Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3851A3238C611F1809CEEB5CE1D38B0.roa
File: C3851A3238C611F1809CEEB5CE1D38B0.roa (raw, json)
Hash identifier: Njq7IIA1s8ZvQvlC1ZnVAH1X536VL5M2gseNYcBeDS0=
Subject key identifier: 83:80:FB:97:CA:74:B9:B8:4C:D2:A4:36:48:25:8F:D0:B9:69:63:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C55E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3851A3238C611F1809CEEB5CE1D38B0.roa
Signing time: Wed 15 Apr 2026 12:29:36 +0000
ROA not before: Wed 15 Apr 2026 12:29:31 +0000
ROA not after: Mon 11 May 2026 12:29:31 +0000
asID: 395886
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116062 (0x1c55e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 12:29:31 2026 GMT
Not After : May 11 12:29:31 2026 GMT
Subject: CN=69df84b0-af6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8d:2c:ac:e8:83:6c:91:f2:22:65:8c:cb:be:
27:49:44:0b:66:2b:b1:d7:41:e8:e1:58:e9:7e:cf:
df:4b:42:bd:1d:e6:db:9d:d2:52:93:5f:65:cd:64:
6c:54:47:10:6d:ae:9b:0f:37:15:4f:3d:d9:74:6c:
28:95:bf:95:ed:7d:bd:e0:c0:93:37:00:c4:31:46:
90:10:7c:be:a6:ee:e8:4f:d5:fa:fd:3a:c0:ec:d7:
b0:a8:0a:1c:87:53:bf:82:4c:ba:13:de:09:61:9e:
b6:08:52:59:b6:c9:0c:d2:02:d4:8d:87:9d:9a:eb:
bf:6b:1a:5b:c9:68:e4:84:ec:55:61:d5:45:20:a6:
5a:ea:09:d0:30:cd:94:b0:69:a2:b6:e5:8f:2b:09:
9e:5f:6c:dd:e7:de:b9:0a:bb:9c:4a:26:54:44:c3:
95:87:20:8e:73:a1:53:51:fa:b6:9f:28:0e:a0:60:
0e:fa:bf:c7:a3:df:13:df:35:d2:ec:0f:1f:b2:02:
fe:bc:ff:40:75:bc:ba:d6:88:cf:b1:9a:bb:ba:56:
d0:c5:c0:1e:ad:24:42:d7:e4:dc:31:1f:b7:f1:17:
2b:6c:b3:06:0f:c7:93:5d:6e:6e:a1:e9:68:5d:cc:
37:aa:c4:43:72:8d:07:3e:3f:c8:0c:a3:a9:13:3f:
39:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:80:FB:97:CA:74:B9:B8:4C:D2:A4:36:48:25:8F:D0:B9:69:63:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3851A3238C611F1809CEEB5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
bb:8b:ac:3a:13:2b:68:49:6d:34:c8:93:a5:7a:6f:ca:11:56:
11:0b:e1:72:c6:93:07:f4:d3:50:73:3f:64:d6:63:ef:dd:a5:
45:b6:6a:f9:3a:76:82:71:c2:45:b9:48:2f:c8:b1:22:34:e5:
a7:df:cb:f5:df:5b:77:d7:5e:6d:d3:6a:5a:42:ae:71:10:a9:
f1:0a:0a:ff:a2:ba:d5:ef:a3:e4:60:6d:17:3c:61:fe:2f:05:
02:ad:1c:65:bd:60:bc:45:88:f3:55:5a:0a:31:cd:31:b1:10:
31:b9:6d:7e:9a:b5:14:f6:2e:de:9d:b5:cb:f1:9a:36:47:d0:
8c:cb:3c:dd:32:53:0f:35:2f:9f:59:04:b1:9d:55:65:bb:5e:
64:aa:d0:47:57:8e:7f:d4:2c:7e:d9:fd:b3:14:e8:16:31:6c:
7b:93:b9:bc:b6:77:33:17:5a:73:93:48:8e:f8:fb:ec:3c:1f:
51:02:66:40:e9:dc:a6:0f:94:ca:c3:ae:19:ff:82:c9:25:9d:
13:ca:21:f8:89:75:a5:f6:64:45:b2:cb:65:00:41:35:50:bf:
6c:00:1b:2b:44:61:54:cd:9f:95:10:01:b6:96:61:d1:67:bd:
48:23:53:7c:1a:cf:45:e7:d5:5f:8a:24:f1:e7:2e:40:5b:45:
3b:43:54:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:39:29 2026 by rpki-client