Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A68E01AA2F2A11F1A1705195DAE4EC9C.roa
File: A68E01AA2F2A11F1A1705195DAE4EC9C.roa (raw, json)
Hash identifier: Wj7/aII9RoWFvEsLkq0iA7svs25wPdwQu3nD/UFbvZw=
Subject key identifier: 59:26:34:69:54:8A:31:81:B6:96:DE:42:D3:62:DF:6E:7B:EB:48:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C29A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A68E01AA2F2A11F1A1705195DAE4EC9C.roa
Signing time: Fri 03 Apr 2026 06:59:26 +0000
ROA not before: Fri 03 Apr 2026 06:59:21 +0000
ROA not after: Fri 08 May 2026 06:59:21 +0000
asID: 272092
IP address blocks: 154.83.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115354 (0x1c29a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 3 06:59:21 2026 GMT
Not After : May 8 06:59:21 2026 GMT
Subject: CN=69cf654e-4379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:40:97:7f:f4:3a:c5:06:45:68:00:ae:41:81:
0e:1d:6d:1e:c8:f7:f2:50:2e:3a:95:ff:38:e6:1a:
e7:86:44:f2:ab:fa:91:93:14:80:0d:c1:18:a3:ae:
f2:45:93:be:85:52:4b:89:89:01:ff:a2:15:6a:22:
b8:a2:1d:81:2b:a4:2b:a4:7e:8e:64:ed:5c:4d:44:
79:60:a1:a7:e4:fd:21:7e:ec:a0:5a:8b:78:c3:78:
38:70:41:8a:1a:35:8a:79:3e:df:7c:b2:11:20:6a:
99:e6:44:09:4f:09:e5:49:3b:52:ce:a9:00:f4:3e:
fc:8f:59:ae:e4:23:54:bf:07:b0:83:12:91:cf:ef:
3b:85:ba:f0:07:08:1f:25:bc:eb:d1:a0:60:49:6d:
3e:19:53:72:42:99:27:4f:2e:f6:d3:63:9d:75:8c:
d4:91:1a:9f:93:c6:8a:69:44:1a:8c:50:dc:df:02:
97:65:17:a9:bc:ca:62:32:ee:76:0d:8e:6d:98:0c:
30:53:9f:bb:1a:30:ea:26:86:8f:42:e8:a9:25:13:
a8:89:bf:f3:70:41:48:78:3a:98:47:59:5c:03:64:
30:29:52:73:2b:20:d9:07:e5:94:20:c1:98:7a:52:
9c:9d:26:5a:07:81:20:6f:5c:c8:ce:24:6b:b6:9e:
51:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:26:34:69:54:8A:31:81:B6:96:DE:42:D3:62:DF:6E:7B:EB:48:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A68E01AA2F2A11F1A1705195DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.29.0/24
Signature Algorithm: sha256WithRSAEncryption
93:ea:ac:16:5a:da:b9:77:37:68:89:63:c3:b8:6c:3c:fd:9e:
79:9f:67:59:35:ef:d2:72:af:5b:89:26:28:18:6c:94:70:13:
28:ee:5d:1e:e5:b5:22:b7:0e:e2:ee:da:d2:3a:63:a9:73:41:
b4:f8:bb:d9:49:b6:71:a2:8a:f7:69:bf:1b:62:99:4c:2c:b4:
26:94:09:87:e7:24:af:33:ea:35:3f:d4:d5:02:bf:02:e5:66:
4c:92:8f:2a:23:3a:eb:e1:c4:75:40:e0:c1:fe:01:76:7e:f4:
dd:fc:54:41:7e:46:8f:dd:36:05:9b:86:98:e7:c3:22:52:c8:
f3:3c:a3:f0:af:ff:cc:ff:ba:cd:25:ad:7c:41:d4:0d:15:2a:
69:68:a3:54:6e:5e:5d:ea:69:e8:f1:0f:37:80:a1:b3:78:ba:
1a:3b:f2:3f:e9:3a:f3:e2:b3:84:25:b3:12:d9:e7:69:ab:e4:
d0:8d:44:63:9f:ac:2e:40:ba:8b:c8:21:b0:65:4e:b4:cc:66:
f2:23:90:28:29:f2:ef:b4:63:62:1e:fa:52:7e:9f:36:e4:1c:
8f:b1:21:15:b2:89:c5:00:dc:08:96:df:27:6e:aa:98:4b:4e:
3f:18:6c:f8:42:34:1f:3d:8b:0d:06:8e:4f:40:69:10:9b:ab:
43:50:fc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:25:28 2026 by rpki-client