Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C560CAC4D5B11F1800805BCCE1D38B0.roa
File: 3C560CAC4D5B11F1800805BCCE1D38B0.roa (raw, json)
Hash identifier: 82qGPIf0+Ec0X6dZeJthg8belCITGtGh5cVaYbJBfyM=
Subject key identifier: 1A:82:01:F1:F2:B3:B3:51:CB:9C:81:68:27:31:CC:82:33:DE:0C:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CB29
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C560CAC4D5B11F1800805BCCE1D38B0.roa
Signing time: Mon 11 May 2026 17:02:48 +0000
ROA not before: Mon 11 May 2026 17:02:42 +0000
ROA not after: Sat 23 May 2026 17:02:42 +0000
asID: 17497
IP address blocks: 154.90.138.0/23 maxlen: 24
154.90.138.0/24 maxlen: 24
154.90.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 06:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117545 (0x1cb29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 11 17:02:42 2026 GMT
Not After : May 23 17:02:42 2026 GMT
Subject: CN=6a020bb8-1a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:56:08:31:18:7a:37:ec:52:c4:a4:24:f5:
12:12:fa:bb:f4:65:4e:11:30:d4:2b:a0:ba:b2:62:
f9:bd:69:a4:88:eb:41:e5:ab:75:81:49:d6:20:1c:
36:71:eb:4d:32:88:d5:aa:df:c5:dd:c0:a4:74:bf:
9d:b3:fc:57:0f:5e:f7:ce:24:5b:a4:47:a4:d5:ee:
9e:60:cf:b1:2b:91:8f:70:2a:87:3a:e0:76:b7:6f:
d6:45:a5:bb:5d:89:3e:18:7c:14:85:e8:bb:2c:ef:
45:af:68:ed:a6:44:16:a6:4f:b7:67:fb:97:b0:3f:
99:99:81:2f:08:25:cc:ad:d3:4a:66:b5:c6:70:6f:
82:6f:4d:13:3f:48:ed:50:c5:ed:ab:3e:83:5a:95:
6f:09:66:73:c5:db:46:25:7a:e8:16:e4:27:e8:08:
0f:79:ce:44:bf:ad:a3:f6:06:00:44:24:37:1a:77:
67:49:40:c0:c4:c5:9a:27:58:94:f4:30:3a:47:d0:
05:81:d2:9c:01:c4:a5:ff:b3:a2:15:41:5e:0d:5c:
20:d6:1e:8a:d9:7b:f6:6c:10:5c:28:34:13:a4:27:
97:9d:b0:7d:02:07:40:27:b7:4c:2b:d6:fb:e4:7f:
03:68:92:d8:c6:53:9a:90:d7:46:ee:bd:1f:6b:5e:
7c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:82:01:F1:F2:B3:B3:51:CB:9C:81:68:27:31:CC:82:33:DE:0C:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C560CAC4D5B11F1800805BCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.138.0/23
Signature Algorithm: sha256WithRSAEncryption
d8:02:f1:34:da:f4:de:76:17:3e:f0:3b:6e:ad:63:03:ea:a7:
eb:df:19:26:79:60:07:ad:41:d8:83:77:6b:56:cd:a5:a8:c2:
92:65:25:61:17:05:97:c1:ec:6b:0e:be:44:e8:9b:61:08:9c:
9e:71:80:b9:f3:40:dd:62:41:93:ea:ae:b9:92:f4:2e:c0:8f:
75:52:47:87:e0:8c:df:2f:73:2e:b5:aa:e8:6d:e0:01:da:34:
58:c7:6e:27:8e:20:19:8d:ac:61:88:90:5e:e3:41:21:af:d6:
de:cb:85:1d:b6:3c:1a:75:ef:a3:64:93:ea:ef:e4:3d:0b:5d:
4f:cf:63:3c:29:a5:3e:cf:77:12:30:35:33:c5:32:7a:3d:02:
77:10:ce:54:d2:96:86:32:e5:52:db:50:a0:c7:46:ca:6c:35:
12:d5:24:ba:84:98:cb:51:3d:44:d6:15:01:eb:00:03:01:c5:
00:cc:ea:e8:86:63:b0:fe:0d:52:fa:66:9b:1f:b7:74:a6:d2:
bb:ef:85:7b:f4:f9:1e:3d:16:15:69:86:cc:fd:ab:68:ee:4e:
65:5a:d7:9d:32:e5:07:4e:80:be:08:0e:e6:7c:f1:81:02:d2:
f0:1f:af:16:f8:c9:22:0a:d9:8e:e6:b6:23:e8:cb:ae:c1:72:
f8:94:6a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:42:34 2026 by rpki-client