Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CA461BC342011F197E1DDE5CE1D38B0.roa
File: 3CA461BC342011F197E1DDE5CE1D38B0.roa (raw, json)
Hash identifier: PkKtZUF9e/KZ7zHcL5b28bi/eHIINfjyBdiTMUminOs=
Subject key identifier: 68:1A:AC:AB:81:9D:46:62:43:52:1D:9E:20:C5:7F:58:CD:74:8D:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C404
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CA461BC342011F197E1DDE5CE1D38B0.roa
Signing time: Thu 09 Apr 2026 14:27:29 +0000
ROA not before: Thu 09 Apr 2026 14:27:24 +0000
ROA not after: Mon 09 Apr 2029 14:27:24 +0000
asID: 17561
IP address blocks: 154.93.202.0/24 maxlen: 24
154.93.203.0/24 maxlen: 24
154.93.204.0/24 maxlen: 24
154.93.205.0/24 maxlen: 24
154.93.206.0/24 maxlen: 24
154.93.207.0/24 maxlen: 24
154.93.208.0/24 maxlen: 24
154.93.209.0/24 maxlen: 24
154.93.210.0/24 maxlen: 24
154.93.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 15:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115716 (0x1c404)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 14:27:24 2026 GMT
Not After : Apr 9 14:27:24 2029 GMT
Subject: CN=69d7b751-9e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1e:ee:8a:ac:27:e8:ee:be:24:c3:50:ff:dc:
3d:91:59:f7:5b:8c:25:dd:97:32:97:36:5f:1e:39:
ef:20:d6:ea:f3:fc:a7:1f:d8:75:f1:7b:ac:07:6f:
21:9b:62:1f:83:36:42:68:c3:a3:55:f4:d5:72:8a:
a1:7c:1b:98:68:bc:fd:a4:f8:b4:36:7b:4c:a6:2e:
97:7e:b4:66:65:7f:bd:8f:bc:d4:6b:7e:87:dc:eb:
40:ce:3a:6b:fb:f9:61:0c:28:d8:15:07:19:14:a1:
35:9a:b2:c8:10:92:f3:6e:ff:79:f9:02:31:2d:ec:
61:08:3f:07:5d:77:3d:ed:0a:ed:5c:0f:e1:9a:84:
0f:6c:7d:56:da:a6:64:44:6f:58:83:62:cd:e2:4b:
b6:f4:af:fc:a4:65:f3:7d:91:99:b4:90:11:e1:e7:
53:6e:5f:f9:9c:3b:fe:91:83:9d:f7:77:f8:21:1a:
aa:af:69:ad:5e:1f:7e:99:c8:ad:3d:a8:47:32:1c:
3e:d8:64:a0:f8:2c:52:cc:35:0f:1b:78:c9:7a:56:
6a:48:d7:41:4b:9b:f2:a1:12:d5:8e:e2:35:5a:ba:
06:7d:e2:57:fb:2c:67:2a:97:5f:e7:4f:00:f4:96:
08:23:12:42:08:68:84:1d:24:f5:99:b0:57:a0:0a:
8c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1A:AC:AB:81:9D:46:62:43:52:1D:9E:20:C5:7F:58:CD:74:8D:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CA461BC342011F197E1DDE5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.202.0-154.93.211.255
Signature Algorithm: sha256WithRSAEncryption
6a:6c:e5:99:fa:43:42:f2:6c:81:d5:ac:7f:3e:76:04:30:0d:
36:38:81:d8:68:91:2a:86:3f:f6:30:8d:1e:ff:02:a5:75:d8:
3f:f7:54:ea:a3:af:4f:0b:15:8f:f0:f3:38:0c:87:3e:f4:fc:
93:8b:09:46:7f:f8:8f:a6:a3:bb:98:4c:43:54:8c:d2:1d:3c:
7c:eb:32:79:02:4c:71:11:35:1f:8f:2e:90:89:6e:2a:56:52:
d8:0b:dc:1c:cb:56:44:b7:35:77:e4:6f:db:a1:82:b4:19:7e:
44:12:8a:c4:4a:9d:97:c5:1e:00:84:93:5a:a9:d1:93:22:4f:
0e:48:79:67:b4:a5:6f:20:3d:49:c7:68:ce:a3:06:2d:e9:d1:
66:e9:1b:96:ca:02:48:6d:9b:89:af:f1:e4:85:44:2e:10:40:
e0:82:b0:20:e8:16:85:ac:aa:a3:38:3b:5c:78:3a:1b:2f:86:
73:a1:c3:33:16:7f:ad:a0:4e:be:29:08:d2:74:17:5f:46:1c:
07:02:37:fe:13:c0:33:8b:8e:46:cf:a5:f3:b8:d5:f7:43:dd:
80:ec:a7:51:dc:db:4a:7b:eb:8d:29:bc:05:da:90:f4:c8:ae:
b5:19:50:07:3e:80:08:19:f3:40:6c:9e:9c:92:86:81:45:08:
50:ac:5c:66
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAcQEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDA5MTQyNzI0WhcNMjkwNDA5MTQyNzI0WjAYMRYw
FAYDVQQDEw02OWQ3Yjc1MS05ZTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyx7uiqwn6O6+JMNQ/9w9kVn3W4wl3ZcylzZfHjnvINbq8/ynH9h18Xus
B28hm2IfgzZCaMOjVfTVcoqhfBuYaLz9pPi0NntMpi6XfrRmZX+9j7zUa36H3OtA
zjpr+/lhDCjYFQcZFKE1mrLIEJLzbv95+QIxLexhCD8HXXc97QrtXA/hmoQPbH1W
2qZkRG9Yg2LN4ku29K/8pGXzfZGZtJAR4edTbl/5nDv+kYOd93f4IRqqr2mtXh9+
mcitPahHMhw+2GSg+CxSzDUPG3jJelZqSNdBS5vyoRLVjuI1WroGfeJX+yxnKpdf
508A9JYIIxJCCGiEHST1mbBXoAqMoQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFGga
rKuBnUZiQ1IdniDFf1jNdI0QMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zQ0E0NjFCQzM0MjAxMUYxOTdFMURERTVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGaXcoDBAKaXdAwDQYJ
KoZIhvcNAQELBQADggEBAGps5Zn6Q0LybIHVrH8+dgQwDTY4gdhokSqGP/YwjR7/
AqV12D/3VOqjr08LFY/w8zgMhz70/JOLCUZ/+I+mo7uYTENUjNIdPHzrMnkCTHER
NR+PLpCJbipWUtgL3BzLVkS3NXfkb9uhgrQZfkQSisRKnZfFHgCEk1qp0ZMiTw5I
eWe0pW8gPUnHaM6jBi3p0WbpG5bKAkhtm4mv8eSFRC4QQOCCsCDoFoWsqqM4O1x4
OhsvhnOhwzMWf62gTr4pCNJ0F19GHAcCN/4TwDOLjkbPpfO41fdD3YDsp1Hc20p7
640pvAXakPTIrrUZUAc+gAgZ80BsnpyShoFFCFCsXGY=
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:51:19 2026 by rpki-client