Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3B934802F3B11F188F88079DAE4EC9C.roa
File: E3B934802F3B11F188F88079DAE4EC9C.roa (raw, json)
Hash identifier: XinQgIuS1hWDavOSqc15xT7jK+DK1zJtgqykwd4S9cU=
Subject key identifier: FF:18:D1:55:94:8A:CF:F3:91:02:7D:C3:04:03:37:90:DB:9D:38:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C2AC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3B934802F3B11F188F88079DAE4EC9C.roa
Signing time: Fri 03 Apr 2026 09:02:50 +0000
ROA not before: Fri 03 Apr 2026 09:02:45 +0000
ROA not after: Fri 08 May 2026 09:02:45 +0000
asID: 272092
IP address blocks: 154.83.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115372 (0x1c2ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 3 09:02:45 2026 GMT
Not After : May 8 09:02:45 2026 GMT
Subject: CN=69cf823a-2252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:55:c2:e9:4f:82:07:4e:a9:9d:18:94:c8:e4:
24:55:82:15:86:b3:60:14:1c:f2:d9:52:7f:9c:a3:
f9:f1:fe:a8:9c:6f:28:6f:db:9e:f6:21:18:3a:1c:
c3:71:68:6c:4b:78:7e:23:5f:b5:75:5d:42:46:04:
69:7a:c6:a3:5d:b3:74:64:66:7a:de:3c:4b:87:8a:
67:56:28:0b:77:e8:01:05:14:de:63:b2:96:1a:f7:
c3:41:a2:8d:df:07:63:b1:43:94:81:43:40:59:ad:
1e:85:ec:be:a2:26:2e:3e:27:04:73:3a:7a:aa:a2:
95:38:98:56:f8:c0:47:81:42:02:89:8b:f0:f5:96:
ff:55:57:fb:a4:9d:47:48:69:15:94:b1:28:ec:ef:
97:59:b4:f3:0b:75:e6:fa:11:1b:83:0e:ec:8c:ef:
cf:a7:ea:ca:19:93:fb:28:d0:db:6d:e2:87:0a:81:
b8:4e:b4:d8:eb:c1:f6:df:e8:65:2d:05:08:81:f8:
fd:99:e1:bc:21:69:cc:74:f3:88:51:38:bf:39:c4:
a4:e4:8f:63:bf:24:34:d0:40:3a:33:e0:90:91:0a:
97:11:94:14:cc:26:fe:8c:19:12:d6:b6:e8:41:e4:
67:72:6f:e4:48:73:1f:00:10:04:4d:35:80:05:73:
92:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:18:D1:55:94:8A:CF:F3:91:02:7D:C3:04:03:37:90:DB:9D:38:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3B934802F3B11F188F88079DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.29.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:2a:ed:bb:02:eb:ee:40:f1:9f:cf:47:39:ab:8e:19:ee:fc:
a2:1f:05:23:af:b6:98:14:26:7c:f4:eb:a5:3e:03:91:f0:31:
e9:e0:0b:47:69:44:bf:e6:42:41:a1:8c:9f:96:a8:bb:25:29:
71:a0:9d:a6:40:e7:86:e3:ab:33:bc:b3:98:fe:0f:88:9e:d5:
20:fe:25:ca:79:64:a7:f4:5a:b4:8e:e4:1e:46:a3:9d:46:53:
fc:07:3c:ab:a4:4f:2f:04:f9:65:d3:fe:3c:53:11:58:55:1d:
02:e1:22:dd:15:32:aa:01:bf:45:ed:93:80:57:64:61:82:28:
b1:95:4b:09:bc:b9:93:e9:af:a5:a3:ec:6c:b0:1a:d4:d7:11:
17:fe:66:17:01:16:ea:60:a9:d3:dc:62:45:cc:76:3e:e9:e0:
73:cf:50:c9:92:15:f0:0f:7c:8c:24:44:3a:df:10:81:4d:9e:
43:96:c4:17:09:3c:49:fd:88:ff:13:57:f7:18:fe:9d:7b:30:
d9:9d:ca:64:87:af:d5:22:57:61:af:06:55:5c:9c:d5:08:19:
3d:ae:9f:6d:07:5a:78:f7:ea:94:18:ba:15:7d:dc:5d:85:24:
55:c0:17:2d:07:72:b7:e1:28:25:c0:d2:a1:30:46:3b:d6:aa:
be:70:ca:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:25:28 2026 by rpki-client