Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/763A2AE834F611F1AA6A37DCCE1D38B0.roa
File: 763A2AE834F611F1AA6A37DCCE1D38B0.roa (raw, json)
Hash identifier: jLmcZqjKbHhjvhCGHS1DX0/HigmHDQIGebDx8g9cEZE=
Subject key identifier: 1E:6A:4C:3F:4A:71:39:9C:63:CA:6D:86:A2:59:04:05:7E:40:D6:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C477
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/763A2AE834F611F1AA6A37DCCE1D38B0.roa
Signing time: Fri 10 Apr 2026 16:00:58 +0000
ROA not before: Fri 10 Apr 2026 16:00:53 +0000
ROA not after: Sat 10 Jul 2027 16:00:53 +0000
asID: 36898
IP address blocks: 154.200.133.0/24 maxlen: 24
154.200.134.0/24 maxlen: 24
154.200.135.0/24 maxlen: 24
154.200.136.0/24 maxlen: 24
154.200.137.0/24 maxlen: 24
154.200.138.0/24 maxlen: 24
154.200.139.0/24 maxlen: 24
154.200.141.0/24 maxlen: 24
154.200.143.0/24 maxlen: 24
154.200.144.0/24 maxlen: 24
154.200.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115831 (0x1c477)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 16:00:53 2026 GMT
Not After : Jul 10 16:00:53 2027 GMT
Subject: CN=69d91eba-7f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:da:f8:57:d2:d8:a9:34:5b:88:43:60:7f:
9e:30:3b:eb:73:85:09:d5:52:09:51:40:14:09:be:
78:db:19:96:c2:16:9b:75:5a:7f:11:7c:6f:16:0f:
1b:1b:fa:87:9a:72:37:4c:3e:af:61:17:47:80:02:
4f:04:b6:27:63:e7:28:9b:75:ea:f8:48:ca:dc:61:
46:bc:2a:d3:4c:d5:6c:51:bd:d9:e6:22:5f:c2:3b:
1c:40:27:85:6c:27:22:11:f2:73:14:02:ba:c4:c3:
99:f8:71:04:d2:4c:f1:76:33:29:3d:26:03:3b:97:
9f:d8:5a:ac:2e:bb:57:e4:d0:e0:57:0b:ab:77:8c:
54:2e:ed:64:d4:d1:43:21:a7:ce:ca:72:8d:36:a7:
fd:05:91:1b:99:11:22:19:ea:2d:0e:2c:0a:d2:bd:
75:d3:e9:2d:29:f3:89:c4:46:20:50:a4:6a:95:23:
04:ec:0a:d4:4d:50:65:11:cd:1b:9b:ff:87:c5:1b:
93:7e:64:07:be:61:28:16:2a:e9:4a:6a:12:50:e7:
cb:a8:68:66:64:fc:41:89:f1:5c:ce:db:19:4b:85:
97:55:34:4b:b6:a4:18:da:7f:0b:04:5e:49:e3:3f:
1b:62:05:6c:c4:24:76:d8:a4:05:93:44:53:19:70:
a4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6A:4C:3F:4A:71:39:9C:63:CA:6D:86:A2:59:04:05:7E:40:D6:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/763A2AE834F611F1AA6A37DCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.133.0-154.200.139.255
154.200.141.0/24
154.200.143.0-154.200.145.255
Signature Algorithm: sha256WithRSAEncryption
50:22:d8:a7:17:bd:ec:61:a6:a9:d6:4e:47:90:d2:28:d1:13:
1a:a9:47:67:22:3a:06:e5:39:ca:1f:7f:e9:41:1a:11:cf:1f:
d9:73:2b:64:6f:b8:e9:d0:85:d8:6d:cf:60:e7:d6:a9:ea:19:
2b:a3:3b:48:62:f3:4d:27:db:9c:ee:45:66:d3:a2:67:c8:69:
be:91:e0:5b:ee:e8:3b:be:27:9d:df:41:cf:ef:10:ce:9b:a8:
5a:41:ea:91:51:f8:a4:94:a2:6b:2b:b9:fb:95:9c:68:6d:aa:
6c:69:27:ad:7c:e6:84:e7:d4:fb:fe:3d:52:b8:5b:fe:5d:4a:
c5:a5:c6:6c:5a:f0:61:1b:70:f6:70:6d:c9:17:8e:fb:ec:c9:
67:c6:e2:6d:ea:32:cb:75:4c:6c:59:2c:de:ac:bb:70:61:2e:
e6:47:0a:32:75:ae:7a:c5:71:13:8d:44:44:6a:ca:f9:71:68:
2b:49:f4:36:45:a1:35:31:8e:7f:27:2a:71:d9:1a:b6:25:d9:
c5:c2:ba:e7:e8:12:e5:6b:3d:9d:92:97:b1:f7:fd:1d:0d:19:
08:18:b9:57:4e:95:ed:06:43:91:a8:db:df:50:3c:9c:d5:5f:
a3:bf:7f:a8:c1:d6:6c:e9:eb:bf:85:bc:a0:43:1e:bd:c1:a7:
36:6b:ad:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:14:44 2026 by rpki-client