Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD290B204C6C11F1878FFA15CF1D38B0.roa
File: CD290B204C6C11F1878FFA15CF1D38B0.roa (raw, json)
Hash identifier: aSEMwXOSb5jYItVtRZELQ1bmEDbE2CsTfUk0I/eDDJI=
Subject key identifier: 18:D7:65:B8:B1:6A:5D:15:BF:6A:26:7D:39:CE:0A:73:5D:02:2D:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CAC5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD290B204C6C11F1878FFA15CF1D38B0.roa
Signing time: Sun 10 May 2026 12:36:01 +0000
ROA not before: Sun 10 May 2026 12:35:56 +0000
ROA not after: Tue 16 Jun 2026 12:35:56 +0000
asID: 401434
IP address blocks: 154.85.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 05:45:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117445 (0x1cac5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 10 12:35:56 2026 GMT
Not After : Jun 16 12:35:56 2026 GMT
Subject: CN=6a007bb1-5efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d3:c7:34:aa:78:f4:dd:ff:f9:e3:0a:90:cd:
20:b4:da:c3:dd:3c:04:ed:0d:72:04:70:2f:39:6d:
55:2d:70:38:4d:2b:a7:b7:53:ee:81:49:a6:9c:22:
cc:ea:cc:7b:49:ed:a1:a6:4f:91:65:11:35:51:20:
e7:42:b7:cf:e6:1d:09:a6:7c:14:c7:03:c4:0e:6a:
2a:8c:87:7e:63:6d:d9:02:f1:d5:12:3e:12:1f:92:
e9:e7:4d:65:fc:19:2d:2a:67:25:02:58:91:ae:fd:
0a:03:0f:37:66:9c:7f:b6:2f:f6:bf:54:b9:f5:ed:
0e:b0:a8:36:28:85:6a:30:fc:d1:2a:a9:c2:e9:cb:
4d:46:2b:6b:60:25:4d:61:02:ba:8b:87:d5:c5:88:
37:a8:7d:50:1c:03:04:e0:dc:0d:a2:7b:d3:18:32:
29:8b:81:09:6e:fd:30:56:39:f4:0d:34:ef:3c:0e:
05:cc:52:ce:82:09:54:0f:9a:a0:3e:b8:0c:e9:2a:
e7:8c:93:08:5c:2f:7d:00:a5:fb:f6:73:48:c3:10:
46:2f:3d:50:4b:c0:08:d4:97:7f:fc:9b:6d:0c:da:
f4:b1:df:9c:ea:72:29:3c:64:d2:50:06:e9:8c:28:
a3:df:a3:a7:d8:3e:cd:f6:6c:14:95:43:95:0a:16:
b2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D7:65:B8:B1:6A:5D:15:BF:6A:26:7D:39:CE:0A:73:5D:02:2D:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD290B204C6C11F1878FFA15CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.16.0/23
Signature Algorithm: sha256WithRSAEncryption
45:b4:01:8c:cf:b8:7d:a4:c4:a4:17:e7:48:0e:31:17:7d:aa:
8f:ce:bf:55:f8:a1:b0:e1:e7:94:97:03:06:80:22:a1:ee:89:
cc:0f:6b:c4:f5:dc:fa:e6:32:6f:0c:93:e6:3d:5c:87:c2:06:
f1:c7:8e:e2:7f:a3:84:2d:ca:33:ba:6c:bd:04:50:e2:74:fb:
e7:f8:a5:55:f7:c0:c0:58:45:19:c2:7e:78:4b:aa:4a:f8:39:
17:8a:c4:ed:6a:14:90:96:ef:72:e3:09:6c:d8:20:cd:d1:1c:
95:10:ad:65:8e:90:fe:7d:bb:47:6d:d9:81:86:82:46:03:e2:
7f:3e:ca:57:79:96:bc:47:4e:a6:1e:48:e6:2a:d2:ca:f7:64:
59:88:2a:47:3d:a3:8e:b1:70:3d:9c:cd:7c:99:ea:37:4f:cc:
9d:86:8f:48:9d:1b:cd:49:63:70:19:ac:48:2d:b7:ea:1e:25:
1e:18:cd:8e:7f:7e:37:1d:fc:88:f4:e7:38:6f:2c:95:0e:ca:
c9:16:50:c4:71:d0:4d:0d:3c:71:c5:0c:5a:ee:d3:c7:01:ec:
20:fc:d3:00:e9:85:1b:08:49:b9:99:62:97:64:db:6d:f6:52:
ef:a3:0e:3a:ca:f3:c4:1b:6a:4d:de:70:f0:2b:98:f4:33:a5:
9b:8c:0b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:22:47 2026 by rpki-client