Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B21C71E0370A11F1B11A631DCF1D38B0.roa
File: B21C71E0370A11F1B11A631DCF1D38B0.roa (raw, json)
Hash identifier: RDBNW2+VMWiLitte6F6ULfg5TqRpmsoD3nmC8Gw+hYs=
Subject key identifier: 78:AF:3E:B8:9B:B6:F3:EF:23:47:62:0B:58:6F:63:DD:91:DD:C4:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C4EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B21C71E0370A11F1B11A631DCF1D38B0.roa
Signing time: Mon 13 Apr 2026 07:30:51 +0000
ROA not before: Mon 13 Apr 2026 07:30:46 +0000
ROA not after: Thu 12 Apr 2029 07:30:46 +0000
asID: 17561
IP address blocks: 154.218.93.0/24 maxlen: 24
154.218.94.0/24 maxlen: 24
154.218.95.0/24 maxlen: 24
154.218.96.0/24 maxlen: 24
154.218.97.0/24 maxlen: 24
154.218.98.0/24 maxlen: 24
154.218.99.0/24 maxlen: 24
154.218.100.0/24 maxlen: 24
154.218.101.0/24 maxlen: 24
154.218.102.0/24 maxlen: 24
154.218.103.0/24 maxlen: 24
154.218.104.0/24 maxlen: 24
154.218.105.0/24 maxlen: 24
154.218.106.0/24 maxlen: 24
154.218.107.0/24 maxlen: 24
154.218.108.0/24 maxlen: 24
154.218.109.0/24 maxlen: 24
154.218.110.0/24 maxlen: 24
154.218.111.0/24 maxlen: 24
154.218.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 15:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115946 (0x1c4ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 13 07:30:46 2026 GMT
Not After : Apr 12 07:30:46 2029 GMT
Subject: CN=69dc9baa-2f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:63:1e:cd:db:7e:26:b3:dc:7b:60:06:b2:
f3:76:6c:94:3e:0e:45:01:d2:a4:89:b1:7f:8f:df:
0b:7d:81:7d:7d:02:a0:c3:ea:17:4e:5a:91:ea:d7:
6b:bf:63:10:07:0c:08:23:c7:ea:fa:57:12:02:13:
65:3e:56:8b:cf:9a:48:99:5d:ef:f9:af:93:52:54:
20:0f:26:cf:ea:bd:a0:5d:2b:b8:3b:3f:4d:9d:ec:
40:5c:3f:e1:29:b2:f3:7e:8b:2d:f1:5d:c0:36:f4:
55:e3:80:b7:da:76:59:75:d0:cc:51:7f:18:34:f6:
cd:2d:b3:51:b6:06:6d:e1:0e:01:4e:48:dd:bc:9b:
4b:4f:9d:62:f6:41:fd:65:45:6b:8e:91:7b:06:a3:
51:5f:25:09:d0:74:8c:8b:12:d0:ec:aa:bd:2c:4b:
a3:09:03:9d:9f:ef:c5:45:7a:f9:95:56:87:75:4d:
c2:85:dc:f0:c7:73:ef:27:9e:6c:b6:8e:3c:29:cc:
7d:6a:4e:63:fa:e6:75:06:4c:af:df:d8:7e:48:d6:
ca:07:56:be:dc:02:84:45:af:2e:0a:e7:44:44:c4:
6d:d2:1c:c3:2b:22:2b:59:2e:b8:eb:d4:0f:dc:ae:
bc:fa:ca:e0:66:6f:3e:30:89:77:66:d7:14:f4:55:
3d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AF:3E:B8:9B:B6:F3:EF:23:47:62:0B:58:6F:63:DD:91:DD:C4:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B21C71E0370A11F1B11A631DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.93.0-154.218.112.255
Signature Algorithm: sha256WithRSAEncryption
a3:21:ad:4b:7d:06:32:2c:30:9f:9a:8a:fd:e4:33:fe:7e:56:
20:ae:11:dc:58:a4:45:b9:d7:98:d1:cd:dc:cb:1a:a7:a4:c0:
5d:03:ad:90:88:10:e2:a1:ec:55:df:83:1d:88:76:98:2c:c7:
a1:5b:f9:40:6e:36:9e:b1:b8:4d:ee:05:16:7c:99:70:e9:37:
c7:6c:5c:96:4e:d9:91:2e:74:71:16:52:0a:38:7d:01:9c:47:
96:1a:9c:c0:4f:a5:85:b6:06:d9:cc:61:ff:d9:8d:06:40:13:
10:5a:4d:09:bb:be:81:14:ba:61:87:f8:cb:68:23:f3:d7:5d:
b6:12:8b:45:0c:48:bd:83:d1:37:33:5d:29:28:2c:f6:35:9c:
00:9e:c9:11:fb:81:da:21:10:2c:95:45:0d:1f:53:0b:97:a6:
22:d7:37:44:09:e8:06:8c:8b:bc:c6:cc:fe:20:de:d5:f4:a4:
3e:12:96:3c:29:ec:3d:31:f3:16:97:53:8e:05:02:a8:df:d1:
07:52:da:0a:64:40:1d:eb:80:ce:7e:fa:59:9b:8e:49:f6:76:
e2:a6:60:0b:8e:1a:ec:db:32:ec:20:20:2c:74:0d:a9:c4:47:
3b:f9:d1:7a:33:e1:bb:44:79:8b:98:96:b6:01:69:b7:6c:00:
5b:33:0d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:06:58 2026 by rpki-client