Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97C7978837E711F1B60BFCE4CE1D38B0.roa
File: 97C7978837E711F1B60BFCE4CE1D38B0.roa (raw, json)
Hash identifier: +CW03q5dsXKzyqRYEqFs+XftglrzMvWMx26/CUXDEfc=
Subject key identifier: F5:FD:60:60:A1:FF:A8:75:1C:74:F1:DA:89:1F:0F:F2:80:3C:01:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C53B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97C7978837E711F1B60BFCE4CE1D38B0.roa
Signing time: Tue 14 Apr 2026 09:52:05 +0000
ROA not before: Tue 14 Apr 2026 09:50:33 +0000
ROA not after: Tue 21 Apr 2026 09:50:33 +0000
asID: 139880
IP address blocks: 154.194.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116027 (0x1c53b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 14 09:50:33 2026 GMT
Not After : Apr 21 09:50:33 2026 GMT
Subject: CN=69de0e45-1755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:37:94:1e:bb:e1:e1:1f:36:11:8e:88:1c:90:
0d:4f:19:ef:be:eb:4d:32:93:c6:bb:ed:94:b0:15:
9f:d6:17:52:1b:72:22:f5:f4:96:8d:1a:06:0a:33:
18:a6:50:4b:33:8a:ae:6a:76:34:2a:d7:76:ea:7b:
77:bf:fa:8f:5f:46:05:98:32:27:a8:47:99:3d:3d:
97:f3:b9:6a:56:a5:3a:38:d5:5e:97:12:5d:9f:63:
8c:10:40:76:72:d7:1e:10:00:cb:80:e7:41:9b:48:
6b:58:32:5a:97:e0:1c:18:e4:51:bf:8b:66:41:1b:
25:3c:d1:94:54:77:67:57:80:5e:38:4c:0b:31:ce:
3e:d7:87:1d:db:d9:2f:e2:f7:e4:c0:a5:6d:a9:74:
01:fb:a1:20:16:4e:43:96:5f:a9:0f:f0:87:d3:fb:
36:9e:73:99:5d:77:2b:7b:6f:71:1f:4d:4f:70:98:
3c:dc:73:55:89:bc:94:77:b9:cf:7a:cc:3a:31:00:
39:ca:95:9a:ee:53:0b:33:77:51:6f:6a:08:63:e4:
74:68:37:64:35:de:97:45:97:c8:51:d8:1f:f1:d3:
32:5e:62:0d:a7:4e:31:50:51:4d:a6:a2:31:2e:8d:
21:01:d9:bd:52:05:d2:5a:91:be:3d:fd:a7:cc:ba:
5e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FD:60:60:A1:FF:A8:75:1C:74:F1:DA:89:1F:0F:F2:80:3C:01:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97C7978837E711F1B60BFCE4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.128.0/18
Signature Algorithm: sha256WithRSAEncryption
76:fa:6f:bf:82:0d:62:2a:61:eb:14:aa:f7:de:66:16:ac:c0:
e6:d4:15:cc:7a:74:82:03:01:97:99:be:f1:db:59:7b:d4:43:
f3:c6:cb:84:ee:37:47:94:7e:d5:ef:c8:4c:d7:c2:6e:6b:61:
79:94:25:e8:89:af:2b:5d:11:2a:17:e7:80:63:0f:38:49:f9:
ff:4e:fc:40:a7:c9:d1:25:97:39:5f:12:f3:be:65:b2:a5:9f:
36:3c:44:f4:59:b8:e6:a2:ed:8b:92:52:49:56:d6:82:41:d6:
f0:ad:95:7d:a8:13:0e:33:1c:6d:11:7d:87:6c:c5:08:27:58:
85:7f:71:52:52:7d:1b:ac:ec:7e:e1:32:98:48:e7:78:66:2c:
a7:e3:c6:61:dd:c1:d7:8d:e9:36:1f:5b:fb:55:57:b6:8e:d3:
0b:c7:0f:0e:1e:c3:7b:43:b7:64:ce:cb:0f:55:82:7a:e2:fa:
94:b3:65:03:b1:63:bd:30:7d:4e:5b:83:28:a7:fc:a1:d8:2f:
64:c7:43:59:44:f0:81:11:27:7f:b9:60:87:ed:f6:35:e2:8e:
f0:85:58:5f:2b:dd:f8:6a:e7:b0:24:8d:3c:c6:b6:b6:06:5b:
4b:69:49:77:a5:3b:22:e5:65:6a:05:98:0c:66:24:25:88:66:
ca:f4:74:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:54:31 2026 by rpki-client