Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BAB7D92618C11F1BD1E0B1BCF1D38B0.roa
File: 3BAB7D92618C11F1BD1E0B1BCF1D38B0.roa (raw, json)
Hash identifier: GuYh4i18VXj7+WUWAAmdTAsoUA0sv/LT5jUW5z1i0qA=
Subject key identifier: BE:9C:CF:03:37:25:3E:C7:F4:31:03:77:2A:49:5C:A5:85:A1:4A:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D210
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BAB7D92618C11F1BD1E0B1BCF1D38B0.roa
Signing time: Sat 06 Jun 2026 09:43:55 +0000
ROA not before: Sat 06 Jun 2026 09:43:51 +0000
ROA not after: Mon 13 Jul 2026 09:43:51 +0000
asID: 137897
IP address blocks: 154.203.0.0/23 maxlen: 24
154.203.204.0/23 maxlen: 24
154.203.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119312 (0x1d210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 09:43:51 2026 GMT
Not After : Jul 13 09:43:51 2026 GMT
Subject: CN=6a23ebdb-43af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bf:1a:8a:4c:30:4c:8d:a4:e3:6e:10:5b:1e:
c3:b7:ba:b2:3f:78:28:85:a8:28:49:b7:44:86:85:
1a:63:90:48:d5:2f:c3:32:d9:8f:b6:f1:81:e5:b5:
cd:7c:fe:15:ed:0c:80:3a:8c:85:69:8f:d2:b4:88:
37:c6:91:30:37:80:c5:51:3f:de:67:bc:ad:11:19:
01:02:37:06:f6:f5:7a:ed:fc:6b:b2:20:ce:79:02:
1d:72:8d:39:30:79:e2:0a:b5:e2:43:28:97:76:4b:
dc:78:5a:b5:8d:c2:c3:27:87:c5:aa:9d:4c:dc:2a:
8c:62:6f:d8:67:23:13:2f:83:e5:d3:cf:26:8d:f0:
bf:1f:53:8f:29:fe:07:15:aa:fd:77:1d:4d:0d:85:
4b:72:9d:fe:9c:6a:6e:cf:b9:ed:f6:c4:4e:0b:33:
cb:6c:73:71:91:7a:06:7a:f1:4b:b9:1e:bc:d7:9a:
f3:04:92:9c:8b:9e:34:dc:27:ae:3e:50:2f:d4:f4:
c2:05:f0:33:11:c1:a2:cd:0b:c6:14:49:a8:c8:93:
b4:44:a3:92:dd:9f:6f:fb:73:8b:db:5c:9d:ce:ff:
da:18:a7:ff:26:a8:e3:33:b3:db:b3:05:23:90:2f:
ec:eb:3f:d0:e1:84:14:28:bd:35:51:e6:43:c9:c8:
c0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9C:CF:03:37:25:3E:C7:F4:31:03:77:2A:49:5C:A5:85:A1:4A:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BAB7D92618C11F1BD1E0B1BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.0.0/23
154.203.204.0/23
154.203.244.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:7c:fd:57:f9:17:e1:7f:2a:dc:7e:38:b2:c1:14:ad:5f:f4:
1c:17:92:ed:56:bf:63:17:a2:ec:25:fb:79:6e:ae:20:2d:47:
d1:d5:ee:d0:6e:17:7e:aa:a2:5c:42:58:57:18:32:4b:ab:67:
99:ae:f6:a0:b1:ee:4d:5c:80:69:1b:1c:8d:3f:eb:49:8e:13:
66:93:9c:b6:c5:7b:28:36:23:29:33:fb:4f:4a:1c:a3:38:37:
a2:65:62:3f:fb:67:94:df:02:ab:ca:9e:47:ae:f3:9f:d5:c6:
61:3b:d8:29:1f:91:82:6f:47:94:8c:79:8b:e8:f8:bb:70:a4:
d9:b5:2c:95:e5:3f:0c:4b:7b:cf:77:f7:90:99:b8:3c:04:df:
5a:5a:49:5a:86:f4:1b:11:9b:bd:1b:ea:0f:22:e5:d7:b7:55:
1e:5a:b4:70:f1:56:41:f5:70:b3:b2:8e:b4:8d:41:e9:4b:66:
a0:35:b9:83:d0:cf:ac:2d:03:50:10:c6:ee:5e:60:b0:f5:0b:
3b:2d:ea:c2:41:99:64:33:23:77:c3:ba:a7:44:97:8a:17:f7:
a3:fb:7f:48:3c:42:8b:87:a1:e1:6d:3b:e1:60:ed:8c:f4:f6:
aa:df:eb:dd:ff:35:78:4c:b2:76:56:b6:32:63:46:a4:f6:35:
c7:2b:6c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:40 2026 by rpki-client