Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC2FFF943A7411F180D3A0F3CE1D38B0.roa
File: CC2FFF943A7411F180D3A0F3CE1D38B0.roa (raw, json)
Hash identifier: TlkhTSQlGRX8R72iRmYPgSSNsso7YC97iMYF+0kEEL0=
Subject key identifier: AE:DD:57:EC:F7:1B:62:AA:D8:DA:26:18:52:5F:86:50:A5:DC:BD:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C5EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC2FFF943A7411F180D3A0F3CE1D38B0.roa
Signing time: Fri 17 Apr 2026 15:47:55 +0000
ROA not before: Fri 17 Apr 2026 15:47:50 +0000
ROA not after: Sun 24 May 2026 15:47:50 +0000
asID: 139923
IP address blocks: 154.89.151.0/24 maxlen: 24
154.89.152.0/23 maxlen: 24
154.89.157.0/24 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:53:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116203 (0x1c5eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 17 15:47:50 2026 GMT
Not After : May 24 15:47:50 2026 GMT
Subject: CN=69e2562b-994d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7f:d5:ab:f5:58:94:fd:b1:39:d1:94:8b:2e:
7c:fa:54:b4:2d:1a:69:33:b8:a8:c9:79:db:50:77:
65:56:8f:49:ba:b0:93:1b:53:3b:47:5f:07:8c:35:
9c:36:57:30:67:de:ad:65:14:65:5f:b6:f6:b3:22:
62:89:d6:47:ab:ba:6b:e5:73:99:fc:53:3f:88:30:
15:19:12:72:a5:d6:ef:c6:9c:92:d6:f0:54:9b:d7:
46:a3:90:cb:af:8b:3f:c6:9f:85:07:83:a6:25:2d:
bc:31:37:41:be:24:3e:81:03:82:a6:7e:81:01:39:
41:af:ab:6f:54:db:c2:10:70:e7:d8:e7:3d:eb:7c:
03:0e:23:ff:1e:dc:75:50:bb:0c:bd:fb:38:65:d3:
eb:36:59:7d:83:53:41:2e:93:77:ca:2d:ba:d4:21:
26:7e:d1:8b:d6:ad:52:f9:98:f3:ed:1a:ad:63:d4:
51:f0:02:3f:fb:0c:f9:ad:04:22:f9:97:04:b1:0f:
08:57:83:9d:26:01:c8:99:23:3b:45:65:e8:f9:e8:
21:45:b9:5b:df:78:c1:33:9f:ff:9a:0c:33:38:e1:
5c:c9:be:55:87:8b:e0:6a:11:1a:9d:c5:c6:ed:1c:
b5:f8:09:2a:f0:d6:d2:a9:92:de:e5:a1:32:96:9c:
74:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DD:57:EC:F7:1B:62:AA:D8:DA:26:18:52:5F:86:50:A5:DC:BD:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC2FFF943A7411F180D3A0F3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.151.0-154.89.153.255
154.89.157.0/24
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:d8:91:df:5b:7d:59:a2:16:4e:ff:00:61:d2:57:df:ad:1e:
15:c5:29:8d:41:d3:74:8c:8f:39:3e:e4:37:3b:60:f4:3f:71:
ba:5d:d4:46:a8:b0:0a:9f:6b:09:dd:fb:b8:ef:df:8e:bc:d1:
91:37:b6:4f:14:ba:ee:05:c9:f8:80:1e:dd:72:0a:cc:4c:38:
01:62:08:af:50:de:d5:b5:dc:85:00:3e:56:c0:81:42:9d:e6:
5d:7d:4d:cf:1b:b2:b8:a7:12:39:8e:9d:7c:dc:75:5a:f3:a5:
8f:78:d0:58:05:3d:c2:7a:0c:99:5f:c4:12:d4:98:d7:7f:bb:
75:1a:d0:8b:d1:e2:5e:f3:27:1a:ff:31:c6:86:3f:dd:cb:f3:
50:ff:e1:49:40:98:ff:8a:86:47:f6:55:c5:30:5c:71:3c:d4:
39:0e:bf:d3:02:51:9d:5b:33:29:9d:08:da:70:3c:da:db:5d:
e2:60:18:3f:95:b7:51:7a:82:3a:c1:ad:ad:75:03:be:6c:b7:
dc:ec:34:d1:8a:e0:1e:d6:2b:34:f4:04:21:d2:8f:5a:7d:30:
46:19:fc:86:d2:81:89:44:d4:ad:ed:01:0b:7b:8b:68:da:df:
8f:b6:7b:1e:c9:fe:ec:50:c0:af:b0:90:56:72:6b:d1:6a:94:
77:96:13:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:05:24 2026 by rpki-client