Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94773E2833FD11F1993F3F13CF1D38B0.roa
File: 94773E2833FD11F1993F3F13CF1D38B0.roa (raw, json)
Hash identifier: tpxmXpTjJIEK0hxeA3WthnoBBbXfMCSR6Bu2/BIQIwM=
Subject key identifier: 72:C4:9A:75:D2:FE:C4:A7:46:23:EE:77:74:A4:6F:8B:06:75:6C:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C3CF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94773E2833FD11F1993F3F13CF1D38B0.roa
Signing time: Thu 09 Apr 2026 10:19:24 +0000
ROA not before: Thu 09 Apr 2026 10:19:19 +0000
ROA not after: Tue 20 Apr 2027 10:19:19 +0000
asID: 38638
IP address blocks: 154.91.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115663 (0x1c3cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 10:19:19 2026 GMT
Not After : Apr 20 10:19:19 2027 GMT
Subject: CN=69d77d2c-dde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:30:b3:65:c4:e5:37:ef:11:a4:47:7f:a6:b2:
6f:17:bf:18:cb:b0:ed:55:f3:9a:40:37:01:2d:ae:
df:72:49:f7:39:63:c3:fa:a0:7f:73:11:12:74:7e:
83:67:bc:76:63:bf:f9:0e:32:ed:94:ff:b8:a2:05:
4f:36:c0:ed:c0:3a:34:73:80:d7:85:7a:a7:5a:10:
60:3f:f6:ca:45:83:f3:32:98:ce:d4:20:0f:93:91:
2c:fd:f0:2d:f4:32:17:51:ca:37:40:1e:3b:57:9a:
75:a1:43:74:20:bc:dc:a7:1a:ab:bf:c7:d0:17:7a:
bd:cf:69:38:03:c9:aa:c2:34:eb:b3:4e:65:f4:45:
8a:95:a4:b7:96:be:f1:17:ae:a7:83:80:6b:30:9d:
a8:90:16:05:60:66:fd:57:a6:2e:e8:9d:5e:d3:73:
27:4c:49:8e:c0:09:28:4b:cf:a0:09:2f:12:4f:08:
60:92:c4:c5:6e:24:7e:de:7e:f1:d8:8f:49:b6:f9:
3c:1d:cd:9c:ac:f0:cf:9e:87:0d:c1:a1:0c:fe:3d:
e4:eb:99:6c:72:d4:78:18:ab:2e:34:a3:bb:96:42:
da:15:81:54:be:fa:05:fb:6d:35:f6:b0:37:56:64:
da:86:dd:da:c3:86:95:f8:7c:40:f5:d0:a3:5a:28:
e9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C4:9A:75:D2:FE:C4:A7:46:23:EE:77:74:A4:6F:8B:06:75:6C:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94773E2833FD11F1993F3F13CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.168.0/24
Signature Algorithm: sha256WithRSAEncryption
65:53:34:86:57:25:d3:25:e5:84:05:95:da:97:1a:5d:13:01:
9b:16:25:1e:56:31:3a:4e:2b:34:71:41:38:e0:11:97:f8:7a:
e2:a7:a3:1d:a9:1c:61:43:54:d4:81:11:97:09:53:c3:8c:24:
8a:f9:a7:68:33:99:b5:7a:bb:91:e3:f9:4b:fb:65:16:3e:3b:
84:42:12:40:80:ee:78:61:52:a9:fb:f7:84:dd:14:b4:9e:1a:
a5:ca:77:50:79:a9:52:98:d1:83:86:12:2b:e5:e6:2c:ea:6d:
f8:44:83:10:3a:05:9d:5d:e8:58:84:62:69:d5:b0:d7:00:01:
bb:57:2f:d6:6a:55:cb:b7:3a:7b:3a:c1:dc:b2:a4:40:21:9b:
3f:dc:f0:43:0b:f7:68:77:ae:ee:3e:5a:7a:f7:89:22:48:6e:
14:a5:e2:43:83:a4:e7:89:2c:22:8c:e8:9d:95:d7:58:fa:86:
84:78:ae:2f:a3:73:92:35:7e:e1:76:a2:f9:77:08:6f:a7:02:
f5:6b:69:e8:7e:ba:25:26:65:19:86:ac:29:72:5a:50:98:ea:
06:19:31:33:4f:9f:f3:3b:6e:39:47:b3:f0:2c:78:f5:8c:8a:
d4:7e:2a:00:8d:36:a2:a2:e3:25:26:e1:f8:a3:e6:f2:49:2a:
01:80:46:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:04:16 2026 by rpki-client