Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A450D2A32F411F1B8D06DB8CE1D38B0.roa
File: 5A450D2A32F411F1B8D06DB8CE1D38B0.roa (raw, json)
Hash identifier: Sw7waJm4bR39zqs9hGsAS1cZWnxzvldeKtaw8FraFX4=
Subject key identifier: BA:9F:C5:33:04:88:4A:B7:D6:D7:C6:52:D6:C3:94:2E:A2:80:FD:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C37A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A450D2A32F411F1B8D06DB8CE1D38B0.roa
Signing time: Wed 08 Apr 2026 02:40:50 +0000
ROA not before: Wed 08 Apr 2026 02:40:45 +0000
ROA not after: Sat 18 Apr 2026 02:40:45 +0000
asID: 139880
IP address blocks: 154.209.160.0/19 maxlen: 24
154.214.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 18 Apr 2026 02:40:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115578 (0x1c37a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 8 02:40:45 2026 GMT
Not After : Apr 18 02:40:45 2026 GMT
Subject: CN=69d5c031-afb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ad:6a:61:92:ab:21:5d:91:9a:d7:e1:62:a7:
5b:f4:33:b8:dd:6c:07:9d:f5:30:da:40:64:4c:9f:
35:ef:48:2a:0a:0d:6d:d4:75:6b:15:db:a9:a6:76:
5c:50:67:5e:23:d5:6c:fe:8e:52:2d:4f:06:4b:58:
65:a8:41:14:ee:5d:30:3d:07:46:4b:9d:0f:48:82:
f3:50:4d:6d:1d:d5:42:6c:b3:04:c0:3d:66:a2:db:
4e:69:a0:cd:3b:0d:a9:d0:cc:4d:5d:28:a6:59:71:
eb:e6:7f:3c:ba:d6:f7:5e:c7:c3:6d:8f:a3:58:c0:
4b:93:8b:1e:dc:6a:c8:fd:dd:79:5b:2e:1c:a7:15:
1d:cb:c3:9f:50:54:0b:92:42:72:35:93:99:7c:11:
41:57:dd:18:51:c7:ec:49:bd:2e:9b:18:9d:78:f0:
85:d1:e5:24:59:d9:88:07:d9:64:1a:ea:0c:bc:d9:
4c:0d:f1:03:6c:ee:54:0f:b5:5d:cb:48:04:98:7b:
6a:fb:0d:c1:af:5a:8f:98:41:89:47:bd:da:19:2b:
63:10:af:7b:3e:0e:3d:b8:3a:05:27:16:fc:09:75:
e7:2c:99:dc:b2:92:2d:08:7f:7b:b3:38:fc:da:f8:
6d:10:a4:03:e8:22:8b:9c:1f:d8:29:62:df:97:7c:
d1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9F:C5:33:04:88:4A:B7:D6:D7:C6:52:D6:C3:94:2E:A2:80:FD:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A450D2A32F411F1B8D06DB8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.160.0/19
154.214.64.0/18
Signature Algorithm: sha256WithRSAEncryption
c2:25:4b:76:62:8b:e0:80:f0:05:68:2b:fe:42:c4:61:4a:f3:
19:91:7f:18:d6:0f:3c:b5:1d:60:ec:d5:80:1c:c7:f6:68:a4:
9b:d0:44:9e:dc:c6:55:c5:91:71:f5:4d:67:e8:9a:1f:03:b4:
fd:11:cc:57:a7:b7:e4:8b:1b:d7:d9:21:e7:14:e2:64:3c:a0:
72:fd:03:10:7e:d0:37:87:9d:40:4f:76:cb:1b:a4:fa:1c:54:
34:2c:f4:53:42:06:c0:87:07:93:6d:79:c3:7a:7e:79:c7:c5:
a0:c7:06:8e:0f:46:7f:a7:4e:d0:e6:cd:49:13:bb:b1:60:a5:
5a:d1:f9:06:d7:b7:04:e5:35:18:60:f6:74:2d:9a:c8:1a:4e:
fa:fe:f7:d2:9c:df:d2:e8:65:ba:85:a4:fb:6c:91:ef:ab:ad:
1b:04:a2:57:ef:bd:d9:99:29:30:14:a9:a1:93:f2:9e:10:3a:
66:70:bc:43:c5:47:25:f0:95:a0:35:e1:15:6a:17:e5:bb:be:
a5:c6:ec:0d:f1:50:57:07:74:53:8c:93:2c:d1:35:df:d9:8f:
43:6a:64:10:b3:b4:4e:7c:c5:a4:4b:e8:59:6d:d7:7e:cb:5c:
bb:fd:6d:5f:0c:0a:9f:de:bf:36:db:7e:4b:b6:06:8d:bb:e3:
77:56:71:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:11:24 2026 by rpki-client