Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E479ACF2340D11F18B4B8AF6CE1D38B0.roa
File: E479ACF2340D11F18B4B8AF6CE1D38B0.roa (raw, json)
Hash identifier: 5iTEhYwCyTf/onFHjosImj3g4QRIaZj3r+Dwum/EGAM=
Subject key identifier: CB:8A:6A:D7:B0:DA:3B:EC:39:0F:91:5D:F3:34:4C:D0:29:91:37:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C3E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E479ACF2340D11F18B4B8AF6CE1D38B0.roa
Signing time: Thu 09 Apr 2026 12:16:10 +0000
ROA not before: Thu 09 Apr 2026 12:16:05 +0000
ROA not after: Sun 19 Apr 2026 12:16:05 +0000
asID: 9304
IP address blocks: 154.89.132.0/24 maxlen: 24
154.90.65.0/24 maxlen: 24
154.90.67.0/24 maxlen: 24
154.90.128.0/24 maxlen: 24
154.90.134.0/24 maxlen: 24
154.90.136.0/24 maxlen: 24
154.90.137.0/24 maxlen: 24
154.90.140.0/24 maxlen: 24
154.90.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115686 (0x1c3e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 12:16:05 2026 GMT
Not After : Apr 19 12:16:05 2026 GMT
Subject: CN=69d7988a-df3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a1:5a:08:26:83:73:69:06:a1:7b:d0:30:c9:
23:af:7c:d9:6e:1a:4d:86:27:98:65:d8:f4:56:fd:
a7:ad:d4:80:ba:59:dc:8a:c2:ca:d4:a6:1e:05:3c:
55:b8:90:0c:79:14:e4:55:77:6e:34:e1:55:52:f2:
d3:a6:48:7c:ad:94:0b:29:e6:72:06:35:08:3e:04:
aa:b6:f8:b6:f5:56:56:8e:ff:22:7b:aa:89:90:4e:
d0:d3:23:23:aa:0b:ca:c8:46:4c:3c:26:73:d7:84:
6e:42:fd:5e:ee:91:50:e3:11:91:b4:fd:fe:95:35:
c2:fa:35:a8:a4:54:d7:35:33:12:4c:7b:96:ee:fc:
cc:20:cd:a5:8c:e6:e4:21:6b:c5:ef:47:df:d1:66:
94:3a:de:0e:77:32:fb:bc:1b:db:1e:7d:bc:5d:b4:
0c:2f:79:7c:0a:98:3b:a7:b1:43:f1:40:04:5b:f8:
5b:da:f7:3e:8e:4c:0f:c6:9e:41:5b:a1:e0:0d:84:
86:97:ea:25:5b:70:c1:a2:13:48:6a:a7:d7:90:2b:
b7:7b:33:14:85:22:6b:ae:92:b8:26:3d:72:38:9a:
64:8d:9a:6a:d3:19:67:52:b6:23:3c:78:3a:20:15:
3c:fa:77:3c:f3:e7:bc:be:5c:fd:17:42:ff:b1:6d:
16:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8A:6A:D7:B0:DA:3B:EC:39:0F:91:5D:F3:34:4C:D0:29:91:37:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E479ACF2340D11F18B4B8AF6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.132.0/24
154.90.65.0/24
154.90.67.0/24
154.90.128.0/24
154.90.134.0/24
154.90.136.0/23
154.90.140.0/24
154.90.189.0/24
Signature Algorithm: sha256WithRSAEncryption
54:f4:d4:ea:58:12:52:33:d7:c8:5d:37:73:f8:a8:ec:f1:ff:
88:cf:3e:dc:96:f2:36:d4:9e:12:ab:9c:58:54:00:e1:de:64:
ea:c6:9d:ad:33:fe:a5:83:dc:86:89:24:6b:f5:16:3a:59:70:
0f:3b:b7:72:53:d1:9b:42:5d:ee:b7:b6:46:77:44:fa:82:19:
25:2a:be:e3:1e:7a:84:f9:78:f9:31:8b:7d:3e:d5:74:72:2c:
b1:bf:a0:ec:87:86:a8:db:1f:6e:43:ce:68:33:a3:56:0e:e2:
5a:a7:80:fc:36:98:65:8a:a3:7c:a3:82:13:b8:1e:22:82:99:
ee:f1:69:4a:c6:88:1b:f9:64:f2:b7:e2:0f:78:3d:61:11:c1:
7d:7e:b1:93:f5:91:a1:1f:b5:3a:d5:a3:c1:aa:7d:08:9c:61:
de:52:49:bb:b5:43:4a:fa:25:3d:d1:66:dd:9a:ea:77:6e:11:
90:ee:e3:66:7d:a8:5c:bf:32:32:b0:19:65:db:ad:05:0f:f7:
4c:a9:b6:2a:e0:81:2c:1e:2a:e8:89:38:57:12:ff:bb:cd:68:
cf:c4:39:7f:2c:f5:48:8f:5d:9d:b5:f9:1b:b2:49:53:9d:1a:
f6:b6:8b:74:d5:2f:1a:55:e5:33:03:fb:7b:ef:05:40:b0:9d:
03:1d:30:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:00:14 2026 by rpki-client