Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38EEF3140F1F11F18B9E9688DAE4EC9C.roa
File: 38EEF3140F1F11F18B9E9688DAE4EC9C.roa (raw, json)
Hash identifier: 7z7V//KpLTE1uHH2hCSF6K90Z846LutK6rvoTwVbY1o=
Subject key identifier: 88:43:D0:C3:3E:BC:3A:B0:63:3C:D0:53:2D:68:A5:3B:64:9C:26:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BAEA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38EEF3140F1F11F18B9E9688DAE4EC9C.roa
Signing time: Sat 21 Feb 2026 12:17:00 +0000
ROA not before: Sat 21 Feb 2026 12:16:55 +0000
ROA not after: Tue 24 Mar 2026 12:16:55 +0000
asID: 58931
IP address blocks: 154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113386 (0x1baea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 21 12:16:55 2026 GMT
Not After : Mar 24 12:16:55 2026 GMT
Subject: CN=6999a23c-1c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:7e:da:25:38:df:f4:b1:e5:67:f6:88:38:0e:
90:2f:c6:dd:8c:d7:0c:49:b0:35:da:2e:76:d3:49:
60:f7:d7:70:9d:8c:a5:9a:56:0a:1f:70:31:69:fe:
c2:0c:ec:e2:c0:f4:62:c2:21:70:0f:04:9e:65:6e:
c5:58:6d:30:08:10:a8:2d:43:e1:aa:38:36:18:a7:
f0:62:84:3c:d7:e9:dd:48:40:24:46:60:53:91:4b:
0b:2e:43:49:5e:12:57:f0:a6:84:56:1a:a5:74:e1:
7e:19:82:5e:d9:f4:4b:a2:fd:34:f9:07:ef:04:a0:
40:cb:8c:60:86:21:1e:2a:1f:0c:1c:56:d3:b2:cb:
8e:7e:5d:d3:61:e8:da:e8:56:7c:c8:b7:75:c9:11:
41:cc:b4:5b:47:85:24:6e:09:a6:ae:43:ec:ce:40:
66:da:f4:eb:f6:e3:ba:cf:36:19:52:08:3a:a2:25:
a6:55:57:07:0c:8c:aa:f2:4a:eb:8d:2f:7b:c9:54:
cd:8a:ac:5c:a5:b4:4a:f2:50:81:03:cc:05:3a:ef:
a4:f5:55:73:11:82:3f:e7:0c:9c:48:71:b4:92:6c:
f7:76:4b:28:b7:e6:39:63:f3:59:ec:b8:19:49:7b:
f4:8b:d5:dc:59:c6:45:6d:9d:b6:4b:35:3b:6d:c0:
ce:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:43:D0:C3:3E:BC:3A:B0:63:3C:D0:53:2D:68:A5:3B:64:9C:26:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38EEF3140F1F11F18B9E9688DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:28:49:20:1c:ae:72:0c:c2:6d:a1:d8:fa:44:ca:54:2a:01:
ab:d0:6d:11:bf:e6:e6:2f:d7:56:5f:cb:a7:7d:44:d3:ac:6b:
6b:ac:18:16:4b:bd:bb:5c:db:89:2e:b4:d2:2c:bb:45:d0:66:
fe:f0:fb:90:72:83:5a:7f:e2:67:a1:4a:c2:6b:c2:29:77:84:
06:fb:28:82:dd:b0:3f:0a:7c:e7:b8:33:c4:25:37:95:55:68:
80:3d:a3:fc:53:5e:d4:03:3c:b9:b6:63:ef:99:74:e4:ad:27:
6e:ee:ee:b0:c5:b7:58:21:34:53:83:64:79:59:27:c0:48:5a:
34:2b:9d:01:bc:61:d8:32:47:e1:20:e9:41:b1:59:c4:2c:69:
45:38:98:3a:f4:1c:75:2c:bd:ca:ee:2a:0e:75:22:1f:58:32:
0a:4e:59:e6:f3:42:c7:57:bf:7d:02:05:bd:74:a0:55:3b:88:
4c:90:77:15:31:2a:66:65:aa:e1:43:b5:20:36:59:6d:5b:b4:
e0:fd:c0:e6:3b:58:63:c1:db:42:aa:59:ec:f0:ce:d9:b9:9f:
fb:15:ec:c0:6d:0d:c8:f0:5e:b4:77:73:55:f0:21:21:be:aa:
f0:ba:d2:85:cb:f5:32:94:22:ea:01:ba:e8:1b:47:91:ec:06:
fe:75:ca:78
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbrqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjIxMTIxNjU1WhcNMjYwMzI0MTIxNjU1WjAYMRYw
FAYDVQQDEw02OTk5YTIzYy0xYzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9n7aJTjf9LHlZ/aIOA6QL8bdjNcMSbA12i5200lg99dwnYylmlYKH3Ax
af7CDOziwPRiwiFwDwSeZW7FWG0wCBCoLUPhqjg2GKfwYoQ81+ndSEAkRmBTkUsL
LkNJXhJX8KaEVhqldOF+GYJe2fRLov00+QfvBKBAy4xghiEeKh8MHFbTssuOfl3T
Yeja6FZ8yLd1yRFBzLRbR4UkbgmmrkPszkBm2vTr9uO6zzYZUgg6oiWmVVcHDIyq
8krrjS97yVTNiqxcpbRK8lCBA8wFOu+k9VVzEYI/5wycSHG0kmz3dksot+Y5Y/NZ
7LgZSXv0i9XcWcZFbZ22SzU7bcDORwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIhD
0MM+vDqwYzzQUy1opTtknCbSMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zOEVFRjMxNDBGMUYxMUYxOEI5RTk2ODhEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml8YMA0GCSqGSIb3DQEB
CwUAA4IBAQAfKEkgHK5yDMJtodj6RMpUKgGr0G0Rv+bmL9dWX8unfUTTrGtrrBgW
S727XNuJLrTSLLtF0Gb+8PuQcoNaf+JnoUrCa8Ipd4QG+yiC3bA/CnznuDPEJTeV
VWiAPaP8U17UAzy5tmPvmXTkrSdu7u6wxbdYITRTg2R5WSfASFo0K50BvGHYMkfh
IOlBsVnELGlFOJg69Bx1LL3K7ioOdSIfWDIKTlnm80LHV799AgW9dKBVO4hMkHcV
MSpmZarhQ7UgNlltW7Tg/cDmO1hjwdtCqlns8M7ZuZ/7FezAbQ3I8F60d3NV8CEh
vqrwutKFy/UylCLqAbroG0eR7Ab+dcp4
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:49 2026 by rpki-client