Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/939CBD6E4CF511F19F7EA6DCCE1D38B0.roa
File: 939CBD6E4CF511F19F7EA6DCCE1D38B0.roa (raw, json)
Hash identifier: 2rPBNNNlHRH1dOeW2lxWdc9pV+jZwkAMj6ehNYYD4l4=
Subject key identifier: 35:FC:7E:EF:AC:E0:AF:D9:B9:A7:10:74:C6:47:9A:36:27:1A:6D:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CAE4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/939CBD6E4CF511F19F7EA6DCCE1D38B0.roa
Signing time: Mon 11 May 2026 04:55:05 +0000
ROA not before: Mon 11 May 2026 04:55:01 +0000
ROA not after: Sun 21 Jun 2026 04:55:01 +0000
asID: 2914
IP address blocks: 154.92.176.0/24 maxlen: 24
154.92.184.0/24 maxlen: 24
154.92.186.0/24 maxlen: 24
154.92.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 06:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117476 (0x1cae4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 11 04:55:01 2026 GMT
Not After : Jun 21 04:55:01 2026 GMT
Subject: CN=6a016129-53aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:60:56:3f:07:08:61:d3:04:43:2e:06:6c:0d:
bc:e6:d0:b9:01:f3:c4:6b:08:c2:05:ba:8c:0d:04:
8b:e0:ed:74:83:1f:57:36:cd:e4:5a:b9:88:8e:7b:
5d:50:49:b2:dc:dd:ce:08:eb:52:3e:17:e2:0e:2a:
84:52:b9:42:75:89:86:94:c6:83:21:4b:b3:de:39:
57:ab:26:8b:cd:2c:6c:23:3f:bc:a2:0f:33:ba:3d:
0d:68:2f:03:2f:67:7c:90:c2:c6:54:18:c5:d2:9c:
83:7d:9c:2c:e0:0e:76:d5:a9:5b:02:8d:aa:17:5a:
ce:26:05:82:15:0c:2b:01:18:d7:34:60:58:05:4a:
5d:b5:fa:c3:ca:70:2f:bc:0e:03:a7:75:46:46:e9:
4d:b2:c9:e1:28:90:80:9d:12:b4:9a:3f:96:03:55:
2f:00:a5:c4:9c:69:99:e4:92:b5:e2:24:a9:bb:bd:
f8:43:17:70:9c:45:c5:27:57:b5:42:78:f9:54:95:
9f:5c:fe:00:f6:2f:4a:40:be:1d:81:55:e3:45:80:
3b:3c:ef:dd:b9:8a:a6:60:3e:0d:d2:69:5f:44:12:
44:31:eb:34:e5:8a:59:69:3c:d0:ca:35:cd:d6:6c:
a3:7a:7a:91:85:18:16:ac:b0:21:9f:68:e4:f3:76:
98:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FC:7E:EF:AC:E0:AF:D9:B9:A7:10:74:C6:47:9A:36:27:1A:6D:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/939CBD6E4CF511F19F7EA6DCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.176.0/24
154.92.184.0/24
154.92.186.0/24
154.92.190.0/24
Signature Algorithm: sha256WithRSAEncryption
64:dd:9e:2b:cf:43:7b:c7:87:86:06:7b:ff:3a:17:6a:16:b3:
65:f1:37:f5:7f:1c:41:c7:56:a7:a4:f4:9c:4b:0a:fc:77:46:
28:24:ac:a2:69:02:13:43:6c:1e:5f:33:fd:82:b3:99:a7:e7:
6c:b9:81:0c:ac:09:2a:7e:cb:a2:87:f9:09:ea:66:c8:57:3d:
1e:f9:80:bb:91:89:2b:46:52:b2:3e:79:98:f9:49:28:23:db:
fc:c6:69:4b:90:f4:7c:b3:7f:1a:22:12:d0:2d:de:45:4b:d2:
b5:c1:7a:65:05:e5:1c:fa:32:ae:eb:61:9d:8e:41:5c:c7:bd:
1e:dc:f2:02:20:95:df:c3:6f:f8:54:69:b6:06:77:b5:a4:bf:
8e:a4:24:6c:05:0b:9e:7a:e6:3f:b7:5e:4c:99:c6:0f:47:6b:
df:68:b5:c8:51:46:c9:4e:42:05:26:87:76:b1:83:59:f9:1c:
62:0b:25:8f:47:aa:44:74:4b:45:0d:18:02:19:df:b7:db:01:
04:cc:d5:02:fb:53:9a:11:72:1c:0a:66:c7:0c:9e:e5:f7:1b:
1c:f5:9f:3b:f5:0d:a3:9e:2e:a5:85:b1:8e:64:05:4c:de:90:
f2:11:8a:1e:6f:a3:3d:ac:79:03:f5:e0:78:17:cd:fd:50:a7:
29:71:c0:f3
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgIDAcrkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTExMDQ1NTAxWhcNMjYwNjIxMDQ1NTAxWjAYMRYw
FAYDVQQDEw02YTAxNjEyOS01M2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4WBWPwcIYdMEQy4GbA285tC5AfPEawjCBbqMDQSL4O10gx9XNs3kWrmI
jntdUEmy3N3OCOtSPhfiDiqEUrlCdYmGlMaDIUuz3jlXqyaLzSxsIz+8og8zuj0N
aC8DL2d8kMLGVBjF0pyDfZws4A521albAo2qF1rOJgWCFQwrARjXNGBYBUpdtfrD
ynAvvA4Dp3VGRulNssnhKJCAnRK0mj+WA1UvAKXEnGmZ5JK14iSpu734QxdwnEXF
J1e1Qnj5VJWfXP4A9i9KQL4dgVXjRYA7PO/duYqmYD4N0mlfRBJEMes05YpZaTzQ
yjXN1myjenqRhRgWrLAhn2jk83aYXwIDAQABo4ICtzCCArMwHQYDVR0OBBYEFDX8
fu+s4K/ZuacQdMZHmjYnGm2bMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MzlDQkQ2RTRDRjUxMUYxOUY3RUE2RENDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAmlywAwQAmly4AwQAmly6
AwQAmly+MA0GCSqGSIb3DQEBCwUAA4IBAQBk3Z4rz0N7x4eGBnv/OhdqFrNl8Tf1
fxxBx1anpPScSwr8d0YoJKyiaQITQ2weXzP9grOZp+dsuYEMrAkqfsuih/kJ6mbI
Vz0e+YC7kYkrRlKyPnmY+UkoI9v8xmlLkPR8s38aIhLQLd5FS9K1wXplBeUc+jKu
62GdjkFcx70e3PICIJXfw2/4VGm2Bne1pL+OpCRsBQueeuY/t15MmcYPR2vfaLXI
UUbJTkIFJod2sYNZ+RxiCyWPR6pEdEtFDRgCGd+32wEEzNUC+1OaEXIcCmbHDJ7l
9xsc9Z879Q2jni6lhbGOZAVM3pDyEYoeb6M9rHkD9eB4F839UKcpccDz
-----END CERTIFICATE-----
Generated at Wed May 13 12:39:24 2026 by rpki-client