Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C631D1C33F511F184442EE2CE1D38B0.roa
File: 4C631D1C33F511F184442EE2CE1D38B0.roa (raw, json)
Hash identifier: 8OUwRgQzL6bTZzOcSZCwsewyPBYIiZ/lOHGtf71xOIk=
Subject key identifier: 0F:D3:B7:E1:14:D3:AD:26:88:30:26:4D:10:D1:72:AF:5D:C0:C0:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C3B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C631D1C33F511F184442EE2CE1D38B0.roa
Signing time: Thu 09 Apr 2026 09:20:07 +0000
ROA not before: Thu 09 Apr 2026 09:20:02 +0000
ROA not after: Sat 16 May 2026 09:20:02 +0000
asID: 401434
IP address blocks: 154.85.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115637 (0x1c3b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 09:20:02 2026 GMT
Not After : May 16 09:20:02 2026 GMT
Subject: CN=69d76f47-f2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:01:9c:6d:57:ff:04:88:1b:81:46:c7:26:f6:
fe:6a:e7:88:bc:f5:3e:27:54:15:4f:fe:b5:33:30:
2c:99:d9:01:58:a4:10:dc:ea:44:65:a2:95:4d:28:
5b:ef:fd:c4:87:38:19:3b:1c:ed:99:63:c8:ac:9d:
9e:02:ff:89:0d:2a:23:29:21:28:c7:ea:b1:8e:67:
5c:51:fd:81:e7:aa:e5:59:78:c7:16:07:1b:e9:22:
64:2b:6e:fc:52:b4:5b:ce:fd:32:26:14:35:e7:5d:
76:d9:4f:57:74:c7:a2:f3:41:a2:16:4f:03:32:72:
8f:69:e6:f4:42:dd:06:b5:f3:f2:de:ff:30:12:b4:
ed:5d:47:7b:52:25:93:71:8f:a7:c7:3b:b0:96:c1:
c0:46:33:71:75:d6:63:e1:8b:b1:f9:15:71:43:9d:
52:51:c4:bf:09:d3:bd:61:2a:88:fa:21:10:9b:5d:
fc:f2:bc:5d:9e:bc:f4:24:66:6f:a4:73:11:1f:0f:
4a:7a:57:55:6b:5c:7f:c6:ed:ea:60:7a:fa:53:36:
97:52:13:1b:90:84:b5:ac:c4:86:4b:b0:61:4f:1b:
81:df:5e:b7:a5:ec:e7:80:92:cf:77:72:27:8a:58:
1a:58:a8:50:c5:ed:ec:04:7a:65:36:44:20:ab:ca:
cd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D3:B7:E1:14:D3:AD:26:88:30:26:4D:10:D1:72:AF:5D:C0:C0:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C631D1C33F511F184442EE2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.16.0/23
Signature Algorithm: sha256WithRSAEncryption
26:aa:18:b3:f9:eb:2b:e3:3c:50:db:ae:46:6a:e6:b0:d0:e0:
dc:c8:56:ba:ee:be:62:aa:ca:59:14:53:e8:9c:ff:28:44:61:
a4:b2:02:fd:00:d2:44:ec:f0:c6:cc:ca:d4:1d:a9:80:d9:8c:
e4:fc:9b:2b:e9:59:a9:0e:ec:78:61:25:b0:8f:ee:8a:32:81:
cd:4d:1f:f7:8f:97:8b:19:51:f6:ee:d3:12:ab:a7:1b:0e:0e:
1a:05:09:e8:01:2b:83:4d:8a:79:93:13:ba:fa:6b:d4:7b:f0:
21:de:98:12:e1:14:63:db:9b:3e:0e:fe:81:ce:96:a1:7c:02:
41:28:0b:a2:b1:7a:75:78:f8:a0:ce:90:91:00:bc:37:55:53:
97:8b:c6:22:9c:2f:b1:41:8e:aa:6d:e1:82:f0:8c:57:3f:e2:
67:46:b1:d9:0f:86:a8:ae:a5:b2:94:97:44:64:ee:6f:23:16:
fc:f6:15:f5:9e:e7:bc:cd:7a:ab:2b:c0:9e:0b:e3:94:00:99:
2d:3c:6a:52:a4:bf:46:fc:85:16:90:3c:6a:eb:aa:bc:de:06:
35:74:10:1b:b4:f9:7c:13:70:66:ed:df:0f:97:dd:b0:5c:e7:
af:47:01:45:98:41:a1:25:22:4c:03:a9:3b:fb:7b:a3:bd:bb:
f0:8e:84:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:35:49 2026 by rpki-client