fe:a2:e6:d5:d8:77:08:e4:b2:f6:2e:
dc:10:83:63:5c:70:fc:42:13:e8:cf:a9:06:6f:39:
52:c3:61:9d:4c:d1:9a:ca:24:f8:3a:83:24:64:57:
fe:b8:90:f4:3e:13:ca:97:1e:73:f7:d0:48:0b:9c:
41:96:ef:3f:10:ff:e9:2e:ee:31:b4:73:ce:35:50:
37:0c:70:5c:ce:9a:d8:fe:15:a0:eb:cc:59:79:2f:
0f:ca:88:3a:59:75:d2:23:ce:47:b3:43:83:56:b0:
bf:f5:01:87:f2:65:8d:f3:d8:bf:8e:17:8d:ce:f3:
fe:04:11:d1:f3:95:25:85:f3:69:5b:bf:e4:aa:8d:
7b:ce:b4:94:1e:3b:65:e8:cf:a8:08:6a:e6:5b:6d:
d9:18:03:58:67:ad:87:57:ee:60:1c:a1:e4:4f:8b:
de:92:a7:5f:26:53:c1:75:45:e4:23:08:98:9e:5d:
91:ee:ca:3f:8e:42:53:7d:cb:76:0c:62:26:ec:24:
fb:c5:85:c9:b4:f8:b4:46:b9:13:b9:76:49:1f:a1:
f9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:10:8C:13:24:C3:70:21:1D:DA:AB:F1:AA:C0:BA:41:E4:E1:58:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29543218341111F19EF5E708CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.37.0/24
154.200.43.0/24
154.200.46.0/24
154.200.48.0/24
154.200.51.0-154.200.54.255
154.200.60.0/24
154.200.129.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:b7:e3:a1:f9:8c:2d:51:fe:25:c6:f2:f8:49:35:b0:fc:8c:
fd:a6:47:07:50:3d:32:ca:91:da:b5:65:b3:0d:90:fa:c2:01:
11:f2:07:28:62:7e:19:a9:da:67:b5:d8:e7:2d:45:6a:9f:4f:
14:86:76:ba:7e:06:ea:4e:b6:dc:07:9e:be:5c:03:62:38:96:
04:38:b2:a4:5f:44:21:9f:96:dd:62:64:71:1e:7c:0f:c5:fa:
4f:c5:76:f1:3e:e0:af:9b:0b:b3:87:e7:32:25:3d:02:0f:52:
ad:e7:c5:db:43:eb:bb:89:4e:e1:a8:86:5b:29:75:6f:5c:da:
53:12:31:e7:db:08:4e:12:64:df:7f:95:27:1a:da:e2:5d:44:
3a:63:ed:3b:e5:73:57:94:b6:c7:7f:40:dc:d9:d9:67:e5:36:
93:4a:4c:da:d0:73:93:44:bb:b1:69:42:6b:db:5e:36:cb:a0:
88:2a:1d:16:ef:fb:3e:84:8d:b1:2c:18:b0:51:e1:ff:b3:b0:
a5:e8:14:1d:fb:b6:a0:ce:9c:dc:3f:6e:cd:4f:97:dd:1a:f9:
8e:60:ff:f3:29:08:dd:0f:c6:8b:1a:da:58:35:65:0c:e3:31:
3e:8b:89:07:51:b1:87:10:c4:ea:87:90:44:4e:29:4c:90:a0:
ce:8e:83:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:51:45 2026 by rpki-client