Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8289CC230D411F18ED2E0B9DAE4EC9C.roa
File: A8289CC230D411F18ED2E0B9DAE4EC9C.roa (raw, json)
Hash identifier: JwEIx54RzH5fn1J2eo9rPBkiUejmPi7Z8FX6n255uNw=
Subject key identifier: FB:79:C6:0C:10:2C:CC:F8:2B:70:F9:00:F3:23:91:1E:5C:4F:C0:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C30A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8289CC230D411F18ED2E0B9DAE4EC9C.roa
Signing time: Sun 05 Apr 2026 09:48:54 +0000
ROA not before: Sun 05 Apr 2026 09:48:49 +0000
ROA not after: Fri 08 May 2026 09:48:49 +0000
asID: 45194
IP address blocks: 154.84.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115466 (0x1c30a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 5 09:48:49 2026 GMT
Not After : May 8 09:48:49 2026 GMT
Subject: CN=69d23006-992d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e7:65:f0:bf:f8:f1:81:f7:ff:fa:5f:58:50:
4f:57:6d:2c:56:3b:25:a4:50:80:e5:c5:40:73:fc:
3f:aa:95:05:6d:8a:33:be:e3:6a:65:2b:3b:32:ea:
d5:03:7d:29:0f:ba:3f:d1:f7:19:77:09:b1:12:88:
d1:b2:0b:2f:39:81:24:4f:63:ee:84:c9:21:7b:4a:
39:aa:1a:ef:d8:bd:f6:77:18:5b:e4:0c:0a:74:e5:
d6:c5:83:a3:65:23:f4:ca:6f:64:42:bd:2b:99:fd:
45:b8:da:9f:9e:53:87:ab:15:3c:41:9f:25:1c:71:
37:ee:e6:05:ff:a0:b9:5a:6b:bb:ad:a9:b3:02:72:
25:5d:76:d9:01:d8:90:dd:1c:80:d8:2d:82:53:40:
a6:15:20:5c:74:53:02:f9:2b:d7:1d:99:e5:7e:7f:
ba:d0:fa:48:45:ac:23:84:85:26:2e:be:aa:5c:5b:
64:53:87:c7:92:ec:79:c0:dd:98:5d:fd:29:f9:c9:
ce:56:1c:b3:bd:5d:cd:44:76:50:1a:e5:a0:4d:74:
64:b2:9b:8f:78:b6:5c:6b:c6:9f:27:ce:ef:83:ec:
2a:e6:af:29:72:be:74:6f:4c:c2:d4:22:2c:0b:be:
16:ca:e7:67:2b:25:6b:b2:43:14:36:5a:3c:12:26:
78:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:79:C6:0C:10:2C:CC:F8:2B:70:F9:00:F3:23:91:1E:5C:4F:C0:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8289CC230D411F18ED2E0B9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.208.0/24
Signature Algorithm: sha256WithRSAEncryption
85:fb:ad:99:22:95:6a:7f:2d:c4:90:75:89:69:82:0a:55:d0:
0e:18:32:a6:0c:cb:bb:9c:22:80:72:36:e0:54:88:ad:87:d1:
e7:73:69:33:ad:98:be:3e:71:5c:0d:5b:dc:b3:1c:df:89:7b:
39:f5:2b:8d:47:a7:30:0d:12:44:e2:87:31:fc:6a:b6:fa:f3:
a6:e5:de:35:c4:31:6c:5f:74:02:68:7a:b4:07:e9:73:8a:38:
fe:ca:01:8e:3d:52:be:f8:7e:ce:8e:39:f6:c0:05:a0:bc:d6:
e2:1b:25:0f:31:54:cf:7e:44:dc:50:7a:74:d0:e4:3a:b9:ec:
57:d7:e6:90:91:2c:e5:78:40:ed:74:5b:87:4a:2b:76:c9:66:
fe:3d:29:c6:9b:18:c0:9c:04:d8:65:d6:bb:6a:ae:e0:fc:f6:
ec:a0:da:8b:42:6a:f4:0a:ef:c5:54:dd:80:28:35:27:f1:ff:
70:9c:2e:c1:3d:69:3c:43:c0:4a:14:ab:45:fe:65:80:56:ab:
52:f4:6e:ec:80:8a:50:57:25:ff:e9:7f:cb:eb:65:5e:8a:0c:
47:f5:da:8e:9a:4a:21:32:bc:e4:4f:3f:cb:c3:9c:55:16:b2:
dc:60:77:1e:c8:15:e5:44:08:49:ec:45:ca:ea:fb:4b:e7:63:
41:b0:8b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:58:39 2026 by rpki-client