Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8AE01F0332411F18F7329EFCE1D38B0.roa
File: D8AE01F0332411F18F7329EFCE1D38B0.roa (raw, json)
Hash identifier: MQV8JVe6aOie1Xait6RKfln6MfBNYbJtVFQE40DRPgE=
Subject key identifier: 9F:FF:13:5E:5C:D6:BB:C7:E0:30:FF:00:D8:A0:88:52:36:00:FB:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C384
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8AE01F0332411F18F7329EFCE1D38B0.roa
Signing time: Wed 08 Apr 2026 08:27:57 +0000
ROA not before: Wed 08 Apr 2026 08:27:53 +0000
ROA not after: Wed 20 May 2026 08:27:53 +0000
asID: 214413
IP address blocks: 154.205.253.0/24 maxlen: 24
154.205.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115588 (0x1c384)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 8 08:27:53 2026 GMT
Not After : May 20 08:27:53 2026 GMT
Subject: CN=69d6118d-a4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2b:d1:ec:be:58:97:0e:bd:f9:f2:de:c2:26:
bc:55:43:4a:51:fc:a3:49:8a:cf:88:e5:9e:6d:3b:
df:25:82:bb:32:6a:67:8d:6b:19:13:38:98:a6:68:
a9:49:43:2e:f2:c4:8b:08:99:aa:e6:f7:bd:ab:20:
a0:01:4e:aa:e3:75:b9:2d:94:69:67:8d:4c:3c:c3:
f1:90:9b:04:73:64:f9:40:63:50:c9:bc:b3:10:c3:
a2:09:96:0e:4f:5a:7a:75:7d:22:3c:a8:49:63:4b:
23:3a:96:89:b4:ec:35:ab:6c:f2:45:f0:64:97:d6:
70:47:7e:a1:de:a5:3d:1f:0e:8e:b6:5e:84:51:c4:
04:4e:85:98:2d:0a:e3:b8:97:14:a4:d1:02:c7:c3:
b5:16:3d:49:21:db:62:6c:b9:57:be:47:02:56:06:
dc:fe:87:e3:16:d9:b1:22:fb:24:61:af:27:52:89:
6f:24:7b:fa:a9:1a:ae:c5:f3:16:98:fb:b2:20:38:
82:d7:85:f5:04:a0:51:ec:dc:04:af:a5:26:40:05:
53:95:e8:9d:7c:ee:51:14:da:92:ef:db:99:e8:c2:
da:48:34:ee:e5:2b:33:21:ad:ac:22:96:0e:ee:8b:
2c:e0:4d:8e:ce:ca:e5:16:c4:c5:cf:e6:3b:1c:88:
1d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FF:13:5E:5C:D6:BB:C7:E0:30:FF:00:D8:A0:88:52:36:00:FB:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8AE01F0332411F18F7329EFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.253.0-154.205.254.255
Signature Algorithm: sha256WithRSAEncryption
90:aa:28:01:3a:78:47:7c:53:75:06:5e:a7:07:5a:18:19:61:
18:1f:9f:d0:9e:7f:87:32:f1:68:4a:ed:2d:f6:14:b7:24:a8:
09:6d:d9:98:b7:68:fe:5b:6e:f1:d3:0e:4f:ac:60:52:e5:52:
bd:a8:20:61:16:ae:03:13:f3:b7:51:4f:e8:07:11:88:c4:34:
1b:04:c6:94:07:c1:65:11:4f:84:65:26:c9:e3:39:1e:d9:f0:
c5:24:9c:27:26:34:1b:93:36:02:a3:2a:cb:45:1f:7f:b1:a2:
99:26:20:39:14:3d:cb:d0:c0:2d:d2:b2:3a:57:66:41:6e:55:
70:72:01:38:99:ca:7b:b4:72:aa:6e:5d:e1:0c:23:d2:77:03:
11:1f:7b:4c:38:bc:82:3d:23:7f:f9:97:b0:4d:55:9f:4b:c1:
25:44:45:bc:2b:23:28:55:ac:ec:e3:ad:a3:98:eb:ea:5f:5e:
21:35:e7:49:81:28:07:c4:aa:29:97:8a:3a:4c:86:3e:b3:ef:
71:87:57:4c:19:bc:97:9f:64:b1:d9:2a:f7:5d:74:4f:bd:7a:
55:33:e4:44:b3:e1:11:9e:3a:c0:7b:33:b4:8d:19:b3:ac:ae:
25:9a:24:ad:ba:0f:e4:2a:29:8d:4d:42:2f:14:33:c6:22:96:
8c:cf:fb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:50 2026 by rpki-client