Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53D8547229A511F1A6A767A4DAE4EC9C.roa
File: 53D8547229A511F1A6A767A4DAE4EC9C.roa (raw, json)
Hash identifier: 7sTxyTCmoaWaK5WQiAA1wQLee7QjqbnmNwpAZN6Ba4Q=
Subject key identifier: 41:07:C0:12:24:E1:2F:72:E6:92:6E:D8:1C:74:15:D0:80:EC:D6:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C106
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53D8547229A511F1A6A767A4DAE4EC9C.roa
Signing time: Fri 27 Mar 2026 06:22:28 +0000
ROA not before: Fri 27 Mar 2026 06:22:23 +0000
ROA not after: Mon 27 Apr 2026 06:22:23 +0000
asID: 147176
IP address blocks: 154.83.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114950 (0x1c106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 27 06:22:23 2026 GMT
Not After : Apr 27 06:22:23 2026 GMT
Subject: CN=69c62224-8d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:84:f4:c2:a9:89:28:89:5f:f9:aa:1c:60:93:
70:fc:52:c6:a9:b6:49:ec:37:01:95:f9:a5:72:49:
62:0a:cb:d2:a7:a9:3a:81:3a:50:5b:19:4b:62:a9:
1d:7f:74:67:f2:c8:41:36:e4:4e:88:59:97:6c:c9:
cd:b2:1b:c0:00:d0:6c:49:40:b3:7f:e1:50:34:75:
e6:00:01:76:44:37:1a:60:2c:16:cc:a4:17:5b:cf:
b0:b3:ba:d1:cb:1d:b6:f2:74:05:eb:d0:44:a6:eb:
c9:60:83:c8:af:87:65:2f:f9:11:8a:16:b1:81:c4:
ef:76:5b:c6:d3:f8:a8:fe:32:38:07:b3:06:6d:da:
11:22:bb:b3:56:44:78:80:e3:73:7d:44:2b:be:27:
f5:e8:82:e4:da:f9:65:c9:fb:12:34:26:2c:a2:8d:
20:0c:bf:7f:29:91:f1:03:27:50:53:ae:a4:cf:f5:
58:fa:61:58:be:7c:62:b1:4f:02:7b:2a:62:59:13:
a7:51:f0:00:9a:c4:30:f8:de:67:23:02:91:49:c9:
8c:6d:04:e7:d5:a7:ba:61:34:6a:4f:fd:3b:8b:5c:
63:e0:1b:fe:5c:10:20:7b:f4:75:ff:ea:92:ec:06:
78:62:99:0f:df:21:68:47:ad:25:48:be:3b:12:2f:
60:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:07:C0:12:24:E1:2F:72:E6:92:6E:D8:1C:74:15:D0:80:EC:D6:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53D8547229A511F1A6A767A4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.25.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:f1:3c:f9:a7:de:1f:91:15:bf:85:6c:22:b2:fd:43:37:e5:
69:26:8c:b6:8a:9a:14:86:6a:87:68:ea:1b:7a:e4:68:6f:13:
30:be:2e:8e:9a:62:69:ec:bf:52:23:8f:1a:94:a3:bb:4a:68:
35:17:79:45:88:d3:ff:36:c6:7e:17:57:af:19:33:63:ef:25:
5f:08:ba:de:29:e9:52:e1:af:c6:6a:b6:8d:f8:52:7f:fb:bc:
bc:2a:05:b6:ac:8e:e8:65:0b:5b:3e:bd:36:de:99:51:b5:d1:
ec:6f:db:ff:a3:6c:17:69:51:51:c1:3b:64:73:bf:ba:47:56:
a7:1f:8f:82:ab:54:4b:3b:7a:81:0b:3a:c6:a7:47:d8:1d:8a:
83:26:0e:96:28:3e:7f:fc:f3:d0:19:6f:66:51:24:3f:40:dc:
06:6b:a8:10:f8:d6:c2:d8:9e:2c:9b:1c:e3:18:72:a7:6e:eb:
6b:0d:3b:f6:d0:15:93:57:79:0d:54:77:67:81:4d:e4:74:8a:
d2:c5:5d:21:a6:e3:f5:4a:cc:66:3c:26:de:4a:c8:55:b6:6c:
60:78:f7:af:d0:63:aa:44:55:c0:bc:81:8f:95:e0:db:77:4c:
fc:0e:34:e0:a1:22:b1:66:f7:19:01:38:da:05:d4:2c:9d:6d:
52:40:5c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:29:17 2026 by rpki-client