Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A32D4032372911F18D1BD2D7CE1D38B0.roa
File: A32D4032372911F18D1BD2D7CE1D38B0.roa (raw, json)
Hash identifier: NolK4QDm/uQ55y51cz/OGS1xVhNLvJ/rQn1YHA8wSnw=
Subject key identifier: 04:8F:9E:21:98:08:F1:76:4B:DC:04:F7:BD:95:7E:59:FC:2D:61:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C50E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A32D4032372911F18D1BD2D7CE1D38B0.roa
Signing time: Mon 13 Apr 2026 11:12:20 +0000
ROA not before: Mon 13 Apr 2026 11:12:15 +0000
ROA not after: Sun 10 May 2026 11:12:15 +0000
asID: 32167
IP address blocks: 154.83.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115982 (0x1c50e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 13 11:12:15 2026 GMT
Not After : May 10 11:12:15 2026 GMT
Subject: CN=69dccf94-43fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:24:c3:b3:ce:3b:f3:c9:93:ac:02:9e:f7:
f7:9f:f8:44:b1:19:d7:26:d6:f0:1e:38:3a:45:e6:
9a:79:e4:9e:1c:f0:aa:28:bf:65:8b:b0:c3:2d:bd:
20:c0:87:2b:ed:67:78:c9:be:2c:b9:c2:cb:72:94:
06:30:66:93:8e:48:48:2b:fa:3a:b5:2b:fe:f6:b3:
eb:72:a2:b3:c9:46:30:7d:b5:87:c9:fa:87:9f:3b:
1d:3c:e0:de:50:85:a9:58:d4:6a:b5:e9:f7:f2:a9:
54:22:54:41:4a:18:a8:08:33:c0:fc:82:8f:60:74:
93:ec:7a:7b:56:c1:7f:3e:b4:c8:95:37:39:73:0c:
51:a4:7c:95:00:f8:df:61:bf:83:69:f6:fc:13:c5:
57:f8:c3:64:c6:3f:38:49:69:3f:1b:d1:74:e0:a4:
62:89:1d:51:c6:41:65:51:16:fe:44:e8:c0:b2:38:
a1:20:af:27:44:0a:36:df:96:9b:6c:05:45:3e:c2:
20:ab:04:76:68:ec:e6:e9:e8:ef:0c:09:57:d8:e9:
87:41:99:16:71:49:3d:2c:05:5f:29:ef:47:17:0b:
a0:e2:d2:47:69:48:8e:b0:c2:18:50:f0:08:da:4d:
c7:57:18:59:9c:e0:3d:06:dd:9d:a1:db:16:46:67:
45:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8F:9E:21:98:08:F1:76:4B:DC:04:F7:BD:95:7E:59:FC:2D:61:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A32D4032372911F18D1BD2D7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.98.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:a5:67:54:6f:c7:ff:db:a3:8f:9d:7d:e9:9b:54:16:43:44:
74:ad:ac:3b:20:29:26:0f:e3:d1:2d:1b:18:fa:ea:fa:89:80:
fe:53:5a:4d:56:11:9f:64:fb:e7:e8:76:f6:a3:7c:af:2d:ef:
a2:86:f6:59:69:98:53:0a:42:b7:c8:dc:13:2f:36:e0:d9:c5:
ce:d9:09:6c:33:b8:76:17:84:aa:6a:93:e3:27:cd:f9:04:69:
da:ec:65:8b:4c:55:d6:c7:71:4f:80:99:c0:04:52:4d:5b:bf:
20:59:ac:f6:23:28:cf:bc:df:a6:4c:cb:f9:ea:d1:39:eb:13:
a5:48:34:17:80:db:b8:10:01:f3:1b:99:31:f5:75:6a:9d:20:
3e:8b:50:3e:f9:42:38:b3:fc:b2:ad:53:0d:a6:47:b0:dd:36:
b8:12:0b:76:56:44:eb:7c:3c:85:64:89:77:61:84:33:cb:e7:
08:13:9d:dc:68:00:b7:a9:a0:4b:ed:f5:91:98:40:d7:57:c6:
fe:e9:74:e7:f7:d0:d8:48:36:4b:a1:4e:cb:53:f0:94:4d:99:
b4:31:32:be:82:cd:1b:9d:a0:b4:b6:f1:d1:f3:df:3b:4e:e1:
dd:19:6e:5c:9f:36:aa:f2:2d:da:fe:49:c1:ba:15:f3:48:ef:
c2:58:a2:7a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcUOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDEzMTExMjE1WhcNMjYwNTEwMTExMjE1WjAYMRYw
FAYDVQQDEw02OWRjY2Y5NC00M2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsCUkw7POO/PJk6wCnvf3n/hEsRnXJtbwHjg6ReaaeeSeHPCqKL9li7DD
Lb0gwIcr7Wd4yb4sucLLcpQGMGaTjkhIK/o6tSv+9rPrcqKzyUYwfbWHyfqHnzsd
PODeUIWpWNRqten38qlUIlRBShioCDPA/IKPYHST7Hp7VsF/PrTIlTc5cwxRpHyV
APjfYb+Dafb8E8VX+MNkxj84SWk/G9F04KRiiR1RxkFlURb+ROjAsjihIK8nRAo2
35abbAVFPsIgqwR2aOzm6ejvDAlX2OmHQZkWcUk9LAVfKe9HFwug4tJHaUiOsMIY
UPAI2k3HVxhZnOA9Bt2dodsWRmdFqQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFASP
niGYCPF2S9wE972Vfln8LWGHMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMzJENDAzMjM3MjkxMUYxOEQxQkQyRDdDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlNiMA0GCSqGSIb3DQEB
CwUAA4IBAQCepWdUb8f/26OPnX3pm1QWQ0R0raw7ICkmD+PRLRsY+ur6iYD+U1pN
VhGfZPvn6Hb2o3yvLe+ihvZZaZhTCkK3yNwTLzbg2cXO2QlsM7h2F4SqapPjJ835
BGna7GWLTFXWx3FPgJnABFJNW78gWaz2IyjPvN+mTMv56tE56xOlSDQXgNu4EAHz
G5kx9XVqnSA+i1A++UI4s/yyrVMNpkew3Ta4Egt2VkTrfDyFZIl3YYQzy+cIE53c
aAC3qaBL7fWRmEDXV8b+6XTn99DYSDZLoU7LU/CUTZm0MTK+gs0bnaC0tvHR8987
TuHdGW5cnzaq8i3a/knBuhXzSO/CWKJ6
-----END CERTIFICATE-----
Generated at Sat Apr 18 10:25:29 2026 by rpki-client