Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34430654340C11F1954744ECCE1D38B0.roa
File: 34430654340C11F1954744ECCE1D38B0.roa (raw, json)
Hash identifier: DsYtgOTEZnCvKjyXtYBta5qaw2ovdmLhPuOGHvsER8M=
Subject key identifier: 23:D0:2D:19:5A:35:9B:49:A7:51:E4:B5:A3:B5:61:53:65:A6:C7:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C3E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34430654340C11F1954744ECCE1D38B0.roa
Signing time: Thu 09 Apr 2026 12:04:05 +0000
ROA not before: Thu 09 Apr 2026 12:04:00 +0000
ROA not after: Thu 07 May 2026 12:04:00 +0000
asID: 147176
IP address blocks: 154.197.69.0/24 maxlen: 24
154.215.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115682 (0x1c3e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 12:04:00 2026 GMT
Not After : May 7 12:04:00 2026 GMT
Subject: CN=69d795b5-89bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fb:8c:f8:8a:ac:0c:92:63:90:06:ec:69:a1:
b3:0a:35:db:95:b5:66:c7:50:cd:f9:a7:52:46:63:
f2:15:1a:66:ce:95:63:a9:e8:fa:a4:b8:0a:41:8d:
89:4a:49:c2:7e:5b:40:ec:1a:a2:0d:52:74:8b:c1:
87:17:6f:d8:ae:45:45:a6:1b:46:3e:0b:a7:35:46:
7f:ea:4b:f9:b6:f8:07:e9:e6:b9:fc:0d:7a:c0:f1:
f2:df:3f:f6:86:9f:8c:2b:f0:9e:42:98:1b:b8:23:
7d:88:64:16:03:f8:88:40:00:d0:23:cd:60:49:54:
71:d8:ad:0b:09:a1:8d:ce:c3:f4:a5:b8:ec:fa:bd:
c6:96:25:59:77:77:81:a3:37:b8:c4:3c:9f:37:01:
95:c5:c6:fc:30:bf:63:2b:d3:9d:07:44:fd:84:ab:
73:b6:bb:bd:cf:7e:b6:ef:25:f3:c4:a6:f2:1b:a2:
a8:25:08:ef:7c:1a:2a:4d:c1:d4:67:ec:78:23:a5:
45:84:21:c8:c3:3c:0e:03:2f:a3:4f:12:33:17:95:
7b:7c:7b:11:63:e2:22:d0:30:9e:20:7b:de:35:da:
fa:0e:9f:ad:1c:77:c2:7d:fe:bc:82:84:b0:7c:75:
b0:8c:f9:3a:08:36:0d:2d:f1:99:5a:9d:21:23:28:
9b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D0:2D:19:5A:35:9B:49:A7:51:E4:B5:A3:B5:61:53:65:A6:C7:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34430654340C11F1954744ECCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.69.0/24
154.215.14.0/24
Signature Algorithm: sha256WithRSAEncryption
02:fd:5c:85:bf:3e:97:ff:10:34:e0:2b:87:0b:ef:55:ee:bc:
2a:08:64:35:b4:f8:0e:eb:98:39:94:40:f6:b7:ab:fe:28:cb:
bf:7b:34:34:c9:c6:0e:21:df:4c:23:a1:1a:20:42:1a:5f:f4:
93:da:14:4f:12:f8:cd:9e:d6:9f:fe:28:61:bd:5c:17:1b:f2:
50:fc:d0:86:58:d0:6e:4c:10:67:ef:90:d3:05:28:26:d2:8a:
6c:1a:75:85:2a:8b:4b:fd:89:21:f6:35:ab:85:36:bc:cc:91:
e6:13:e6:e7:f0:4e:60:59:d1:80:41:60:b1:76:5e:b5:0c:4d:
93:a4:50:e5:0d:b1:53:2a:31:45:16:86:fc:d6:af:ff:e8:76:
4c:77:ad:bf:b7:17:ac:88:15:23:66:96:a8:51:ce:bb:14:57:
2b:4c:30:55:24:1a:b0:cb:1d:73:e2:72:87:4f:6b:26:64:b2:
ac:40:15:ae:c0:00:6c:71:52:18:8a:16:f6:6d:cb:68:2d:d2:
47:fd:49:68:c3:d9:b7:35:5f:f4:31:b4:34:c2:97:ce:31:8f:
ac:3b:1e:ca:5f:08:53:c3:3e:2f:52:6b:84:bc:80:6b:21:f6:
3b:18:62:81:cb:05:3e:85:d1:c7:e4:5a:14:fd:0d:6d:10:0e:
c6:d5:4a:58
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAcPiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDA5MTIwNDAwWhcNMjYwNTA3MTIwNDAwWjAYMRYw
FAYDVQQDEw02OWQ3OTViNS04OWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvPuM+IqsDJJjkAbsaaGzCjXblbVmx1DN+adSRmPyFRpmzpVjqej6pLgK
QY2JSknCfltA7BqiDVJ0i8GHF2/YrkVFphtGPgunNUZ/6kv5tvgH6ea5/A16wPHy
3z/2hp+MK/CeQpgbuCN9iGQWA/iIQADQI81gSVRx2K0LCaGNzsP0pbjs+r3GliVZ
d3eBoze4xDyfNwGVxcb8ML9jK9OdB0T9hKtztru9z3627yXzxKbyG6KoJQjvfBoq
TcHUZ+x4I6VFhCHIwzwOAy+jTxIzF5V7fHsRY+Ii0DCeIHveNdr6Dp+tHHfCff68
goSwfHWwjPk6CDYNLfGZWp0hIyibAQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFCPQ
LRlaNZtJp1HktaO1YVNlpsfXMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNDQzMDY1NDM0MEMxMUYxOTU0NzQ0RUNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmsVFAwQAmtcOMA0GCSqG
SIb3DQEBCwUAA4IBAQAC/VyFvz6X/xA04CuHC+9V7rwqCGQ1tPgO65g5lED2t6v+
KMu/ezQ0ycYOId9MI6EaIEIaX/ST2hRPEvjNntaf/ihhvVwXG/JQ/NCGWNBuTBBn
75DTBSgm0opsGnWFKotL/Ykh9jWrhTa8zJHmE+bn8E5gWdGAQWCxdl61DE2TpFDl
DbFTKjFFFob81q//6HZMd62/txesiBUjZpaoUc67FFcrTDBVJBqwyx1z4nKHT2sm
ZLKsQBWuwABscVIYihb2bctoLdJH/Ulow9m3NV/0MbQ0wpfOMY+sOx7KXwhTwz4v
UmuEvIBrIfY7GGKBywU+hdHH5FoU/Q1tEA7G1UpY
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:12:26 2026 by rpki-client