Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B8A77043A6211F19C286905CF1D38B0.roa
File: 5B8A77043A6211F19C286905CF1D38B0.roa (raw, json)
Hash identifier: 8dfj7ddYPrH2uV6rqzLcoRoCEtMdRxkDX+Mbl5BTNW4=
Subject key identifier: D9:FA:37:3C:38:2A:A9:3E:F6:B4:3C:A1:44:BB:1B:48:1B:47:A5:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C5E1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B8A77043A6211F19C286905CF1D38B0.roa
Signing time: Fri 17 Apr 2026 13:35:54 +0000
ROA not before: Fri 17 Apr 2026 13:35:50 +0000
ROA not after: Sun 17 May 2026 13:35:50 +0000
asID: 147176
IP address blocks: 154.197.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116193 (0x1c5e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 17 13:35:50 2026 GMT
Not After : May 17 13:35:50 2026 GMT
Subject: CN=69e2373a-9cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:83:b2:43:4b:0c:17:23:69:8b:21:ba:33:7d:
1b:c4:79:03:a5:43:98:9a:6f:47:3e:0d:1a:99:ae:
df:db:0e:63:fb:8c:02:dc:18:bb:fa:a5:81:ad:af:
29:cd:f8:73:3c:ac:69:70:e9:ce:3f:ee:46:dc:5b:
9b:ae:a2:40:85:d0:97:0b:f5:5e:94:aa:df:b5:44:
5d:cf:28:2d:86:2a:d4:24:f7:b7:fc:c1:fc:07:27:
38:7d:a7:7c:d4:d8:98:7d:0f:83:4f:89:c5:3b:5a:
71:74:75:36:56:ab:e3:55:44:fe:ef:59:eb:45:cd:
f6:fa:15:88:da:6b:b9:69:e9:b7:14:87:9e:2e:b8:
ab:86:ef:1d:dd:57:94:72:d6:1e:5d:62:80:6c:27:
95:38:5a:18:06:c6:14:38:ef:98:cd:8e:6a:ed:15:
71:da:5e:ef:c1:45:4f:93:e2:e7:98:c3:c5:ce:ca:
7c:8b:76:2c:6e:16:f7:b5:87:e0:58:4f:c3:e0:ed:
f7:c2:ef:23:13:38:06:dd:ae:2a:93:55:38:5d:30:
e4:8c:bf:75:35:c1:ec:d0:9c:81:9e:b7:36:26:32:
22:71:a1:c6:5d:c6:3e:b9:04:50:39:3f:b4:1f:8a:
2c:af:ff:87:1a:54:e9:1c:d2:58:8a:93:17:fc:7d:
40:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FA:37:3C:38:2A:A9:3E:F6:B4:3C:A1:44:BB:1B:48:1B:47:A5:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B8A77043A6211F19C286905CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.102.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:91:03:f7:58:6e:55:20:a1:56:c7:9c:ee:52:be:68:03:8b:
44:a5:1c:5c:cb:2f:07:ef:8f:24:f2:11:22:de:af:5b:85:e3:
d4:e1:2e:64:67:0a:95:50:20:c1:2c:d0:55:bb:47:8a:49:0e:
44:16:64:0f:1a:9d:07:23:20:22:86:05:fd:6f:eb:10:c0:04:
57:d0:89:00:78:4b:e8:83:ca:c8:20:92:4e:63:92:2d:76:84:
94:94:2c:5d:89:50:a9:c6:41:f6:7f:04:d8:38:cf:42:95:31:
2e:45:5d:81:87:91:ee:23:4f:ec:b7:73:86:9b:58:80:3a:93:
71:57:1c:4f:4e:c9:a2:76:83:cf:a8:fe:75:86:28:11:3a:c6:
fd:fc:5e:3e:8c:73:92:3b:a7:77:da:68:b7:c9:2e:71:6a:fd:
2f:e1:00:f1:ca:84:ac:e2:39:c2:c8:7d:eb:6c:4f:0e:53:9f:
e5:9b:ec:7f:9c:97:5c:d5:86:b3:9f:3f:f3:c4:ea:bc:33:b3:
f3:39:d9:78:cd:41:c7:d0:78:45:70:04:f8:82:fe:da:21:74:
31:f0:9e:a8:6c:f3:b7:cb:be:77:e1:e3:33:11:94:9e:2f:a9:
21:54:49:5f:86:8c:41:49:3a:36:d9:5d:83:cf:aa:07:07:91:
ef:d2:f1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:25:38 2026 by rpki-client