Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/909B968E340F11F1A658A000CF1D38B0.roa
File: 909B968E340F11F1A658A000CF1D38B0.roa (raw, json)
Hash identifier: h/x1KEJFhs0zgOkeoiQCs92N6xJ0IVfBJU33oMoF2a4=
Subject key identifier: 3C:30:DB:9F:C9:51:6F:33:7B:A6:C5:81:DA:F5:BF:E6:3F:95:84:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C3EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/909B968E340F11F1A658A000CF1D38B0.roa
Signing time: Thu 09 Apr 2026 12:28:08 +0000
ROA not before: Thu 09 Apr 2026 12:28:03 +0000
ROA not after: Sun 19 Apr 2026 12:28:03 +0000
asID: 401783
IP address blocks: 154.89.132.0/24 maxlen: 24
154.90.65.0/24 maxlen: 24
154.90.128.0/24 maxlen: 24
154.90.134.0/24 maxlen: 24
154.90.136.0/24 maxlen: 24
154.90.137.0/24 maxlen: 24
154.90.140.0/24 maxlen: 24
154.90.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 12:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115690 (0x1c3ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 12:28:03 2026 GMT
Not After : Apr 19 12:28:03 2026 GMT
Subject: CN=69d79b58-d475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:8a:0f:70:4d:03:c8:19:03:4f:15:e0:b8:
fb:93:ed:bb:51:f4:fc:71:42:73:9b:b9:0b:da:d6:
ac:85:b0:8b:1e:7b:35:1e:71:d8:48:79:5b:45:60:
74:87:f3:7f:9a:fb:b5:24:2f:a0:1c:32:11:75:48:
cc:ba:87:c8:44:d5:38:66:15:11:92:c4:72:2f:c0:
c9:ca:ad:5d:ae:f7:b6:d4:f6:f6:85:38:27:a8:72:
9b:a8:b1:11:3d:86:94:ab:78:ab:b6:1a:4b:c1:15:
31:ee:94:a6:09:fd:4a:5c:a4:65:ff:a3:83:1d:b4:
64:4b:a1:25:33:d7:53:92:ef:d3:df:36:55:5e:8d:
97:d4:35:a8:1d:3e:46:2d:8f:0f:01:c7:45:1f:da:
c5:9c:d5:63:0e:f5:a9:63:19:fd:c8:d8:0c:26:42:
85:41:b2:e5:45:5d:ef:a9:2f:7c:39:92:9f:a8:87:
2b:2b:76:8a:5b:7b:50:ca:c8:55:b7:27:06:65:5c:
38:0c:2e:76:8a:47:a9:8c:d2:a5:a1:60:1f:88:17:
9b:a5:2d:e9:c9:24:ab:cd:e7:29:34:ee:5c:fd:62:
06:08:7e:08:b5:f3:a6:a9:2e:76:3b:9b:25:ff:a0:
c1:dd:13:0b:c2:71:bc:92:57:c3:24:7f:c9:b9:36:
4d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:30:DB:9F:C9:51:6F:33:7B:A6:C5:81:DA:F5:BF:E6:3F:95:84:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/909B968E340F11F1A658A000CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.132.0/24
154.90.65.0/24
154.90.128.0/24
154.90.134.0/24
154.90.136.0/23
154.90.140.0/24
154.90.189.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ad:a3:70:0e:c8:41:5a:0b:5b:48:9f:13:f6:25:0c:1d:03:
c0:54:68:0b:1d:39:09:9a:39:52:a2:6d:9c:08:95:89:67:1d:
cb:c5:e2:7d:11:1f:57:47:8e:f4:38:7a:9e:59:d7:48:14:1f:
07:29:36:c3:49:b3:6b:d1:3e:e0:aa:cb:3c:f5:00:a0:66:19:
02:c3:be:31:6f:f8:67:06:32:d1:22:f2:d8:6c:ea:8a:ce:c7:
5b:ec:40:6e:b0:0f:49:e0:ae:b4:16:3c:56:b1:71:a7:57:9e:
78:75:fa:da:f5:32:9d:d7:36:f2:df:f3:52:2c:f6:38:95:50:
ee:02:8c:50:2d:26:6a:5f:03:f3:5f:ae:2e:9c:1c:bb:35:13:
68:d2:47:1a:2f:ba:0d:0f:d8:11:40:43:fa:81:7d:c9:b9:5b:
fd:ab:cc:ad:c1:f1:7e:90:80:0d:2d:e5:5c:b4:79:12:28:eb:
a1:ea:71:a0:5e:ea:d8:b2:ec:36:08:01:80:ab:b7:17:15:66:
37:0d:1f:b2:7e:4c:c5:04:1d:2d:b6:22:65:9e:69:75:ee:cb:
6b:0d:a8:09:d0:03:f8:ae:3c:94:ab:97:e3:2a:47:f9:f2:1c:
c9:c5:28:a8:2c:8e:f9:87:ef:58:22:3e:b3:4d:f0:97:e1:41:
6d:e9:4b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:12:18 2026 by rpki-client