Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7784A0C433C311F1B5F502AACE1D38B0.roa
File: 7784A0C433C311F1B5F502AACE1D38B0.roa (raw, json)
Hash identifier: QtLZ3sK/W/JcYpFqOktxR5BWfvaWsxi1udMScF2MhVU=
Subject key identifier: E7:1A:47:92:38:8E:C3:EF:4D:D3:E7:65:9E:2F:82:55:50:7D:6E:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C38D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7784A0C433C311F1B5F502AACE1D38B0.roa
Signing time: Thu 09 Apr 2026 03:23:24 +0000
ROA not before: Thu 09 Apr 2026 03:23:20 +0000
ROA not after: Mon 18 May 2026 03:23:20 +0000
asID: 54600
IP address blocks: 154.91.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115597 (0x1c38d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 03:23:20 2026 GMT
Not After : May 18 03:23:20 2026 GMT
Subject: CN=69d71bac-f5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:95:d8:3f:dd:61:46:37:24:9c:78:99:2d:c5:
62:42:be:71:fb:53:85:9d:4f:25:79:2d:41:2d:4d:
08:e2:fb:85:fd:60:68:ec:c1:28:1b:c4:38:1c:bd:
ff:8c:7b:4c:38:33:71:a7:50:4d:85:0f:5a:6f:48:
97:ca:31:60:00:06:ba:d8:2d:38:93:b1:e9:73:d3:
4f:e3:48:22:a9:a8:fd:d4:03:1b:29:90:dd:b8:e4:
5b:99:dd:96:e9:4c:5e:d3:fd:a7:22:14:f4:97:e8:
e9:f2:c7:e2:c2:b5:d3:de:c9:72:cc:b6:4a:e2:93:
54:73:58:a7:c8:e9:62:ec:ef:4b:d1:ed:fa:67:30:
b2:4a:78:90:30:6a:69:f7:ac:2e:cb:f0:16:05:75:
b1:ac:36:3b:7e:ba:66:be:09:1b:b1:34:27:f4:6f:
1a:5e:2b:09:3b:b9:51:41:97:99:74:03:80:c1:56:
64:81:dd:d5:bd:11:32:0b:51:66:65:f7:fe:6e:4b:
d7:39:9b:c2:ac:79:c7:cf:0a:de:98:83:3b:a9:3b:
be:0e:2f:87:be:b3:30:3b:12:b0:6f:42:47:0b:cc:
15:d5:77:29:31:9b:69:e0:03:3d:2e:1a:61:4c:e8:
c4:2d:53:49:2f:14:21:eb:ab:90:a1:e9:23:3e:e0:
53:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1A:47:92:38:8E:C3:EF:4D:D3:E7:65:9E:2F:82:55:50:7D:6E:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7784A0C433C311F1B5F502AACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.48.0/21
Signature Algorithm: sha256WithRSAEncryption
14:82:9c:54:6a:ab:12:01:ab:dd:33:8d:82:27:56:b6:1d:78:
72:7b:f0:b9:4b:16:53:8a:18:ac:7a:cf:55:d3:7a:a5:75:74:
48:dc:a3:e3:1c:aa:b2:27:f8:59:c7:f1:aa:aa:b2:74:e7:30:
27:2b:1a:6a:7f:30:be:44:1c:38:d2:54:5e:44:2d:5d:29:5b:
7e:b5:c7:24:9d:d2:8c:57:e6:32:d8:b0:b2:90:12:76:f8:09:
41:ec:56:31:9f:3e:e1:49:1c:79:98:01:82:d9:a0:2c:0a:01:
9a:22:d7:ee:59:48:d7:85:f9:1a:d3:2c:ec:a6:64:36:69:aa:
d0:0f:19:ea:df:68:56:b5:24:0f:6d:f0:41:35:20:6a:4c:27:
21:21:dc:90:0d:89:a1:ea:47:56:06:61:48:b3:32:b9:67:b9:
3d:ef:bb:ad:2f:15:a8:a9:5c:45:9c:51:77:cc:ba:0d:18:32:
26:af:10:2b:eb:bb:ad:70:a4:8a:d4:8c:48:84:e8:ae:ef:42:
55:a8:5a:7b:71:61:73:e9:d7:ef:a4:85:9e:43:a7:c8:d7:23:
25:36:7b:b4:53:9a:2a:12:bd:1f:c9:df:4f:ec:d4:64:bf:45:
63:cd:1e:6c:67:89:d3:4a:69:a9:fc:1e:18:53:de:cc:cf:a7:
93:57:80:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:20:49 2026 by rpki-client