Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39078B9A058811F1AF37A795DAE4EC9C.roa
File: 39078B9A058811F1AF37A795DAE4EC9C.roa (raw, json)
Hash identifier: TlPop17ojyweqt/N4X8w2MxanJxMjExbLAc27WDfD1I=
Subject key identifier: 5C:BB:FF:B9:96:6B:7A:AD:0F:F1:5E:09:67:0B:78:E2:04:19:32:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B8EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39078B9A058811F1AF37A795DAE4EC9C.roa
Signing time: Mon 09 Feb 2026 07:23:26 +0000
ROA not before: Mon 09 Feb 2026 07:23:20 +0000
ROA not after: Tue 10 Mar 2026 07:23:20 +0000
asID: 8796
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112876 (0x1b8ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 9 07:23:20 2026 GMT
Not After : Mar 10 07:23:20 2026 GMT
Subject: CN=69898b6e-79cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6d:a6:a2:f8:f9:e8:b1:80:bc:4f:58:79:4e:
e8:df:7f:3d:f3:94:ad:bc:44:76:25:8a:af:cd:d6:
66:f4:8a:98:6e:69:4d:ec:5b:eb:89:7a:98:18:ec:
41:1e:4c:40:37:3f:8a:a1:15:75:b5:76:57:4f:f5:
bc:3f:11:59:91:1b:1e:2f:68:e8:72:ed:ce:28:47:
41:26:ac:1e:f9:7f:c3:fd:bc:b3:6a:12:b4:37:fb:
6f:6e:5e:d3:89:e1:a4:e4:4d:21:2d:e0:e7:09:bf:
83:1c:85:9e:f6:75:ea:00:43:d2:fc:cc:c4:f9:8c:
60:48:c5:89:94:d9:dd:c5:cd:33:53:1a:40:8b:8d:
ef:94:33:d9:8a:db:fe:63:b9:7e:8a:24:cb:9d:99:
e5:35:0d:d3:12:db:0a:78:88:ce:8a:92:c0:3e:b8:
2f:8d:e8:b8:af:e4:97:cc:f3:e6:87:49:d4:f3:2a:
50:78:e7:5b:61:c5:86:33:29:63:7e:27:13:b0:e0:
93:75:e8:40:17:d1:70:b2:26:0a:16:de:b4:15:3d:
7f:c3:9e:b5:5a:f4:9b:a5:09:7a:60:24:64:ed:bb:
04:fb:a2:34:ce:54:1f:56:73:03:18:97:47:99:26:
48:6e:9b:f9:08:0d:5a:61:07:d6:a1:29:74:36:b2:
1a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BB:FF:B9:96:6B:7A:AD:0F:F1:5E:09:67:0B:78:E2:04:19:32:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39078B9A058811F1AF37A795DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
5a:2b:22:e6:9c:ff:46:48:64:60:51:16:75:00:59:cd:8c:b2:
c9:5f:3f:31:6f:0a:6e:06:4d:b9:c4:59:aa:11:a9:00:bd:eb:
5a:bc:b9:ae:98:20:23:2c:68:2e:3b:89:5c:e2:63:3c:38:f8:
03:0b:95:76:2c:95:63:e9:9c:0b:d9:56:bf:1d:27:c2:96:49:
31:fc:bb:9d:bd:8b:01:e9:00:1d:f7:9d:14:c9:e2:29:f9:8d:
42:eb:4d:08:15:7e:22:30:ce:ea:b9:d9:c5:11:f5:83:10:b9:
db:2a:68:85:50:6b:67:87:a7:3f:dd:76:77:80:6b:a3:2f:04:
37:0b:0b:df:19:de:35:47:70:c3:27:a7:93:25:a7:2b:6b:bc:
69:57:38:69:f7:97:68:5a:7b:f3:33:c5:5e:8d:7a:45:b0:77:
b7:58:11:ed:e2:ee:75:a2:80:e1:8c:40:78:f9:ca:b8:bb:fe:
ad:21:14:ea:71:9d:26:7e:38:21:0d:ae:15:a0:a4:0e:b3:6e:
84:b0:f3:5a:28:8d:4d:0a:e2:fa:02:0e:5d:9b:58:8b:5b:04:
b8:a4:aa:b7:88:23:5c:01:02:ee:22:bc:5f:bd:9f:ee:ce:22:
63:d3:54:39:56:f7:97:cc:ed:b6:87:78:cf:fa:94:3b:b3:37:
a3:53:11:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:53:58 2026 by rpki-client