Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21AD7A56312311F189040778DAE4EC9C.roa
File: 21AD7A56312311F189040778DAE4EC9C.roa (raw, json)
Hash identifier: TRZshIUWkJ+F4+pPoyG8p7X/iVgZYEQubXBEwy2mdCg=
Subject key identifier: C9:5D:59:0E:6C:D7:C5:7C:F9:DF:B2:14:A7:0A:E5:9E:A4:67:34:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C34B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21AD7A56312311F189040778DAE4EC9C.roa
Signing time: Sun 05 Apr 2026 19:10:39 +0000
ROA not before: Sun 05 Apr 2026 19:10:34 +0000
ROA not after: Wed 13 May 2026 19:10:34 +0000
asID: 200758
IP address blocks: 154.84.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115531 (0x1c34b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 5 19:10:34 2026 GMT
Not After : May 13 19:10:34 2026 GMT
Subject: CN=69d2b3af-63dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:85:39:13:95:d7:00:07:09:d2:d3:e5:25:40:
f9:a5:f3:43:b5:3f:5b:dc:f4:c6:7d:d4:3a:01:fc:
b3:b6:8f:ce:b2:f7:eb:8b:ee:7f:69:28:f6:b8:46:
d9:c4:d6:3f:e2:d6:2a:34:a6:84:28:2a:f3:48:fe:
b7:1a:1b:9c:a7:42:f5:41:ea:1c:54:f6:6c:68:d2:
5b:c7:eb:fd:10:16:38:45:f5:5c:5e:c4:43:dc:7d:
3b:1b:e3:fa:6c:ec:a6:e7:60:6d:7f:15:d9:f9:f3:
65:e2:45:13:58:f4:4a:9f:37:40:a4:4d:fa:41:f9:
c6:49:f7:90:56:6f:81:f6:5e:d1:6c:48:fd:8a:bf:
20:64:08:3b:3b:5a:65:1a:84:a2:96:7e:d7:de:c9:
d6:92:74:fe:29:73:f0:60:cc:55:04:de:6c:32:9d:
7f:bf:b9:0b:e4:71:2d:54:2e:b1:67:50:b4:82:d1:
02:c5:bc:c6:95:33:d1:24:8f:85:d1:af:2e:19:5b:
09:5f:e2:28:a0:f8:7b:08:a9:09:c5:e8:bf:d6:bf:
e0:6a:57:9d:28:33:9f:c5:a9:2e:86:12:0e:56:80:
34:66:fe:96:aa:07:2c:4e:a0:36:fb:ab:aa:d7:a3:
b6:45:f0:34:22:0f:b6:77:f1:0f:32:1a:d1:5a:88:
e8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5D:59:0E:6C:D7:C5:7C:F9:DF:B2:14:A7:0A:E5:9E:A4:67:34:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21AD7A56312311F189040778DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.154.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:48:f7:99:92:07:b2:d2:68:07:68:b7:05:56:56:59:ee:1e:
fb:73:7c:6c:84:ba:53:de:16:f7:b8:d7:0b:1d:f0:ce:69:b3:
d9:84:64:2a:56:38:fd:45:52:02:91:39:84:32:1b:a2:21:cf:
4c:7a:66:d6:55:f9:9a:f7:c4:08:6b:84:74:4f:fb:5a:6a:61:
02:d3:98:05:0b:6b:3e:9a:b6:30:ff:ca:0d:39:05:ab:82:3d:
64:63:6d:33:13:5a:9d:81:20:03:18:e3:00:a1:3e:15:b6:f7:
4f:4a:37:05:9e:7f:79:2b:7f:11:9e:2c:6b:ed:10:0d:2a:24:
b4:5e:f0:13:df:83:f2:0f:a9:b5:5e:ee:49:ab:14:5e:cd:ca:
20:27:e1:06:77:aa:16:39:71:bd:5c:ac:2c:3f:9c:42:1e:97:
73:6a:4d:85:9b:be:fd:22:ce:91:c4:e4:38:45:a8:a4:ec:2a:
81:f2:0e:c7:9d:d1:fe:77:40:bf:0b:b5:c5:d4:a3:06:eb:b6:
52:a1:89:fc:8b:62:82:43:a0:4b:ec:18:30:13:60:be:39:e1:
f4:fe:5f:7e:35:58:3a:0b:e3:2e:69:02:4c:6a:f0:5f:4b:8b:
69:5e:9e:cb:dd:20:a7:2a:73:1f:07:81:6b:c2:a7:ef:72:6e:
1c:69:39:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:27:44 2026 by rpki-client