Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DFD1E64397A11F18BF8C4FECE1D38B0.roa
File: 8DFD1E64397A11F18BF8C4FECE1D38B0.roa (raw, json)
Hash identifier: WFq/KFjwTgNE2CrXEW/6Nn3tZaWQO+DdVlEKaTiSK+A=
Subject key identifier: F1:1D:EC:E0:DD:90:E3:70:00:84:E1:45:5A:43:19:6F:65:63:2B:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C58D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DFD1E64397A11F18BF8C4FECE1D38B0.roa
Signing time: Thu 16 Apr 2026 09:56:36 +0000
ROA not before: Thu 16 Apr 2026 09:56:31 +0000
ROA not after: Thu 30 Apr 2026 09:56:31 +0000
asID: 9304
IP address blocks: 154.82.134.0/24 maxlen: 24
154.82.148.0/24 maxlen: 24
154.82.153.0/24 maxlen: 24
154.82.158.0/24 maxlen: 24
154.82.196.0/24 maxlen: 24
154.82.197.0/24 maxlen: 24
154.82.198.0/24 maxlen: 24
154.82.199.0/24 maxlen: 24
154.83.65.0/24 maxlen: 24
154.83.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116109 (0x1c58d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 09:56:31 2026 GMT
Not After : Apr 30 09:56:31 2026 GMT
Subject: CN=69e0b254-e576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:98:1b:02:2c:27:3b:95:18:4a:3c:4a:83:2d:
db:b7:ed:b0:23:52:a6:13:f9:20:ef:e5:36:16:d3:
9a:9e:d4:9e:43:36:59:d6:a7:2c:fe:29:a3:0d:bf:
83:e9:2f:a0:d5:c4:4d:c1:4e:57:dc:af:70:cb:0c:
15:1f:bd:78:9b:f1:05:5e:fa:d4:34:21:ef:bb:b7:
e7:ca:1b:76:18:a9:34:be:cb:63:b4:38:7a:07:a3:
4b:e5:95:7a:93:1a:8e:10:1d:7e:c3:c3:f7:26:2d:
f1:06:f9:73:fd:5b:ba:2e:1d:27:2f:4e:b5:35:a8:
a4:38:38:8b:94:a4:eb:79:37:07:d5:45:30:75:4b:
3e:35:2e:fe:99:2b:53:fc:44:28:69:70:56:5a:96:
2c:91:e1:61:1e:f8:fa:10:74:6e:c5:ef:07:64:fb:
70:de:3c:a2:88:02:0b:3b:c1:81:a6:ca:7e:0d:1a:
b5:89:c6:c7:95:32:b8:6a:98:04:a7:51:2b:56:da:
b6:58:76:a9:25:42:a4:8e:98:50:fd:95:28:b4:58:
16:dd:72:54:2c:dc:26:9a:4b:35:c4:69:e6:bf:2f:
f7:69:18:24:08:14:be:18:77:7a:ff:50:1f:64:f3:
48:fe:94:55:9d:b6:25:5b:28:8d:11:b9:26:94:22:
a8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1D:EC:E0:DD:90:E3:70:00:84:E1:45:5A:43:19:6F:65:63:2B:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DFD1E64397A11F18BF8C4FECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.134.0/24
154.82.148.0/24
154.82.153.0/24
154.82.158.0/24
154.82.196.0/22
154.83.65.0/24
154.83.67.0/24
Signature Algorithm: sha256WithRSAEncryption
19:0f:ec:1e:3b:21:77:b6:64:12:f4:e5:7b:94:a4:8f:a0:09:
9b:05:67:90:a5:06:0f:1b:1b:33:39:7c:f2:8f:49:63:37:18:
b9:f9:d5:9d:2d:63:16:c9:c1:52:14:18:3b:aa:5d:7b:bb:5a:
e6:9b:7b:3f:2d:55:8e:d5:60:70:9f:7b:25:9e:a7:8d:6b:7f:
e0:b5:09:34:c8:38:d9:4e:02:c2:54:dc:5b:42:89:8c:16:56:
8c:75:d0:9a:f3:64:6f:09:22:c1:82:50:e0:28:e3:48:d2:4c:
ce:d2:07:24:87:1a:82:b6:be:9f:e3:2e:97:d3:d0:ff:8b:0c:
b7:d5:b6:dd:73:51:e6:cb:99:da:cb:f5:38:58:5f:ea:8f:3e:
dd:fd:24:3d:6c:91:e0:0a:0a:de:ae:b7:dd:fa:ec:7f:85:75:
04:43:3c:45:4d:f4:68:c3:b9:aa:0d:0e:b5:e1:b6:a8:76:93:
4d:7a:d5:76:be:4d:fc:10:ad:83:75:cc:b2:44:13:ff:43:57:
88:8a:56:0f:22:eb:19:15:4b:58:dc:a0:e3:7d:0c:a5:bf:99:
39:72:2e:3b:4a:d6:f6:ec:34:3d:1e:dc:cb:37:4b:91:23:67:
25:59:9c:ea:65:41:49:01:e6:83:7a:56:b5:f0:c2:bf:98:9a:
4a:f0:89:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:26:19 2026 by rpki-client