Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/632BECA2341F11F19996D9DFCE1D38B0.roa
File: 632BECA2341F11F19996D9DFCE1D38B0.roa (raw, json)
Hash identifier: wQeB5gzkQTW5q/7qX4B552SBd3FC237Y2qwWoObYEPk=
Subject key identifier: 91:1B:76:7E:FB:DC:F6:A8:4E:89:6D:B6:7F:2A:47:12:B8:E1:BE:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C402
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/632BECA2341F11F19996D9DFCE1D38B0.roa
Signing time: Thu 09 Apr 2026 14:21:24 +0000
ROA not before: Thu 09 Apr 2026 14:21:19 +0000
ROA not after: Mon 09 Apr 2029 14:21:19 +0000
asID: 17561
IP address blocks: 154.93.192.0/24 maxlen: 24
154.93.193.0/24 maxlen: 24
154.93.194.0/24 maxlen: 24
154.93.195.0/24 maxlen: 24
154.93.196.0/24 maxlen: 24
154.93.197.0/24 maxlen: 24
154.93.198.0/24 maxlen: 24
154.93.199.0/24 maxlen: 24
154.93.200.0/24 maxlen: 24
154.93.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115714 (0x1c402)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 14:21:19 2026 GMT
Not After : Apr 9 14:21:19 2029 GMT
Subject: CN=69d7b5e4-78d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:79:f9:26:8c:97:47:55:75:19:5e:42:3f:7b:
b1:67:a8:11:48:91:72:55:fd:c3:bc:0a:62:9e:e6:
2e:01:63:d6:99:c9:2e:34:54:44:ab:03:fb:63:9c:
f6:9a:79:cc:e7:a3:46:44:1d:1e:69:63:e0:4f:d5:
71:80:c5:04:9c:b9:1d:2a:57:b7:ea:38:b8:63:90:
e7:1e:21:d0:40:bf:47:b4:80:da:26:6f:89:1d:42:
a6:9b:bd:66:5b:29:e5:49:ff:34:37:d2:1a:6a:4f:
4d:67:2a:e1:56:c2:c4:5d:c6:5b:ab:d3:c4:f5:e1:
29:f9:28:0d:14:6d:d4:1b:97:82:3e:08:dc:e0:be:
15:c0:97:9c:c3:d4:1e:00:59:d0:e1:0a:81:3b:31:
08:b6:9b:06:59:58:13:86:dc:33:4f:21:da:a2:a9:
ee:b5:8a:c5:76:78:75:65:da:7d:b2:36:1a:6d:f4:
b5:03:fe:dc:32:48:31:97:40:02:7d:56:48:d9:45:
e1:f6:91:21:83:cd:8f:ab:b1:4d:83:46:8b:bd:85:
31:c6:66:85:c9:0f:f9:69:54:71:3b:b4:76:f5:34:
22:5c:96:3c:41:c4:92:7a:2a:13:ed:12:ed:89:4f:
2e:9a:e0:2d:21:75:8b:27:dc:03:5a:f8:2b:7b:c4:
76:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1B:76:7E:FB:DC:F6:A8:4E:89:6D:B6:7F:2A:47:12:B8:E1:BE:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/632BECA2341F11F19996D9DFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.192.0-154.93.201.255
Signature Algorithm: sha256WithRSAEncryption
c1:35:63:1e:c5:89:f6:c7:35:f4:d2:d9:a3:5f:2b:d9:0f:c9:
aa:48:85:ad:5a:6a:af:ce:2f:91:00:15:37:1a:c9:57:1a:c5:
0e:98:fa:04:92:f9:18:10:b0:0f:d5:7c:c6:b7:47:1b:6e:94:
db:32:be:fc:81:e1:6c:f1:40:c8:25:3e:29:8b:bd:fc:9f:9d:
9f:35:4d:ca:06:a0:2c:14:98:01:4d:17:8d:59:83:b4:b1:78:
48:a1:c1:db:8f:57:c3:34:b0:35:6e:9d:1f:b1:04:fa:8e:da:
d3:ab:11:e7:56:53:6d:8d:3e:20:12:90:ea:69:bd:cc:f3:b2:
08:c2:f0:8c:07:63:32:5b:4d:81:7a:1f:ef:7f:fb:ba:a2:4f:
d9:5a:ed:83:64:f7:57:fb:ec:9a:56:d6:15:4b:7b:37:ea:aa:
87:89:3d:ce:ee:19:44:4e:3f:dd:5a:5b:32:14:26:67:50:26:
2f:a7:da:be:f6:01:c1:aa:23:64:aa:8a:b8:8e:7a:33:27:25:
32:10:43:90:15:ae:75:a7:6b:d5:88:9a:56:00:a4:63:0c:4a:
3c:d9:19:ee:45:9b:1b:ee:bc:a8:04:96:da:96:a1:68:8c:81:
8b:83:f5:8a:a5:a5:ab:54:5f:6d:07:75:2d:72:c8:37:8d:c8:
7c:a0:74:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:34:17 2026 by rpki-client