Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C0128F638A611F19583B0F3CE1D38B0.roa
File: 7C0128F638A611F19583B0F3CE1D38B0.roa (raw, json)
Hash identifier: 20uAreXxens3BiEw2ESPVA6sZbFEpZXVemh2HJ71PSI=
Subject key identifier: 0E:89:85:E8:C5:D8:37:FA:33:BB:BB:E5:51:04:D3:53:6C:BE:C0:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C552
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C0128F638A611F19583B0F3CE1D38B0.roa
Signing time: Wed 15 Apr 2026 08:38:32 +0000
ROA not before: Wed 15 Apr 2026 08:38:27 +0000
ROA not after: Wed 06 May 2026 08:38:27 +0000
asID: 271988
IP address blocks: 154.88.160.0/20 maxlen: 24
154.88.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116050 (0x1c552)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 08:38:27 2026 GMT
Not After : May 6 08:38:27 2026 GMT
Subject: CN=69df4e88-4417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fa:54:d6:0b:e8:d8:a4:fb:a7:12:8d:af:60:
1f:bf:66:13:03:aa:6a:62:98:aa:93:58:9d:b9:da:
0e:7a:85:cb:41:a0:cc:97:33:2c:bc:4d:af:82:b0:
6a:01:71:0f:28:d4:30:32:46:7b:fd:a8:66:cb:02:
8b:7a:73:e7:f1:f3:23:ad:2a:d7:a9:dd:65:f8:64:
10:cf:3d:f0:53:ee:b9:e8:10:b8:f4:a7:13:9d:7e:
fc:53:35:fe:81:eb:59:2e:81:02:d5:2a:1e:4a:41:
13:a7:be:9d:cd:56:67:8a:42:f6:81:29:7b:ca:7b:
1a:dc:d2:b5:8d:b2:51:fe:01:3e:59:d2:73:0a:a1:
bb:1f:e2:52:8d:4f:8b:fd:70:0a:21:f0:25:fa:35:
7d:dd:fd:cb:6b:c9:77:45:2e:82:c3:43:9e:cf:57:
a8:ef:9a:b0:62:1e:21:90:d3:c6:25:22:46:c0:47:
8d:18:31:5f:12:8e:05:f6:86:e7:53:17:8b:2d:43:
e9:04:cb:e6:75:20:4f:89:d0:95:03:ea:68:85:6c:
a4:9a:48:ef:02:37:f2:79:e8:93:2f:00:df:41:c6:
b5:c8:f3:e5:e9:32:d0:21:f9:ee:f0:26:a5:a6:49:
d0:7e:d1:ff:63:27:0c:da:c7:f9:3d:ed:c7:8f:62:
4d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:89:85:E8:C5:D8:37:FA:33:BB:BB:E5:51:04:D3:53:6C:BE:C0:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C0128F638A611F19583B0F3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.160.0-154.88.179.255
Signature Algorithm: sha256WithRSAEncryption
b7:56:68:0a:f8:6c:f4:52:72:2e:3d:bc:48:eb:41:c1:cb:5d:
8e:6a:d5:5c:06:74:9c:29:91:de:00:f5:86:e9:09:7f:70:98:
fe:e8:47:b8:0a:b9:0f:8b:de:9f:8a:ac:45:09:82:54:8c:74:
fd:6e:65:ef:45:b0:c4:b0:9d:1f:99:a4:5f:92:ea:3b:55:e9:
b9:47:6f:e5:64:a3:d6:8a:6a:bb:79:08:46:ee:da:72:cc:8e:
6e:70:bf:9a:f4:37:f7:6a:13:15:cb:a8:12:1b:ff:d1:6d:3b:
c5:25:cd:e7:33:9a:69:16:2a:6c:d3:06:8c:fa:2d:34:74:14:
8b:46:b6:fd:6a:f5:bb:00:ec:d6:55:e6:ef:61:7b:e2:eb:47:
28:74:92:e3:b7:3c:a9:3f:0f:26:7b:e6:a6:46:d6:97:1d:9c:
b4:72:c9:6e:3e:06:41:e4:f5:1e:69:ed:b8:88:f6:ef:2b:af:
52:fc:6e:c3:29:05:35:18:6e:eb:ba:6a:78:f8:9a:78:63:c3:
46:54:aa:6c:09:6a:7d:8e:d6:ee:02:f9:e8:e6:47:d0:9b:97:
67:d9:25:7a:20:dd:c6:80:89:fc:b9:bb:61:52:30:8a:71:eb:
7f:8d:d4:0e:af:c3:65:9e:f5:00:d6:cb:e3:39:3a:e0:c2:81:
21:78:67:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:25:21 2026 by rpki-client