Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D70C858A341C11F1B3326FD1CE1D38B0.roa
File: D70C858A341C11F1B3326FD1CE1D38B0.roa (raw, json)
Hash identifier: UU0E4h5xw0xS3Uo0qcX0V/XYwJLcxHavI71msQpNOUw=
Subject key identifier: DA:DC:7A:C1:F1:84:D3:7A:A0:19:26:17:7C:11:70:3F:A6:02:AA:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C3FC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D70C858A341C11F1B3326FD1CE1D38B0.roa
Signing time: Thu 09 Apr 2026 14:03:10 +0000
ROA not before: Thu 09 Apr 2026 14:03:04 +0000
ROA not after: Mon 09 Apr 2029 14:03:04 +0000
asID: 17561
IP address blocks: 154.215.192.0/24 maxlen: 24
154.215.193.0/24 maxlen: 24
154.215.194.0/24 maxlen: 24
154.215.195.0/24 maxlen: 24
154.215.196.0/24 maxlen: 24
154.215.197.0/24 maxlen: 24
154.215.198.0/24 maxlen: 24
154.215.199.0/24 maxlen: 24
154.215.200.0/24 maxlen: 24
154.215.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115708 (0x1c3fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 14:03:04 2026 GMT
Not After : Apr 9 14:03:04 2029 GMT
Subject: CN=69d7b19e-91ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:34:33:82:30:c1:87:42:ef:37:8f:4a:c6:72:
c6:f9:7b:38:c9:6c:cd:3e:7e:c3:3f:4f:fb:9f:55:
07:ab:98:b8:03:06:80:16:4c:bb:99:0a:3f:25:8f:
75:69:75:c0:04:8e:91:0c:44:ab:20:39:d4:d8:1e:
2d:b7:aa:7d:eb:d0:29:70:8a:8c:06:b6:20:8c:49:
87:86:64:64:25:dd:ba:11:9d:d9:1f:75:e8:8d:f9:
02:fe:cf:5c:7c:56:36:93:67:99:b0:7f:7e:ac:91:
28:15:b0:3b:f3:5e:26:b9:35:a3:9c:56:b3:09:25:
4b:37:af:b4:3e:25:80:32:93:0e:6a:32:bc:f6:ec:
ca:f3:49:a8:6b:4a:3c:32:b5:14:e5:69:ef:b1:62:
57:7c:a2:a2:30:b2:bb:92:be:7e:d3:69:2b:29:de:
b4:80:5a:c1:ed:81:27:72:a2:4e:ad:2d:c8:38:8c:
fb:29:7d:b1:67:be:4d:4a:06:87:37:d6:81:3a:e4:
86:36:a0:23:af:5f:bf:e8:38:89:5d:c1:69:90:9a:
3b:b5:c6:6e:75:05:95:ff:37:85:d8:4c:de:db:d7:
7d:bf:59:ed:96:07:fc:9e:ea:a4:ed:84:27:1a:82:
1a:f5:a7:67:cb:6c:a9:88:8c:80:48:e9:0e:17:d5:
96:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DC:7A:C1:F1:84:D3:7A:A0:19:26:17:7C:11:70:3F:A6:02:AA:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D70C858A341C11F1B3326FD1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.192.0-154.215.201.255
Signature Algorithm: sha256WithRSAEncryption
59:21:49:ee:ed:88:06:ae:ae:59:76:b5:a3:8d:c7:db:05:1a:
49:1c:b7:fb:76:42:fe:55:40:83:79:24:7f:7e:e2:f7:cf:4c:
6f:2f:73:3f:22:6b:02:3d:fb:29:7a:d3:9b:17:fd:90:7b:f0:
8f:0c:93:fe:c6:32:b8:39:55:7a:47:e9:1e:10:df:f2:3b:7b:
dd:81:d1:e7:f9:5c:75:be:6b:0e:ae:83:e3:22:ae:cf:be:ce:
d8:82:c2:9c:fe:27:08:b4:8c:ab:a0:2c:e4:9e:cb:29:09:4e:
ea:33:7b:10:97:8e:4b:da:cb:83:db:12:27:45:30:68:e8:07:
6a:67:72:5b:00:e4:51:fa:f0:65:90:84:ae:d2:89:11:d9:30:
84:41:45:2d:bb:7d:8d:aa:b6:dc:ce:be:65:3c:3a:bc:1d:2a:
21:7c:dc:28:3f:a0:1b:8a:eb:eb:5e:ca:a5:35:9e:08:37:3d:
30:2f:a4:76:13:9f:24:2c:a7:62:13:7c:fb:b8:12:94:07:98:
d2:42:a5:52:3e:61:dc:d8:35:96:4f:67:5c:2b:0f:d8:cf:9a:
0c:63:19:a0:d8:22:65:11:98:b2:cd:0c:b8:bb:be:f6:c4:b6:
0f:97:71:6b:ea:00:df:ae:97:a0:6a:ba:7f:9d:06:68:1a:98:
34:cb:c2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:20:41 2026 by rpki-client