Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/970A38202A8911F1B21D54D2DAE4EC9C.roa
File: 970A38202A8911F1B21D54D2DAE4EC9C.roa (raw, json)
Hash identifier: u1caBnspw1yK3nnPs8JWobts7o3rTGSiVO6ceT1klEg=
Subject key identifier: 50:AB:77:67:C9:19:05:80:76:67:46:C4:00:C3:6B:68:CC:D6:4F:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C150
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/970A38202A8911F1B21D54D2DAE4EC9C.roa
Signing time: Sat 28 Mar 2026 09:36:26 +0000
ROA not before: Sat 28 Mar 2026 09:36:21 +0000
ROA not after: Sat 02 May 2026 09:36:21 +0000
asID: 49505
IP address blocks: 154.223.204.0/24 maxlen: 24
154.223.205.0/24 maxlen: 24
154.223.206.0/24 maxlen: 24
154.223.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115024 (0x1c150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 28 09:36:21 2026 GMT
Not After : May 2 09:36:21 2026 GMT
Subject: CN=69c7a11a-b11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9e:3e:56:a4:2d:02:24:5d:5d:6b:ca:88:fb:
59:09:bf:56:5e:c2:26:9f:93:ab:a3:3c:7f:f3:a1:
91:49:a4:aa:df:90:36:29:4c:d1:91:ec:d6:97:ff:
23:19:fa:a6:53:c8:5f:78:ef:d7:50:dc:68:d0:53:
70:04:dd:af:12:94:5a:85:58:97:a3:dc:46:5d:5b:
30:bf:38:4f:45:bf:3c:03:ff:63:79:6d:c8:a4:11:
7e:b5:d5:da:1e:fc:ac:2d:e8:1a:11:fa:33:bb:95:
5b:20:d7:2a:f7:88:5b:33:5f:8d:e2:c1:fa:29:6b:
88:6c:1d:90:bf:56:a2:bd:70:c9:f5:5c:24:3b:4d:
63:f1:ab:b8:24:0c:9b:07:ab:bc:8b:8f:9e:cf:ea:
33:3e:2a:5a:a9:f7:2e:9c:03:7a:10:0a:63:7d:98:
43:01:53:3c:ed:76:ea:6f:a2:af:d4:b6:1d:ac:0c:
3b:55:11:3d:f7:0b:ff:7e:f3:98:a6:24:1d:60:55:
1e:2f:c5:8d:2b:6a:34:83:e5:74:1e:f6:1a:5b:7c:
ae:8a:b4:95:12:34:6b:a5:57:97:c7:49:92:7f:a5:
fc:e9:60:70:f3:8c:8d:b5:6b:77:bc:1f:73:3e:b3:
fe:1f:06:66:a6:a7:5e:21:f2:1e:d6:09:16:29:24:
03:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AB:77:67:C9:19:05:80:76:67:46:C4:00:C3:6B:68:CC:D6:4F:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/970A38202A8911F1B21D54D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.204.0/22
Signature Algorithm: sha256WithRSAEncryption
47:13:09:e4:7d:67:8f:92:27:22:66:ae:53:8c:f8:d8:c7:5a:
38:82:5e:ff:63:a0:13:a8:90:b9:32:29:9a:79:87:e2:74:b4:
70:07:f7:59:e4:f9:cf:2d:90:06:5c:f3:be:23:d3:97:9b:00:
57:62:e4:fd:3a:52:6d:43:9d:75:02:7e:76:f8:3b:86:a2:a8:
27:ce:69:47:7c:42:d8:fb:fc:cc:50:36:be:34:2a:6a:e0:c2:
61:6f:9c:8c:be:c5:da:a7:4c:e4:0b:28:e3:d4:14:df:f2:12:
9f:f8:68:7c:6f:56:8f:7a:ec:fb:cd:9a:b2:e8:5a:1c:a9:ed:
ca:8f:e7:93:a7:e4:fb:0f:e5:cd:10:41:e3:2e:a0:2e:ff:a6:
31:19:f0:5d:2c:49:4f:65:99:41:ca:38:df:cd:83:9c:64:64:
31:c4:52:0b:de:f7:cc:f0:d1:8c:ba:58:6c:c3:a6:cf:1b:9a:
81:5c:32:e6:de:ad:d1:f3:91:cd:c0:b8:c1:a2:c1:cd:43:5b:
54:d3:ba:20:29:b1:72:f8:04:2b:61:c3:d1:6f:69:11:11:93:
dd:7b:b3:a6:8c:f0:81:de:7c:52:0b:94:b6:0a:4b:09:4d:a2:
b1:12:c4:a9:7b:aa:af:33:48:16:d4:f6:10:55:0e:36:50:b4:
f5:46:51:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:25:30 2026 by rpki-client