Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5B0886613C911F1B0FAE9AADAE4EC9C.roa
File: E5B0886613C911F1B0FAE9AADAE4EC9C.roa (raw, json)
Hash identifier: 8ZhBhHeBPbYiv/Tttazx6eRuk8TVWk0DPWDUMx2Vbgg=
Subject key identifier: 89:A8:EC:81:08:59:75:F4:44:92:66:18:F0:61:04:D0:92:2F:89:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC46
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5B0886613C911F1B0FAE9AADAE4EC9C.roa
Signing time: Fri 27 Feb 2026 10:48:49 +0000
ROA not before: Fri 27 Feb 2026 10:48:44 +0000
ROA not after: Sun 08 Mar 2026 10:48:44 +0000
asID: 6079
IP address blocks: 154.90.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113734 (0x1bc46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 10:48:44 2026 GMT
Not After : Mar 8 10:48:44 2026 GMT
Subject: CN=69a17691-28d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:75:ef:62:19:01:d6:00:1b:0d:51:42:15:d7:
79:33:c3:46:be:aa:88:c3:8f:ed:52:12:04:1f:be:
73:f9:5e:3b:fb:ee:13:e0:f6:4f:f0:54:12:95:04:
d0:ff:11:97:e8:dd:bf:64:3e:44:77:e2:1c:3d:a7:
8c:9d:cf:c3:7d:b6:d9:25:25:2b:1a:be:d9:c3:25:
fe:ea:72:b8:5c:51:69:61:d6:3c:7d:92:5b:08:27:
94:cc:a0:39:7b:fc:57:84:7e:c4:5b:40:97:44:34:
34:36:9a:61:d6:57:36:b4:03:c0:34:01:1c:1f:07:
ab:7f:81:3a:e0:b5:33:14:20:f4:ec:4a:9a:d7:db:
6d:46:e5:7f:bd:bb:9d:9f:98:fe:50:92:2b:db:43:
34:3f:ca:3f:6e:68:9d:d8:8e:ba:46:20:5e:5c:af:
7a:bc:dd:c5:c4:ff:f1:4f:5f:f2:d4:20:a9:39:74:
92:a2:1a:f1:d5:b9:e3:6b:a3:ca:d9:38:4d:e0:0d:
c5:02:97:e5:2e:51:10:e4:65:61:ba:cf:cc:25:bd:
56:43:fa:86:95:4b:52:ac:f7:cb:99:20:36:8a:49:
55:18:7b:47:f9:5f:be:fc:1d:ef:35:af:64:2c:76:
2b:24:9e:cd:1c:be:c8:ec:f5:62:5a:8a:ef:03:83:
ea:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A8:EC:81:08:59:75:F4:44:92:66:18:F0:61:04:D0:92:2F:89:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5B0886613C911F1B0FAE9AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.190.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:9b:38:be:02:f5:99:ed:c2:b3:83:c2:08:d2:ab:69:ad:88:
bb:38:3e:26:65:0f:39:e6:96:e6:65:ce:99:9f:66:db:b1:3e:
74:c5:da:56:dd:a8:d3:e1:6d:81:96:f9:ee:4b:58:05:bf:29:
70:97:fe:6c:8c:51:71:be:74:51:d3:da:a7:27:1f:94:33:6b:
7f:53:b7:66:40:1d:71:72:ab:07:97:35:a0:91:71:8d:29:37:
46:2e:53:ca:59:be:48:b1:06:da:37:30:ea:55:9c:ef:4b:1e:
f4:dc:c2:ff:b5:5f:0a:99:c3:6e:38:bd:52:b3:5e:5d:59:2c:
d0:e0:98:2d:16:d5:1c:18:7d:e4:2e:4d:90:19:1e:bb:bd:9f:
00:89:5d:c0:97:a6:39:31:0f:b4:5f:65:72:a3:ca:20:e0:3e:
73:af:e4:8e:69:fd:88:0f:f6:73:71:53:ed:df:ac:9e:f7:df:
b7:bc:6c:8f:1e:de:f4:77:80:54:c2:ef:eb:53:c4:c9:ec:3a:
27:24:f4:aa:d3:88:5f:cf:cb:84:49:7d:ef:b2:9f:cc:7f:58:
e6:e3:ed:8b:04:cd:54:f1:a7:4d:0c:06:fe:8a:56:7a:0d:b2:
02:fa:91:b3:46:69:4c:79:ab:bf:0c:55:01:25:fe:2c:a6:1f:
a5:6c:f6:07
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbxGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjI3MTA0ODQ0WhcNMjYwMzA4MTA0ODQ0WjAYMRYw
FAYDVQQDEw02OWExNzY5MS0yOGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7HXvYhkB1gAbDVFCFdd5M8NGvqqIw4/tUhIEH75z+V47++4T4PZP8FQS
lQTQ/xGX6N2/ZD5Ed+IcPaeMnc/DfbbZJSUrGr7ZwyX+6nK4XFFpYdY8fZJbCCeU
zKA5e/xXhH7EW0CXRDQ0Npph1lc2tAPANAEcHwerf4E64LUzFCD07Eqa19ttRuV/
vbudn5j+UJIr20M0P8o/bmid2I66RiBeXK96vN3FxP/xT1/y1CCpOXSSohrx1bnj
a6PK2ThN4A3FApflLlEQ5GVhus/MJb1WQ/qGlUtSrPfLmSA2iklVGHtH+V++/B3v
Na9kLHYrJJ7NHL7I7PViWorvA4PqeQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFImo
7IEIWXX0RJJmGPBhBNCSL4lzMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNUIwODg2NjEzQzkxMUYxQjBGQUU5QUFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlq+MA0GCSqGSIb3DQEB
CwUAA4IBAQAdmzi+AvWZ7cKzg8II0qtprYi7OD4mZQ855pbmZc6Zn2bbsT50xdpW
3ajT4W2BlvnuS1gFvylwl/5sjFFxvnRR09qnJx+UM2t/U7dmQB1xcqsHlzWgkXGN
KTdGLlPKWb5IsQbaNzDqVZzvSx703ML/tV8KmcNuOL1Ss15dWSzQ4JgtFtUcGH3k
Lk2QGR67vZ8AiV3Al6Y5MQ+0X2Vyo8og4D5zr+SOaf2ID/ZzcVPt36ye99+3vGyP
Ht70d4BUwu/rU8TJ7DonJPSq04hfz8uESX3vsp/Mf1jm4+2LBM1U8adNDAb+ilZ6
DbIC+pGzRmlMeau/DFUBJf4sph+lbPYH
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:07:10 2026 by rpki-client