Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88F6FC9238C011F196EC170FCF1D38B0.roa
File: 88F6FC9238C011F196EC170FCF1D38B0.roa (raw, json)
Hash identifier: PusxVny9NQxSYb80DqOUg2ui/CjrHd+elC9FwOt2s7g=
Subject key identifier: 2F:E9:9E:30:76:61:DD:6E:53:5E:20:77:F7:11:FA:AD:B2:3F:8F:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C55A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88F6FC9238C011F196EC170FCF1D38B0.roa
Signing time: Wed 15 Apr 2026 11:45:01 +0000
ROA not before: Wed 15 Apr 2026 11:44:56 +0000
ROA not after: Mon 11 May 2026 11:44:56 +0000
asID: 141159
IP address blocks: 154.94.228.0/22 maxlen: 24
154.94.228.0/24 maxlen: 24
154.94.229.0/24 maxlen: 24
154.94.230.0/24 maxlen: 24
154.94.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116058 (0x1c55a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 11:44:56 2026 GMT
Not After : May 11 11:44:56 2026 GMT
Subject: CN=69df7a3d-a330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:13:ce:a3:d6:f6:26:33:05:ab:2f:f5:67:bf:
a1:2d:3f:a8:e7:84:c0:6e:b7:91:1b:0c:4e:f2:65:
24:43:7f:a4:5f:c8:47:b7:6b:fc:54:a0:21:60:bc:
c2:e1:88:b6:a9:31:ef:2c:2e:87:c9:70:2c:e7:a7:
d1:ab:f9:97:88:40:2d:b9:81:55:58:ef:53:56:71:
e8:55:d5:19:9c:9a:7d:2d:78:43:0b:74:89:d4:1f:
b2:81:f2:fa:c3:86:47:26:ec:ff:4b:c9:06:47:65:
95:8a:18:1f:fe:06:fc:7b:0c:5c:08:cb:41:7d:fb:
ac:80:eb:18:38:f7:29:09:30:0d:da:b6:85:57:cb:
d0:35:8c:50:c0:b7:a3:b6:f1:e3:34:47:c2:29:69:
9e:32:f8:91:6f:7f:3d:a3:b2:84:d0:b8:44:70:65:
45:33:64:62:86:b2:a5:e4:1b:fd:69:48:79:c5:01:
a7:87:9c:53:3a:9b:71:32:2b:76:3e:09:ff:38:23:
68:50:21:87:c1:ea:12:c3:b4:5a:2d:15:53:85:79:
d5:91:28:a7:bc:79:69:43:0f:31:11:a5:bb:0a:ee:
54:a1:fb:4a:bd:53:25:b7:0c:a0:f1:e0:f3:f0:e7:
f7:a5:76:06:66:fb:4f:8d:28:e7:4d:4b:b7:6a:50:
05:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E9:9E:30:76:61:DD:6E:53:5E:20:77:F7:11:FA:AD:B2:3F:8F:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88F6FC9238C011F196EC170FCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.228.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:bc:82:d4:08:1d:b3:f2:02:2e:94:0f:b7:70:a5:fc:bf:a0:
0d:37:a1:6f:51:4b:ec:e4:ca:4b:20:55:28:a2:c7:57:ce:0a:
3b:16:f9:47:85:f9:68:56:94:fe:e6:86:83:60:0f:c1:e5:14:
f2:3b:29:70:59:71:e1:cb:d6:47:c3:16:4b:e5:26:4b:07:1b:
e7:79:81:31:cb:7e:70:0c:57:be:b8:7a:77:67:44:d1:a1:98:
30:c0:d8:b6:12:d7:96:9d:e7:c9:bc:3f:3e:f9:5e:c1:97:e6:
10:d5:bb:03:38:1b:df:40:dc:03:15:fd:26:42:5a:8c:c8:82:
e9:b3:8f:91:0b:75:24:9d:6e:79:93:4d:7c:1e:45:0d:8d:ad:
31:d6:6d:40:55:83:85:cb:97:75:90:06:b6:91:77:24:cf:50:
3e:8b:02:3f:fc:ad:eb:85:9c:37:95:6f:c5:fa:f3:fb:e4:93:
60:c6:f5:99:c7:37:fb:01:34:a1:d2:2a:ae:8b:66:dc:9d:b6:
c2:3e:6c:07:bb:96:f1:3c:32:0b:6c:46:4f:8d:d1:42:fa:64:
6d:c9:b1:87:cc:1f:59:b5:eb:0d:9f:4c:96:ba:bf:38:f5:d4:
e5:34:50:39:2b:26:60:09:8f:b7:c5:44:da:07:ab:8c:1c:ec:
8e:41:23:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:19:10 2026 by rpki-client