Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7E17B9E13C611F198EB509ADAE4EC9C.roa
File: D7E17B9E13C611F198EB509ADAE4EC9C.roa (raw, json)
Hash identifier: 3cIYLWsQRAjil7n0of5qof+Q1wbXzZiIz1uzYFjvEfA=
Subject key identifier: 81:62:C1:1E:FB:3D:87:65:15:E1:24:88:73:E6:05:23:2F:AE:19:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC3E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7E17B9E13C611F198EB509ADAE4EC9C.roa
Signing time: Fri 27 Feb 2026 10:26:57 +0000
ROA not before: Fri 27 Feb 2026 10:26:52 +0000
ROA not after: Sun 08 Mar 2026 10:26:52 +0000
asID: 138997
IP address blocks: 154.86.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113726 (0x1bc3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 10:26:52 2026 GMT
Not After : Mar 8 10:26:52 2026 GMT
Subject: CN=69a17171-424b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8a:7e:56:27:1a:6e:3f:d5:3d:14:25:1e:a5:
84:83:81:87:7c:fc:7d:e9:ae:e4:26:29:58:1d:1f:
e2:1a:95:b0:dd:51:16:1b:d9:bf:fd:3d:85:d5:99:
a9:fb:cf:54:ee:04:15:4a:73:f6:61:03:78:38:e1:
1d:81:ab:53:84:dc:82:4b:0a:19:23:98:eb:63:71:
14:6f:e0:af:3d:6c:fd:63:d8:5f:45:22:ed:20:7f:
3f:0e:dc:24:13:14:59:d2:be:8d:01:81:ad:c9:ee:
f2:0b:e0:2e:2a:28:00:2a:01:4b:63:ce:31:19:63:
ef:c7:47:f5:cd:6a:a7:b8:5a:b8:7f:d3:d8:b2:16:
e6:6a:d6:8b:bb:ec:21:4f:69:35:1d:4f:93:95:3a:
5e:03:41:3f:0a:6a:e6:d1:83:2e:f1:53:c6:9f:43:
da:f8:63:17:5d:9b:83:24:32:7a:6f:31:d4:4d:93:
26:4d:fa:33:9c:22:73:a5:e3:b8:19:9c:12:40:a9:
cf:1a:b7:ab:8d:f3:f4:de:a4:ff:26:ea:85:c2:3d:
76:6e:57:bf:9c:68:dd:40:47:c3:04:5c:68:77:00:
ec:c3:4a:64:85:f2:43:3d:39:37:53:7a:61:12:0f:
75:68:db:16:8c:b1:e0:95:d7:f2:e1:c7:1a:75:f6:
94:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:62:C1:1E:FB:3D:87:65:15:E1:24:88:73:E6:05:23:2F:AE:19:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7E17B9E13C611F198EB509ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.8.0/21
Signature Algorithm: sha256WithRSAEncryption
3c:3f:49:d5:39:2a:97:7a:1e:12:a3:99:52:1b:2a:49:aa:e2:
47:6d:ed:95:4e:49:e8:50:32:86:90:2c:0b:ed:87:84:3d:52:
2c:50:b8:8a:18:47:c4:7c:29:01:39:35:ec:1e:c8:80:c7:5d:
14:a6:c2:6b:46:78:d1:68:91:fe:fa:e6:0d:a0:92:33:71:79:
37:29:52:32:a7:8d:b1:a0:b1:a0:6e:03:f5:fa:5c:a8:72:df:
f1:5d:ce:53:6e:87:89:5e:1b:16:59:6f:eb:ee:4b:84:0e:21:
07:37:f3:ce:b5:c3:c3:70:c9:2f:c3:7f:35:f7:62:ce:a5:e0:
9d:db:94:af:81:10:87:19:4f:b2:cf:03:5b:c2:bf:fc:1b:6a:
ba:aa:4d:dd:7a:2c:d2:77:34:4c:6f:ff:c2:fc:a1:89:0b:7a:
0a:21:05:4b:37:cf:10:a4:b8:e8:de:ad:d0:2a:65:b2:ec:38:
36:66:bc:f0:26:a2:3e:82:73:62:53:ed:95:e2:c3:3e:2f:71:
6a:97:9e:7f:02:5c:5e:24:c5:62:6b:3f:82:2d:49:85:0c:f8:
50:c9:6a:55:11:81:11:f3:f9:90:9a:26:62:e3:0e:5f:cd:26:
3b:9d:2e:2f:a3:cb:b1:0f:be:2a:ca:4d:0d:ab:8c:14:8b:00:
a1:56:61:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:42 2026 by rpki-client