Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D83AD4B02A8111F1BC9C86A7DAE4EC9C.roa
File: D83AD4B02A8111F1BC9C86A7DAE4EC9C.roa (raw, json)
Hash identifier: LCKnnlpinx8XZqekbFYkZLYh3pnT2zMZNLN554FNZsc=
Subject key identifier: D8:32:D3:A8:6D:DF:42:D1:22:24:EB:D6:35:56:37:D2:BC:79:0A:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C13B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D83AD4B02A8111F1BC9C86A7DAE4EC9C.roa
Signing time: Sat 28 Mar 2026 08:41:00 +0000
ROA not before: Sat 28 Mar 2026 08:40:55 +0000
ROA not after: Sat 02 May 2026 08:40:55 +0000
asID: 62240
IP address blocks: 154.223.218.0/24 maxlen: 24
154.223.219.0/24 maxlen: 24
154.223.220.0/24 maxlen: 24
154.223.221.0/24 maxlen: 24
154.223.222.0/24 maxlen: 24
154.223.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115003 (0x1c13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 28 08:40:55 2026 GMT
Not After : May 2 08:40:55 2026 GMT
Subject: CN=69c7941c-eba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d3:c8:77:db:f0:48:6b:88:ff:25:90:b5:ba:
b3:e3:c3:b4:10:6d:ff:d7:52:48:cc:e4:b0:3c:0e:
2c:01:1a:d2:75:b4:45:50:6b:0d:d2:0c:26:39:48:
d2:3c:9b:cd:16:71:f5:07:61:b2:88:be:4f:25:93:
10:1d:80:68:e2:41:ef:fa:93:f7:ce:59:1c:d6:9e:
17:27:4c:05:af:69:8b:54:f1:d1:e7:d7:ff:61:43:
64:d2:07:83:40:b6:42:3c:6b:6c:6f:87:2c:63:3e:
e1:ec:cc:92:aa:d2:62:48:a3:d8:1f:73:c6:f7:ef:
e6:f0:87:7b:66:2f:13:a3:3f:7c:2f:49:56:6d:70:
47:7f:58:77:c9:df:79:9c:a7:87:15:5a:f6:37:df:
04:a9:28:d7:5d:44:a1:bd:50:d1:88:be:fa:85:8b:
53:f2:6c:07:58:2b:83:0f:0c:43:24:fe:70:43:ae:
05:89:d0:6b:28:91:29:bf:1a:cd:8e:d7:bb:ff:a4:
25:af:d4:1b:8b:3f:db:ba:f7:8c:7c:b1:48:cb:90:
72:8a:5f:93:12:1e:5f:e2:32:4b:06:45:17:be:a7:
34:02:7b:11:83:3e:25:dd:8f:20:3b:74:6b:5f:6e:
75:53:78:5c:de:4b:c4:a8:b6:9b:a6:0a:6a:c3:94:
23:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:32:D3:A8:6D:DF:42:D1:22:24:EB:D6:35:56:37:D2:BC:79:0A:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D83AD4B02A8111F1BC9C86A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.218.0-154.223.223.255
Signature Algorithm: sha256WithRSAEncryption
3b:de:47:80:bb:90:4c:6e:d0:2f:94:e8:31:2a:6b:63:e8:82:
5b:f2:9b:5c:d9:c3:30:c9:e2:91:52:5d:de:90:71:0a:75:21:
78:a3:a9:81:ef:d2:cc:9b:e3:ab:fa:cb:b7:5e:e1:a0:65:66:
79:ee:82:dc:61:2a:e0:d8:80:82:82:ac:0e:18:e6:aa:29:8f:
be:95:79:7e:17:c6:58:05:da:f3:fb:f4:2a:92:63:ec:c5:ec:
75:8b:0d:0a:11:40:e2:d3:0c:af:d8:75:c7:e1:f6:f2:0c:21:
6f:bb:f9:4e:d3:79:5b:dc:5a:2c:49:61:51:a7:75:8e:9e:6c:
06:96:c3:27:77:1b:6b:eb:90:cb:48:5b:e8:2a:34:15:c6:9f:
57:6f:64:ac:ce:38:85:43:00:49:d5:76:4a:ac:bc:4c:73:10:
c2:82:c9:e8:10:09:66:08:4c:c1:bc:35:1f:83:90:63:50:e4:
f2:2b:dc:79:c7:a0:20:df:ef:3f:05:00:aa:96:45:03:b2:55:
df:3a:a9:32:6e:3a:ee:eb:ab:18:b0:d5:b8:9f:87:3c:f3:cb:
79:37:13:3a:7a:bc:31:20:26:e9:29:29:7d:3b:89:a2:d2:aa:
f7:52:18:dc:cb:70:f4:6e:b0:72:0e:77:91:71:88:6d:2b:7d:
f0:20:dc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:58 2026 by rpki-client