Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EB67E64358711F1AEBEEBDBCE1D38B0.roa
File: 8EB67E64358711F1AEBEEBDBCE1D38B0.roa (raw, json)
Hash identifier: rONQnMIV+zgd6B0qBs9qgqa4fNa+deqK0rRFUQYmbgU=
Subject key identifier: 30:BF:AC:A5:D5:C4:05:24:06:00:50:D3:F0:A1:8F:9F:CD:75:9F:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C495
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EB67E64358711F1AEBEEBDBCE1D38B0.roa
Signing time: Sat 11 Apr 2026 09:19:36 +0000
ROA not before: Sat 11 Apr 2026 09:19:30 +0000
ROA not after: Fri 01 May 2026 09:19:30 +0000
asID: 61461
IP address blocks: 154.216.192.0/18 maxlen: 24
154.218.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115861 (0x1c495)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 11 09:19:30 2026 GMT
Not After : May 1 09:19:30 2026 GMT
Subject: CN=69da1228-7111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c7:bc:89:1d:13:1e:10:cd:80:17:6b:eb:a0:
e2:bc:b6:f5:dc:50:08:df:18:25:a4:a9:93:a9:c9:
9e:9e:85:78:9f:ad:2b:a8:f0:0b:10:01:86:4f:b3:
8b:89:4b:3e:84:2e:3f:0d:48:a7:a0:d6:e2:97:46:
4b:b7:f7:b9:2b:9e:7c:03:d7:8d:05:ab:bb:38:f9:
68:ee:48:0b:ab:7b:d7:85:16:0b:e5:e3:92:36:77:
41:dd:ce:4d:52:ac:27:00:52:14:8d:05:b9:10:a7:
eb:1c:e6:48:48:03:e2:ce:53:df:07:78:a3:83:82:
7d:d6:5f:17:3c:a2:14:09:df:43:6b:4c:0c:3a:44:
e8:65:b1:60:47:0e:cc:49:99:5d:5c:11:a9:fc:31:
32:fb:b8:9d:d0:f0:85:7a:60:e7:5f:44:78:ea:b7:
ed:8e:41:63:6f:3a:df:a4:21:7f:49:1f:37:08:56:
44:b8:6a:de:25:42:d0:0d:f7:22:be:01:dc:0a:61:
bd:6f:b0:4a:0c:18:52:d5:a7:47:b9:fd:00:f1:d7:
76:81:e4:96:04:9f:ce:91:82:7f:eb:d8:7e:2c:30:
30:11:02:83:c0:bc:61:d7:27:a4:93:91:da:f8:75:
94:5e:7b:d8:61:eb:0f:65:16:8b:77:27:5f:be:ec:
0c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BF:AC:A5:D5:C4:05:24:06:00:50:D3:F0:A1:8F:9F:CD:75:9F:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EB67E64358711F1AEBEEBDBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.192.0/18
154.218.192.0/18
Signature Algorithm: sha256WithRSAEncryption
68:a1:6a:ba:b1:5a:5e:18:53:53:36:83:3f:ab:b9:3e:a3:2d:
06:8f:fe:cd:d9:57:e5:0d:a4:27:6d:e5:4c:08:3a:95:bc:a4:
01:12:4f:f3:55:b3:1e:d5:90:ba:05:20:ba:e8:e4:fc:1a:1e:
22:75:93:8b:d3:6f:ab:f3:33:26:ab:ca:f0:f1:ef:be:26:16:
5c:c5:e0:2c:7a:c2:de:17:ab:d8:23:47:07:94:f6:15:d6:11:
5e:6a:3b:ec:39:e9:46:3f:6e:ee:16:30:19:56:11:58:66:1d:
26:52:9e:4b:5a:aa:d8:5d:2f:4b:f9:77:c5:ab:c6:ce:fe:a7:
b6:00:8c:71:21:56:c1:7c:a0:36:55:5c:0c:46:20:12:84:da:
4f:ea:0c:7f:04:c9:14:bd:b6:33:53:11:1e:f4:26:32:7c:85:
33:b0:e4:9b:9f:7d:e1:6a:f6:3e:4a:2f:c2:a2:17:7e:0a:8c:
69:f4:31:c9:29:be:f0:3f:ee:97:a8:2b:4f:e9:9c:8f:2b:3d:
f3:5b:d8:9a:db:aa:6c:41:f9:55:83:a0:c9:2e:da:1b:da:5e:
6e:c7:7c:97:ca:08:6d:75:a2:ad:7f:af:92:e2:91:2e:8e:b9:
e5:fd:d9:c1:4f:6a:3c:56:ea:95:6e:cc:19:47:45:4d:53:80:
44:84:ee:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:20:46 2026 by rpki-client