Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83EB953C13C711F19E5A619EDAE4EC9C.roa
File: 83EB953C13C711F19E5A619EDAE4EC9C.roa (raw, json)
Hash identifier: vPbdaqTpgXqIljMdWNU0zBeoO9Q0IeUvwt1UQmkxTfc=
Subject key identifier: F3:3C:50:35:7B:A9:B3:94:D9:6A:88:B6:8E:D8:32:30:C9:A2:AD:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC40
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83EB953C13C711F19E5A619EDAE4EC9C.roa
Signing time: Fri 27 Feb 2026 10:31:46 +0000
ROA not before: Fri 27 Feb 2026 10:31:42 +0000
ROA not after: Sun 08 Mar 2026 10:31:42 +0000
asID: 9294
IP address blocks: 154.211.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113728 (0x1bc40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 10:31:42 2026 GMT
Not After : Mar 8 10:31:42 2026 GMT
Subject: CN=69a17292-d961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5f:fc:a6:8c:41:59:2a:0d:de:89:e4:39:98:
00:20:1d:91:49:a2:1d:99:07:80:9f:0a:fc:f9:55:
d4:6f:fb:a1:bc:f1:0b:d0:0f:2e:9a:cb:0e:4b:9d:
ea:19:dc:f8:c2:62:4a:c0:ec:07:ed:10:60:0d:48:
d0:d4:83:f3:3b:d2:6f:de:58:62:a4:87:aa:5c:42:
40:52:f9:b6:d9:8b:be:27:d0:9a:aa:64:72:94:dc:
27:63:54:eb:77:17:f2:cf:f3:1d:3f:3c:e9:1b:e4:
3d:c4:cc:4b:5f:92:86:f2:2b:6b:ee:d9:89:96:c2:
00:22:c0:5e:c9:40:5d:0d:d7:16:44:e1:54:4e:f4:
d5:48:e0:06:4a:13:03:2b:91:38:07:6a:fa:25:2d:
c4:b3:f6:e9:90:84:15:76:c3:76:50:b7:30:64:94:
b8:82:bd:b2:71:bf:ca:30:31:31:f2:ed:ba:e4:a1:
95:c8:73:5c:ae:19:55:2d:c3:b2:5c:11:51:17:7c:
0d:99:a4:46:9a:28:e9:e1:24:6c:f4:d9:3a:75:3a:
64:61:cd:f9:db:52:0c:ed:10:24:ea:ec:e3:6b:28:
46:3c:68:c4:3a:3f:0c:8b:7b:9e:c9:c5:c5:52:af:
84:83:17:0e:f3:3d:bb:c1:76:9e:54:cf:fe:7e:3d:
23:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3C:50:35:7B:A9:B3:94:D9:6A:88:B6:8E:D8:32:30:C9:A2:AD:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83EB953C13C711F19E5A619EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.32.0/19
Signature Algorithm: sha256WithRSAEncryption
06:37:37:4b:a8:b6:25:7e:5b:bf:d3:67:ba:e3:49:8a:3a:15:
8d:9c:b9:ff:5f:0a:09:0c:df:91:bf:5f:5e:2d:47:cf:88:71:
2d:18:39:34:48:eb:32:ec:1d:35:8b:1b:ef:06:10:30:d5:d3:
e6:63:97:e5:4a:be:57:8d:77:52:11:ea:63:ae:b4:b3:a5:f3:
d2:5b:41:0e:fa:ce:3e:0e:0d:b8:4d:c4:5b:7f:a6:34:90:1e:
18:3c:13:1f:52:10:81:f5:4e:74:06:09:b2:81:0b:91:16:2b:
f0:39:8d:f2:63:82:83:3a:c2:f1:df:53:72:6d:91:f3:df:81:
af:84:09:4e:cf:6d:55:44:bf:20:fc:ca:53:ad:6d:aa:78:4d:
a3:67:c6:2f:ce:60:2e:40:74:07:b6:32:41:68:01:5c:c9:24:
40:78:5f:a6:3f:34:4b:1e:61:fc:f8:c1:9c:41:8f:0b:10:71:
49:c8:f5:76:c4:09:15:0e:cd:63:d7:a6:bf:98:ab:63:13:a1:
8a:3b:fa:d8:84:89:21:d4:af:e6:9c:80:87:9a:d5:da:94:73:
56:fa:4c:85:91:2c:0e:42:c6:cf:bf:c8:ff:6f:e6:13:26:86:
ec:1f:94:45:6f:5d:bb:7e:70:40:b9:db:c4:6e:c5:e4:33:9f:
89:bd:35:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:43:03 2026 by rpki-client