Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBCE4CF6377511F1B4CCE61ECF1D38B0.roa
File: CBCE4CF6377511F1B4CCE61ECF1D38B0.roa (raw, json)
Hash identifier: JR6OR7zK/04T419V61rdpNnSzA37IMOPdcr/+C4i1II=
Subject key identifier: 9D:94:6F:C4:10:56:52:63:77:44:81:8E:5A:A9:37:8A:9C:2B:00:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C52A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBCE4CF6377511F1B4CCE61ECF1D38B0.roa
Signing time: Mon 13 Apr 2026 20:17:30 +0000
ROA not before: Mon 13 Apr 2026 20:17:24 +0000
ROA not after: Tue 19 May 2026 20:17:24 +0000
asID: 11404
IP address blocks: 154.223.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116010 (0x1c52a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 13 20:17:24 2026 GMT
Not After : May 19 20:17:24 2026 GMT
Subject: CN=69dd4f5a-24f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:09:56:5a:8a:74:bc:a7:41:f3:3a:0f:d0:b0:
9e:36:ce:74:29:bd:1f:9f:56:d2:e5:ed:a6:06:8f:
42:8c:ca:c6:9a:42:fd:65:d6:93:56:17:4e:aa:c6:
fc:bb:19:f5:b5:78:84:62:43:39:41:8f:3a:04:3c:
fa:59:4f:25:54:95:a3:fa:ac:be:0d:f0:25:37:80:
dd:f4:01:d0:20:60:db:fd:2e:b4:ab:de:f9:3b:2d:
3e:0e:3b:3e:32:5d:af:d7:99:0f:1c:02:52:df:8c:
a6:69:1a:23:a1:e8:7b:18:64:2e:06:fc:b9:b8:ff:
12:95:d6:48:24:a4:b4:e4:db:a6:f1:a2:b0:e0:9c:
8d:3a:e1:c6:f8:36:1d:fc:4a:99:07:be:b0:fd:b1:
ce:d3:5a:ac:5a:1c:fb:02:d2:83:c8:10:24:1d:d3:
dc:70:8e:8d:d4:7f:96:3f:4b:f3:01:9d:e1:8f:8c:
0a:69:1e:72:9c:8c:d3:62:4f:74:6d:d7:2f:d7:50:
0d:c3:89:e1:44:4a:6f:04:e5:c2:99:98:96:95:f7:
20:05:ac:73:93:f4:3e:99:56:d8:12:5d:c7:82:97:
f2:e1:d2:b0:72:ca:b9:05:9d:03:7b:c0:f5:6b:b0:
2d:97:89:12:61:67:65:ae:e4:0b:08:ba:07:77:03:
b3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:94:6F:C4:10:56:52:63:77:44:81:8E:5A:A9:37:8A:9C:2B:00:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBCE4CF6377511F1B4CCE61ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.96.0/19
Signature Algorithm: sha256WithRSAEncryption
47:66:b6:a7:2c:12:a1:70:61:f1:52:e3:d1:df:de:db:82:8e:
e6:d1:f7:8c:34:5c:b2:7b:3f:48:e1:22:7b:db:fd:8a:cf:02:
ae:72:ae:ed:89:3d:5c:32:98:38:c7:9d:c0:45:4f:97:c5:51:
45:00:63:ca:35:73:c0:26:9f:d3:2a:25:59:e3:94:a3:fe:fa:
9b:ea:17:d8:f7:2c:3a:ea:36:f4:75:d0:93:65:da:7d:b5:90:
6e:b8:08:22:9e:d8:e7:56:a0:f8:eb:49:85:1f:d1:2f:0d:93:
c1:ac:b5:4d:43:a3:ff:36:04:7f:65:b7:a5:e9:14:ee:27:b8:
06:14:6d:2b:85:f8:99:f8:fd:bd:33:39:43:00:0d:3e:57:50:
e7:92:c7:74:3c:bb:35:71:e0:f2:1b:a7:98:53:a2:ae:f5:73:
66:6c:f9:83:ce:db:51:1b:10:f3:a0:54:fc:4d:c3:ba:ea:73:
af:c7:e4:00:66:fb:d9:94:be:53:30:82:b8:7b:9d:dc:4d:7b:
29:fb:e2:fc:f3:d0:4d:e8:da:8c:8f:9b:af:b4:7b:78:85:79:
24:53:c8:6b:e8:59:27:ef:bd:46:ea:6e:96:3b:77:e8:76:ac:
5d:2b:ba:06:6b:42:4b:49:a8:e0:e6:75:03:4a:56:ab:8e:24:
2a:7a:35:7b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcUqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDEzMjAxNzI0WhcNMjYwNTE5MjAxNzI0WjAYMRYw
FAYDVQQDEw02OWRkNGY1YS0yNGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0glWWop0vKdB8zoP0LCeNs50Kb0fn1bS5e2mBo9CjMrGmkL9ZdaTVhdO
qsb8uxn1tXiEYkM5QY86BDz6WU8lVJWj+qy+DfAlN4Dd9AHQIGDb/S60q975Oy0+
Djs+Ml2v15kPHAJS34ymaRojoeh7GGQuBvy5uP8SldZIJKS05Num8aKw4JyNOuHG
+DYd/EqZB76w/bHO01qsWhz7AtKDyBAkHdPccI6N1H+WP0vzAZ3hj4wKaR5ynIzT
Yk90bdcv11ANw4nhREpvBOXCmZiWlfcgBaxzk/Q+mVbYEl3Hgpfy4dKwcsq5BZ0D
e8D1a7Atl4kSYWdlruQLCLoHdwOziwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJ2U
b8QQVlJjd0SBjlqpN4qcKwCsMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQkNFNENGNjM3NzUxMUYxQjRDQ0U2MUVDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmt9gMA0GCSqGSIb3DQEB
CwUAA4IBAQBHZranLBKhcGHxUuPR397bgo7m0feMNFyyez9I4SJ72/2KzwKucq7t
iT1cMpg4x53ARU+XxVFFAGPKNXPAJp/TKiVZ45Sj/vqb6hfY9yw66jb0ddCTZdp9
tZBuuAgintjnVqD460mFH9EvDZPBrLVNQ6P/NgR/Zbel6RTuJ7gGFG0rhfiZ+P29
MzlDAA0+V1Dnksd0PLs1ceDyG6eYU6Ku9XNmbPmDzttRGxDzoFT8TcO66nOvx+QA
ZvvZlL5TMIK4e53cTXsp++L889BN6NqMj5uvtHt4hXkkU8hr6Fkn771G6m6WO3fo
dqxdK7oGa0JLSajg5nUDSlarjiQqejV7
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:41:29 2026 by rpki-client