Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A314E30430D811F1B19414D1DAE4EC9C.roa
File: A314E30430D811F1B19414D1DAE4EC9C.roa (raw, json)
Hash identifier: LTZc4fDsFvG3bFS/h36j9xAKcSvd3DpPo04tttZobH8=
Subject key identifier: ED:AB:21:E6:52:86:8A:1F:D1:FF:4A:37:53:47:E2:AD:86:2E:E5:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C314
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A314E30430D811F1B19414D1DAE4EC9C.roa
Signing time: Sun 05 Apr 2026 10:17:24 +0000
ROA not before: Sun 05 Apr 2026 10:17:19 +0000
ROA not after: Sun 03 May 2026 10:17:19 +0000
asID: 61112
IP address blocks: 154.83.83.0/24 maxlen: 24
154.83.84.0/22 maxlen: 24
154.83.88.0/21 maxlen: 24
154.83.90.0/24 maxlen: 24
154.83.91.0/24 maxlen: 24
154.83.92.0/22 maxlen: 24
154.83.96.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115476 (0x1c314)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 5 10:17:19 2026 GMT
Not After : May 3 10:17:19 2026 GMT
Subject: CN=69d236b3-bafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:38:75:95:07:8e:5e:5d:c3:99:fc:0d:f2:5e:
ea:84:d7:9e:6b:da:7b:ae:bd:24:ba:2f:50:67:0f:
ab:47:91:92:80:2c:75:f0:b6:59:20:6b:a6:bb:5c:
15:51:e5:e3:c8:98:31:33:4f:af:b9:9e:58:8f:88:
09:28:70:be:4a:6f:1b:23:93:f2:a6:01:88:f4:6f:
79:70:0f:ef:22:5d:ec:08:29:67:68:d9:8f:91:b0:
72:a8:f2:0d:b0:91:ed:eb:e1:b8:de:36:f8:ca:33:
a6:86:53:c2:69:8b:de:0d:9b:9d:e3:2b:9e:2a:f2:
75:fa:e4:37:86:4b:e5:41:be:b1:0d:89:af:d6:49:
40:f4:96:1a:a8:71:77:24:b3:d4:61:a2:db:df:52:
9a:03:b3:14:4a:80:be:7c:b9:3c:a2:79:22:a1:3f:
36:49:6c:42:ec:9a:1f:76:68:24:3b:93:20:d9:8b:
03:79:ef:1d:ec:88:0a:2d:65:9f:75:4b:f5:36:60:
a4:a4:f9:34:2c:a3:33:40:3a:0e:db:76:af:66:a9:
f6:f4:38:ae:1d:b0:65:bc:81:f5:02:ef:e6:1d:d8:
e3:cf:af:e0:aa:a3:1d:30:79:4e:56:2e:36:a8:d5:
a6:9a:78:76:1a:12:c5:65:69:03:2f:34:7c:4d:95:
ea:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AB:21:E6:52:86:8A:1F:D1:FF:4A:37:53:47:E2:AD:86:2E:E5:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A314E30430D811F1B19414D1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.83.0-154.83.97.255
Signature Algorithm: sha256WithRSAEncryption
0e:4e:01:dd:33:e5:39:d6:73:db:fb:8c:1c:9a:00:65:e0:a2:
44:51:b7:fa:9a:fe:50:90:04:31:bd:07:81:a6:81:91:6b:16:
24:cd:48:86:88:50:12:94:b1:ac:e3:ba:e2:07:36:e9:b2:a1:
c2:b1:aa:4b:8c:15:20:6a:ea:1f:74:af:59:30:30:92:92:11:
1c:dc:1f:36:96:e3:ed:8b:9f:2f:ce:59:b6:6c:45:2a:68:02:
cd:10:2c:4f:a7:f6:ba:ba:ce:94:a1:d9:ad:52:9f:da:cc:aa:
48:2e:08:f3:de:1d:f5:33:5f:0b:5b:b9:b1:4d:e6:e4:91:9c:
10:29:c3:ad:18:70:c4:5a:f6:4b:16:35:c2:6b:df:36:58:76:
7b:f0:72:ef:3d:cf:9c:2b:46:38:f6:46:ab:db:11:86:a2:33:
4f:7f:b1:1e:95:0c:9b:3b:ae:82:c9:d7:2c:92:79:76:30:70:
a9:95:a3:ae:cb:78:6d:93:40:32:65:f0:77:53:b0:40:18:d7:
e5:ec:da:5c:58:c2:e9:be:a6:a4:05:29:58:f6:fa:d9:7b:2a:
67:c9:e3:b5:9a:9f:95:6b:e3:08:2d:a6:33:c4:1e:af:4c:34:
a0:e4:ed:46:9b:4a:ea:88:a6:fe:a5:2f:e7:6f:31:3a:ec:3b:
ac:39:92:22
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAcMUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDA1MTAxNzE5WhcNMjYwNTAzMTAxNzE5WjAYMRYw
FAYDVQQDEw02OWQyMzZiMy1iYWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3Dh1lQeOXl3DmfwN8l7qhNeea9p7rr0kui9QZw+rR5GSgCx18LZZIGum
u1wVUeXjyJgxM0+vuZ5Yj4gJKHC+Sm8bI5PypgGI9G95cA/vIl3sCClnaNmPkbBy
qPINsJHt6+G43jb4yjOmhlPCaYveDZud4yueKvJ1+uQ3hkvlQb6xDYmv1klA9JYa
qHF3JLPUYaLb31KaA7MUSoC+fLk8onkioT82SWxC7JofdmgkO5Mg2YsDee8d7IgK
LWWfdUv1NmCkpPk0LKMzQDoO23avZqn29DiuHbBlvIH1Au/mHdjjz6/gqqMdMHlO
Vi42qNWmmnh2GhLFZWkDLzR8TZXqeQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFO2r
IeZShoof0f9KN1NH4q2GLuWMMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMzE0RTMwNDMwRDgxMUYxQjE5NDE0RDFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACaU1MDBAGaU2AwDQYJ
KoZIhvcNAQELBQADggEBAA5OAd0z5TnWc9v7jByaAGXgokRRt/qa/lCQBDG9B4Gm
gZFrFiTNSIaIUBKUsazjuuIHNumyocKxqkuMFSBq6h90r1kwMJKSERzcHzaW4+2L
ny/OWbZsRSpoAs0QLE+n9rq6zpSh2a1Sn9rMqkguCPPeHfUzXwtbubFN5uSRnBAp
w60YcMRa9ksWNcJr3zZYdnvwcu89z5wrRjj2RqvbEYaiM09/sR6VDJs7roLJ1yyS
eXYwcKmVo67LeG2TQDJl8HdTsEAY1+Xs2lxYwum+pqQFKVj2+tl7KmfJ47Wan5Vr
4wgtpjPEHq9MNKDk7UabSuqIpv6lL+dvMTrsO6w5kiI=
-----END CERTIFICATE-----
Generated at Sat Apr 18 10:25:39 2026 by rpki-client