Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3673F8EC01BD11F1844CFEC3DAE4EC9C.roa
File: 3673F8EC01BD11F1844CFEC3DAE4EC9C.roa (raw, json)
Hash identifier: kJ1OomWGK0R0OaDC7LP009ziFHhbKslLwuxhGgMpNic=
Subject key identifier: D5:7D:B8:7D:74:1D:E9:D4:2F:03:30:F7:B2:97:82:30:F8:EE:9B:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B891
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3673F8EC01BD11F1844CFEC3DAE4EC9C.roa
Signing time: Wed 04 Feb 2026 11:32:40 +0000
ROA not before: Wed 04 Feb 2026 11:32:35 +0000
ROA not after: Wed 11 Mar 2026 11:32:35 +0000
asID: 20326
IP address blocks: 154.193.188.0/22 maxlen: 24
154.222.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112785 (0x1b891)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 4 11:32:35 2026 GMT
Not After : Mar 11 11:32:35 2026 GMT
Subject: CN=69832e58-2c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b6:19:6f:48:5f:20:ba:a3:fd:c1:7a:fa:f5:
83:4f:6a:38:cb:4b:73:73:42:a6:eb:5a:ea:68:f4:
fe:a5:12:6f:5b:61:d6:b3:d3:1e:41:1b:29:a8:93:
14:61:e2:9c:ae:a3:82:00:a0:f7:34:b7:a0:b6:12:
0e:10:91:41:59:c5:f9:e5:63:af:de:62:3f:4a:9c:
f1:bd:88:2f:a9:e7:2b:87:a6:72:6b:eb:15:8a:08:
22:ab:75:da:4c:04:79:db:59:fc:22:df:df:f6:c5:
c9:67:d1:57:7d:9f:99:eb:95:af:49:67:df:ec:92:
7e:c5:21:fa:d2:93:12:73:91:36:59:73:85:07:44:
48:ad:36:c5:79:c7:58:cb:f6:51:f0:5e:c1:28:de:
be:22:24:6a:96:e5:dd:e9:6e:d1:bd:84:40:32:0c:
ba:3f:b2:a3:67:a0:6f:58:73:d7:eb:7d:2d:7d:8c:
4a:0c:e9:a9:16:cd:cf:71:a6:df:d0:a6:03:33:74:
82:89:c7:3a:65:85:d5:aa:fd:62:76:70:8b:05:db:
11:08:3f:35:1f:7b:be:37:65:9b:fd:42:34:c4:e6:
f6:38:3c:9d:a2:15:44:a9:1c:d0:c5:05:71:28:d3:
2a:5d:a4:8d:d6:7a:7d:94:a5:e0:f7:c9:00:27:81:
df:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7D:B8:7D:74:1D:E9:D4:2F:03:30:F7:B2:97:82:30:F8:EE:9B:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3673F8EC01BD11F1844CFEC3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.188.0/22
154.222.32.0/22
Signature Algorithm: sha256WithRSAEncryption
07:6e:f8:5c:a1:fe:77:95:b4:73:4f:64:07:94:ae:11:3b:b0:
91:b8:fb:4b:ed:2f:cd:bb:ff:88:f2:cc:5e:f5:27:42:59:0c:
36:f9:21:c4:73:fe:84:b3:c8:5a:11:8d:a6:97:a2:e6:ea:a8:
ed:b5:07:3c:77:a4:da:c8:64:66:3e:27:9a:a8:37:0c:83:e3:
12:9e:6f:b3:17:69:6f:7c:32:c2:54:55:1f:be:4e:cc:c5:c7:
0d:75:94:f8:fd:a9:d9:2c:7a:7b:e4:8a:b2:0a:5e:00:e9:6f:
1e:19:ad:ba:eb:62:ac:2f:2c:e2:ce:24:34:eb:2a:98:41:89:
b3:a4:27:a8:60:12:f7:c9:47:5d:d8:78:f2:86:43:76:6e:a7:
08:b3:41:f8:f1:08:ef:f2:64:e0:64:a4:88:ab:4d:43:0a:a7:
2f:62:83:71:2e:8d:e6:28:09:d6:a7:66:dd:ad:0f:fb:27:98:
c4:80:9e:5b:7c:c0:b2:08:89:3e:c5:54:58:26:bc:ab:e7:2d:
91:1b:d9:f9:2b:35:eb:82:83:48:fd:92:19:3b:13:b7:51:65:
10:f2:57:a1:6c:c2:51:12:6c:d1:76:10:fa:3f:3f:48:eb:15:
e3:c3:92:02:2a:21:53:c0:b4:29:cc:f4:34:c9:23:7d:4a:fe:
f6:5c:d1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:30 2026 by rpki-client