Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53E1DA0038C411F190D86BA9CE1D38B0.roa
File: 53E1DA0038C411F190D86BA9CE1D38B0.roa (raw, json)
Hash identifier: /VSu4pUX5NmZsTvdXh5S/+s8vMsmSf90gwjn8MGu4jo=
Subject key identifier: A4:7D:FE:61:0E:78:98:CB:EE:74:D4:75:7A:DD:59:40:BB:2A:8C:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C55C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53E1DA0038C411F190D86BA9CE1D38B0.roa
Signing time: Wed 15 Apr 2026 12:12:10 +0000
ROA not before: Wed 15 Apr 2026 12:12:05 +0000
ROA not after: Mon 25 May 2026 12:12:05 +0000
asID: 174
IP address blocks: 154.214.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116060 (0x1c55c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 12:12:05 2026 GMT
Not After : May 25 12:12:05 2026 GMT
Subject: CN=69df809a-5d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c7:18:89:83:8d:6b:00:81:3c:e3:31:68:88:
af:56:31:cd:80:fc:0a:7c:5e:f6:55:14:79:c3:9b:
f6:56:36:34:54:68:c4:e3:3a:8e:50:0a:df:fb:6b:
be:2d:fa:9d:2c:10:f0:d7:15:a9:10:9e:39:0a:22:
4a:b7:2b:2d:1a:4c:84:cf:87:9b:14:41:ab:ec:b0:
60:0d:15:59:70:82:5e:f6:54:41:4f:e8:58:0d:20:
8a:cb:ef:0a:6b:95:0c:0f:54:47:3a:8b:55:2c:d4:
af:f5:3c:03:f3:f2:ed:b2:1d:48:4c:55:74:67:80:
4e:9e:18:c8:fd:9f:ff:96:4a:4a:6f:a3:a9:4f:d7:
27:d2:05:ce:63:7f:0f:d4:d7:cb:b1:67:8d:a0:29:
6f:c5:59:4f:8f:e1:4c:86:16:f6:9b:50:11:ec:78:
bd:73:2a:bc:f9:85:fb:3c:af:ba:77:c5:22:91:75:
99:5f:6d:25:d5:aa:89:28:31:99:89:1b:3f:fd:6f:
62:ef:c1:8c:3a:dc:01:9e:aa:72:af:5e:3b:de:db:
c1:b2:c7:f3:0f:1b:6d:4f:fb:0f:18:93:1d:ec:8d:
24:fe:ad:0d:58:4e:0a:5f:78:a6:80:a1:1b:21:ba:
f3:6b:6d:fe:73:0c:0f:49:57:e5:cb:67:03:e5:63:
0e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7D:FE:61:0E:78:98:CB:EE:74:D4:75:7A:DD:59:40:BB:2A:8C:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53E1DA0038C411F190D86BA9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.0.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:68:70:67:a1:7a:ec:f1:ec:41:da:2f:53:3d:0b:21:9c:bc:
e1:b2:5d:c4:ec:d9:53:71:5f:be:da:8e:a5:74:60:6e:a5:61:
f9:4e:1d:5b:ae:ac:7a:eb:e7:77:a5:82:d4:d9:fd:80:60:1c:
ee:33:98:68:00:de:4e:a7:1f:49:fb:46:d7:1f:9f:27:4d:1d:
d9:f6:d4:93:d0:02:2f:1f:21:9d:03:19:6a:39:de:dd:ff:b2:
d9:e5:4f:6e:f9:53:49:99:d7:0a:09:8b:61:a7:fb:90:b5:d5:
6c:84:f2:59:7d:c8:6d:ae:dc:fa:9e:7e:93:8c:6c:d0:b8:87:
9e:b2:ed:c2:b2:60:c7:10:3b:c3:b8:38:34:dc:81:00:94:7e:
d7:b7:37:d2:38:62:7c:7f:86:4e:08:c4:28:5a:25:2d:56:32:
5c:59:4e:d5:10:a0:32:43:ca:1c:d6:da:89:fc:75:29:f6:65:
b8:dc:59:87:ec:b8:55:0b:9b:33:8c:ca:a6:1a:b3:ff:a5:5b:
04:29:93:5f:1f:39:44:7b:0a:4f:30:6f:b2:14:9b:44:61:89:
e7:58:fc:dd:0a:86:83:55:11:b6:17:84:07:bc:06:9a:99:40:
b2:93:cb:cc:fc:85:52:17:67:0a:4c:c1:42:85:92:4e:6a:0b:
65:dc:71:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:25:28 2026 by rpki-client