Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/997E3AB40EFC11F19B88C4B6DAE4EC9C.roa
File: 997E3AB40EFC11F19B88C4B6DAE4EC9C.roa (raw, json)
Hash identifier: 2HeYn89cQxkicOzx8UTJYjXyD+ThcjDVJM/daWUMrsE=
Subject key identifier: 5F:37:EB:48:04:17:60:7F:DF:0C:B1:9F:BD:75:FC:45:F5:93:59:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BACB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/997E3AB40EFC11F19B88C4B6DAE4EC9C.roa
Signing time: Sat 21 Feb 2026 08:09:09 +0000
ROA not before: Sat 21 Feb 2026 08:09:05 +0000
ROA not after: Tue 03 Mar 2026 08:09:05 +0000
asID: 139880
IP address blocks: 154.82.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 08:09:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113355 (0x1bacb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 21 08:09:05 2026 GMT
Not After : Mar 3 08:09:05 2026 GMT
Subject: CN=69996825-30b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:de:8c:37:95:63:8c:29:26:ef:95:91:b2:d1:
dd:74:db:25:fe:de:1c:99:38:a8:7f:71:5f:66:4a:
13:40:db:8a:f2:12:f5:63:3d:c7:3c:13:26:aa:1f:
2b:70:24:93:44:78:ea:e0:df:42:7a:5a:99:55:ad:
f6:6a:44:0b:95:30:da:19:5a:6d:25:c2:2b:57:98:
66:be:df:d5:f3:37:d2:65:67:25:ee:d7:ad:9e:ca:
84:8e:be:ad:71:7e:c8:ac:a2:a4:6b:4c:82:1b:41:
32:f7:92:5f:05:2f:50:1e:92:59:0c:b6:93:59:18:
d7:23:e5:3b:b2:7e:ff:f6:11:ce:a7:d2:09:5d:9f:
60:78:fe:4e:58:82:ca:2e:16:8a:27:68:90:c5:e3:
f5:69:9b:ec:bb:6d:a7:ae:92:2b:bb:4d:c9:8c:61:
4a:43:e0:44:09:f8:cb:89:fe:82:16:45:9a:5c:4c:
76:dd:2f:c7:89:3b:3b:13:5a:33:97:a9:81:a6:36:
37:e0:9b:db:27:17:e9:c8:6d:75:e6:b9:07:0d:57:
33:bf:94:e4:03:1b:ae:15:69:53:62:f6:2c:eb:69:
ca:2c:b0:6e:5a:e5:37:e4:ab:4c:aa:f6:0b:61:cd:
8b:27:2a:8c:49:74:69:24:0e:32:da:d5:84:56:b0:
e0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:37:EB:48:04:17:60:7F:DF:0C:B1:9F:BD:75:FC:45:F5:93:59:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/997E3AB40EFC11F19B88C4B6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.32.0/19
Signature Algorithm: sha256WithRSAEncryption
5e:d5:aa:ec:b5:fe:29:da:94:9f:9e:27:bf:ca:09:47:00:3c:
de:73:06:bb:5e:77:3d:d9:24:ec:d5:19:c8:16:83:d3:ae:3c:
ff:d0:6b:ad:bc:76:8d:f4:aa:fc:02:db:42:a9:d5:1e:ce:ef:
e7:e9:b4:dc:ac:ba:bb:bf:00:31:16:f0:42:71:c3:82:27:d4:
f4:60:74:8e:3a:4f:85:8c:d7:fd:9b:2f:c8:dd:60:b7:18:33:
02:47:8c:8e:9d:92:4f:f4:9c:25:aa:d5:7a:64:55:b0:0b:19:
1d:0e:19:02:c2:22:ba:4d:69:60:1b:e5:55:b1:d1:e2:0e:f4:
ee:dd:35:24:54:d6:e5:38:48:fe:df:a1:42:84:19:4a:b2:97:
fe:16:49:76:5b:5b:b0:e3:db:5d:02:b9:2c:6d:5c:de:58:e1:
02:62:1c:62:a9:21:a9:94:c1:09:f0:25:1a:fb:77:7c:a7:68:
3e:56:a9:61:de:bf:b4:e1:6c:85:bb:e5:31:f1:3f:61:f6:8a:
8f:8a:99:c3:56:25:aa:2b:04:11:39:78:f4:25:a9:f4:ff:81:
72:45:ce:8b:10:c1:31:7e:5f:00:64:37:48:c3:cd:b2:db:16:
a7:0c:8c:ed:50:99:b0:5b:f7:23:41:82:4c:f3:a6:83:7a:54:
f8:1a:fd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:02:45 2026 by rpki-client