Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B33A4CC13B011F1A049C993DAE4EC9C.roa
File: 3B33A4CC13B011F1A049C993DAE4EC9C.roa (raw, json)
Hash identifier: xYRkXU9fOy9AfyejU7weaB8X2ezYTQL89XrQattBbuw=
Subject key identifier: 97:42:7C:84:6C:E5:23:F9:67:48:23:40:9A:18:1F:CD:AB:69:0C:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC26
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B33A4CC13B011F1A049C993DAE4EC9C.roa
Signing time: Fri 27 Feb 2026 07:45:05 +0000
ROA not before: Fri 27 Feb 2026 07:45:01 +0000
ROA not after: Mon 30 Mar 2026 07:45:01 +0000
asID: 9304
IP address blocks: 154.194.195.0/24 maxlen: 24
154.196.160.0/24 maxlen: 24
154.199.4.0/24 maxlen: 24
154.200.46.0/24 maxlen: 24
154.200.48.0/24 maxlen: 24
154.200.53.0/24 maxlen: 24
154.200.54.0/24 maxlen: 24
154.200.60.0/24 maxlen: 24
154.200.129.0/24 maxlen: 24
154.200.154.0/24 maxlen: 24
154.211.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113702 (0x1bc26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 07:45:01 2026 GMT
Not After : Mar 30 07:45:01 2026 GMT
Subject: CN=69a14b81-102a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ea:19:17:7a:a8:39:a6:c2:7c:76:5f:3b:d2:
e2:bd:ce:2f:68:cf:4c:25:b8:3b:38:1e:24:e7:54:
43:c5:75:1d:de:f8:db:a7:05:c0:7e:33:81:e9:00:
14:0d:bc:ce:42:07:cc:14:51:aa:f8:e6:6f:92:f3:
35:ba:66:1c:a4:53:d3:61:14:77:57:9a:1b:8f:1d:
6b:52:bd:db:bf:da:78:18:c9:7c:f4:4f:af:c6:00:
ce:ab:c6:1d:2f:11:26:99:c6:9b:c1:92:f4:83:1d:
32:d2:c9:86:50:d7:47:e4:19:cd:d5:7a:89:bb:e6:
84:e6:14:f1:e8:e9:88:e2:66:24:ae:33:15:20:87:
9c:5c:66:ce:fc:ce:80:5b:65:00:04:67:ac:84:f9:
35:42:47:81:78:e4:c3:7e:70:d2:82:99:6b:8c:7c:
c6:40:80:f9:99:3d:07:cb:a2:71:c9:a1:f0:2a:b3:
be:56:b3:d2:01:e6:e7:fc:62:5a:4d:a8:38:60:47:
7d:d0:e8:2e:7e:8c:6f:75:29:18:a3:4c:8c:b7:7f:
c1:30:05:08:63:70:53:14:5e:0a:b4:24:fc:22:f0:
2e:79:c7:fa:c1:4f:49:76:2c:c5:60:94:87:8b:93:
ee:56:44:ec:ff:ea:d9:0c:60:59:a1:d8:19:20:f0:
ee:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:42:7C:84:6C:E5:23:F9:67:48:23:40:9A:18:1F:CD:AB:69:0C:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B33A4CC13B011F1A049C993DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.195.0/24
154.196.160.0/24
154.199.4.0/24
154.200.46.0/24
154.200.48.0/24
154.200.53.0-154.200.54.255
154.200.60.0/24
154.200.129.0/24
154.200.154.0/24
154.211.211.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:55:28:d6:76:13:83:1e:bb:53:10:64:53:b3:a0:af:3a:56:
5c:05:8b:e6:fb:bf:71:ce:4d:f1:1a:aa:72:25:bf:b7:28:82:
71:81:3c:54:54:af:e5:13:d3:ab:2b:da:1d:dc:99:dc:8f:5a:
9c:a1:46:b8:49:7e:bd:a1:15:9a:30:ab:ce:22:5d:58:b5:f6:
e6:c6:fe:73:d9:a6:c0:81:99:c2:44:fd:f5:da:70:94:ba:c7:
9a:04:f2:9b:ad:65:22:a5:43:a7:dd:a5:4b:e5:14:34:ff:e4:
91:b7:0b:46:96:e1:b5:d2:10:08:ec:96:8d:bd:ea:ea:7e:ba:
09:de:b8:17:a6:13:b5:75:af:90:90:77:c2:57:0b:a1:b9:f6:
73:43:a4:5a:85:85:42:3e:a5:fb:a8:17:60:53:b2:f5:7f:82:
92:a6:6f:c8:6d:c6:09:f1:05:e5:ea:0f:fb:2f:6a:6f:34:5b:
d0:6a:0d:e8:14:73:69:0d:77:eb:0e:ac:b7:fa:29:9b:e5:08:
d8:42:0b:3e:45:c8:71:c1:d1:fc:1b:c9:21:4a:d9:f8:13:a6:
2e:5b:03:00:d1:ef:31:13:98:1c:dc:56:f0:67:c4:c2:c7:c7:
a3:35:73:c0:7b:d7:18:0d:00:c0:69:b0:e8:01:8f:d2:60:c0:
30:2a:e8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:48 2026 by rpki-client