Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3790CFFE55DA11F1A9FBE0F4CE1D38B0.roa
File: 3790CFFE55DA11F1A9FBE0F4CE1D38B0.roa (raw, json)
Hash identifier: +igEWZtpQRbEQNVyqp/Hh3BK6EryA2Jvlll9BjO/QtY=
Subject key identifier: 4B:2E:0C:60:E6:C4:52:08:5B:B1:B9:C8:E8:FE:7D:2F:7D:41:60:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE06
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3790CFFE55DA11F1A9FBE0F4CE1D38B0.roa
Signing time: Fri 22 May 2026 12:31:55 +0000
ROA not before: Fri 22 May 2026 12:31:51 +0000
ROA not after: Sat 08 Aug 2026 12:31:51 +0000
asID: 137443
IP address blocks: 154.223.168.0/22 maxlen: 24
154.223.176.0/22 maxlen: 24
154.223.180.0/22 maxlen: 24
154.223.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118278 (0x1ce06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 12:31:51 2026 GMT
Not After : Aug 8 12:31:51 2026 GMT
Subject: CN=6a104cbb-d979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:da:0b:dc:11:52:de:eb:e9:3b:14:f6:80:dd:
86:fe:6b:1c:8f:85:84:1b:26:8c:b9:a0:01:ce:0a:
62:ad:b0:e3:5e:c1:00:47:26:14:6f:94:39:19:90:
1c:fd:1a:ae:b4:f9:52:30:04:1d:d8:03:08:bc:58:
23:5a:28:00:4c:86:e5:36:e2:06:91:3f:97:31:46:
fe:f4:d8:2a:35:83:23:94:2f:14:38:46:9c:d3:76:
e9:f8:da:92:6d:24:26:7b:1d:4c:a7:f8:af:07:26:
a2:68:82:16:b8:9c:b6:0c:4b:0f:44:c6:b6:cb:c1:
ad:ab:43:d4:75:b0:4d:1c:6c:c1:25:f5:18:68:f8:
37:c0:19:81:c9:a7:53:3d:77:8d:a1:d4:b9:da:0c:
06:ce:5d:90:a8:79:82:2f:56:72:f1:43:54:1f:9e:
04:64:4a:c0:77:bb:44:1b:52:67:07:53:2e:48:d4:
5e:74:49:a4:64:b1:a7:ad:f6:09:b3:44:a1:a3:83:
7e:5e:8e:58:6e:ca:f7:70:c4:95:d8:f0:45:71:75:
fb:b2:49:31:88:1a:17:96:5c:2f:f7:66:b1:85:5d:
da:5a:16:22:7f:79:83:b5:58:9e:22:52:90:60:dc:
64:bb:cf:14:d7:70:4e:c2:e6:fb:89:5a:bd:49:31:
26:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2E:0C:60:E6:C4:52:08:5B:B1:B9:C8:E8:FE:7D:2F:7D:41:60:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3790CFFE55DA11F1A9FBE0F4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.168.0/22
154.223.176.0/21
154.223.188.0/22
Signature Algorithm: sha256WithRSAEncryption
87:fa:b2:a2:80:e0:05:d9:f4:c8:9e:35:6c:16:49:e6:11:03:
35:25:6d:d6:61:1a:34:a0:7e:11:87:2f:93:80:96:2f:40:89:
92:7d:a9:65:cd:88:8d:ef:77:23:35:bc:f6:9f:0b:96:7f:01:
4b:a4:7d:58:bd:dc:5f:7a:40:26:00:e1:f2:bf:e2:b1:bf:e1:
ee:ce:41:ce:50:2f:36:f1:da:5f:ee:6a:8e:65:73:a4:72:78:
3d:08:e0:22:85:cc:51:bf:7b:7d:b9:2f:cd:f8:ff:b4:b4:81:
8f:14:73:8d:4b:bd:cd:c3:21:59:b4:4a:5e:3b:19:7a:7e:f3:
53:f2:11:74:7e:ff:6e:c0:44:f2:dd:25:11:b7:4c:35:66:1a:
1f:e8:a9:91:da:0e:e6:7b:35:c9:0a:60:a6:96:ed:6c:9e:37:
54:5b:b9:bc:35:af:c8:95:84:2e:40:fd:0e:ad:64:83:6d:88:
ab:78:a4:7d:f2:44:0a:cb:22:0f:05:bb:37:94:bc:24:fd:96:
3b:cd:9c:4d:e1:a9:ad:f3:26:b0:01:18:92:f9:64:9a:0b:f1:
13:12:b2:20:89:ca:08:fa:39:bf:b5:38:6a:a7:2d:96:36:f2:
9b:61:87:a3:24:a9:95:ea:3e:b2:41:04:4d:2e:14:37:c6:5e:
94:84:e2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:53 2026 by rpki-client