Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8685F98343511F1BC54A5E7CE1D38B0.roa
File: E8685F98343511F1BC54A5E7CE1D38B0.roa (raw, json)
Hash identifier: vUUKE6yXatCx8UJknw+9FhwvMJJj4VpVP3O4uyP4lFQ=
Subject key identifier: 07:40:8A:D1:D0:1E:DE:F5:DC:DE:DD:29:ED:BF:38:F3:05:98:74:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C41E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8685F98343511F1BC54A5E7CE1D38B0.roa
Signing time: Thu 09 Apr 2026 17:02:37 +0000
ROA not before: Thu 09 Apr 2026 17:02:32 +0000
ROA not after: Mon 09 Apr 2029 17:02:32 +0000
asID: 17561
IP address blocks: 154.86.194.0/24 maxlen: 24
154.86.195.0/24 maxlen: 24
154.86.196.0/24 maxlen: 24
154.86.197.0/24 maxlen: 24
154.86.198.0/24 maxlen: 24
154.86.199.0/24 maxlen: 24
154.86.200.0/24 maxlen: 24
154.86.201.0/24 maxlen: 24
154.86.202.0/24 maxlen: 24
154.86.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115742 (0x1c41e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 17:02:32 2026 GMT
Not After : Apr 9 17:02:32 2029 GMT
Subject: CN=69d7dbac-c455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:37:d7:cc:84:b0:30:b4:7f:51:79:32:4d:35:
c0:2d:d1:c8:85:98:a9:cb:25:41:c3:3a:47:c4:43:
92:a4:38:d5:5a:69:ef:c9:0f:25:04:2d:cc:8e:46:
2a:87:98:bd:23:2e:94:54:24:8d:a1:54:b8:ef:e7:
af:6f:23:3d:11:d3:ae:6d:c1:ea:ca:cc:67:93:c4:
97:c8:80:e3:2a:ab:64:7e:a7:cf:7d:dd:bf:c3:9c:
0e:43:c4:24:d1:10:54:5b:ee:1d:f5:1b:7d:f6:b2:
26:ce:48:07:d8:69:76:de:7a:7c:03:e9:32:b0:88:
2c:23:60:24:f6:ae:cc:da:70:98:4e:62:b3:dd:95:
47:4d:f2:f3:71:e6:96:10:8b:0a:a2:9a:48:9d:3c:
7a:e0:ea:ab:c1:78:9b:12:4f:b5:ed:88:46:f5:7c:
f8:22:4f:bb:a7:eb:bf:1f:e5:c3:9d:14:ca:1f:2d:
8a:c6:38:9d:cf:bf:49:b3:07:b1:8d:cc:da:f2:fa:
ec:d8:5f:be:ff:32:33:49:c4:4a:ba:ca:b7:cd:50:
44:b0:51:73:9d:1c:7d:1a:e4:59:62:f0:f0:78:f0:
25:31:d0:ba:b8:ba:f3:d6:6c:7e:53:d8:3c:db:79:
1d:54:99:30:c9:f2:cd:66:72:8e:5c:35:6f:d8:9a:
bd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:40:8A:D1:D0:1E:DE:F5:DC:DE:DD:29:ED:BF:38:F3:05:98:74:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8685F98343511F1BC54A5E7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.194.0-154.86.203.255
Signature Algorithm: sha256WithRSAEncryption
be:2d:8b:ee:33:b0:4a:2b:b6:00:14:e7:8f:8d:e5:cd:5c:a8:
3e:6f:c6:19:ea:8f:18:af:2d:8d:90:4c:b0:ca:f5:7d:89:0d:
32:0d:2e:0c:62:ef:71:4e:8e:0a:7a:63:ce:36:da:80:64:54:
b4:cf:20:7e:91:d3:f6:51:bf:dd:a6:29:14:72:ba:af:e0:eb:
fe:96:19:bc:0d:6d:5f:80:71:86:ab:55:14:fe:49:2a:ad:d5:
bc:14:a8:d4:0f:42:2c:c9:18:56:f8:4f:56:d4:7e:28:b9:65:
e0:da:92:8e:76:a0:f5:62:be:22:0c:01:20:c2:7e:d7:bb:d5:
8c:39:cc:8d:c9:1a:53:33:52:82:2e:b4:4e:23:18:96:fd:1b:
80:39:d6:62:70:b5:47:f7:5f:d8:8d:3b:84:94:e8:ab:a1:45:
a1:b4:75:36:17:ab:dc:a3:44:ad:c8:68:08:81:3e:ab:f1:a3:
66:72:d6:e9:3c:2f:b3:a2:1b:06:16:c8:33:f1:81:ac:be:d0:
93:13:46:a8:74:69:fc:fe:65:86:4d:4e:52:ca:d5:80:cf:d5:
90:0e:9a:c2:98:30:09:62:43:7a:ea:b5:42:14:3a:da:d4:2f:
e9:d4:c8:6a:28:22:9f:e7:75:24:83:fa:af:f9:c5:8a:a0:ce:
32:5e:22:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:18:06 2026 by rpki-client