Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3CBD2D433FE11F18F8B691BCF1D38B0.roa
File: F3CBD2D433FE11F18F8B691BCF1D38B0.roa (raw, json)
Hash identifier: dVx/Iq+zwzKdddjjCI88dczMDj8Pxt2t66QbSyzB1/Q=
Subject key identifier: 30:E1:65:4B:5B:7D:4D:54:98:42:F3:6D:C8:F7:B2:C2:3E:BD:69:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C3D3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3CBD2D433FE11F18F8B691BCF1D38B0.roa
Signing time: Thu 09 Apr 2026 10:29:13 +0000
ROA not before: Thu 09 Apr 2026 10:29:09 +0000
ROA not after: Fri 22 May 2026 10:29:09 +0000
asID: 133180
IP address blocks: 154.84.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115667 (0x1c3d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 10:29:09 2026 GMT
Not After : May 22 10:29:09 2026 GMT
Subject: CN=69d77f79-f52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:03:ae:a9:ad:6a:e3:77:08:96:1a:c8:b8:c4:
04:b7:7f:a4:a1:d1:37:18:d3:c6:e8:d2:b8:02:b6:
ab:f7:f1:fb:c0:4c:e3:28:4b:a6:c1:16:51:c7:49:
4a:24:a7:60:75:fa:52:53:00:6e:3d:c3:dc:ed:42:
f5:64:83:cc:49:1a:52:ee:82:0c:39:b2:be:c4:0c:
d2:2b:4f:cf:f1:a4:65:40:53:d0:e5:04:ae:99:30:
f5:7a:27:36:d0:45:09:29:f0:5d:bd:e4:a2:9e:5f:
3e:f9:93:58:61:80:8f:1a:ef:30:d9:49:58:9a:8b:
70:0c:55:29:e0:da:6d:bb:3e:4d:aa:10:67:ed:e5:
39:16:8c:e7:17:2a:72:de:0e:7e:41:e8:9e:87:85:
76:8c:7f:7e:3b:62:bd:d4:d7:ca:64:dd:18:e8:09:
a4:9e:b9:73:da:25:31:b3:b9:6e:71:61:d4:3b:1f:
0c:b3:3c:30:aa:68:1f:ba:24:10:e3:ed:b7:92:72:
07:11:d2:9f:47:0d:b7:fe:a1:2a:ca:27:5c:7f:0d:
b0:61:cd:6a:e5:29:0d:bc:b8:49:78:6e:fa:35:a0:
29:ae:4b:88:91:69:59:a1:43:4e:bf:1f:f6:12:d6:
d0:ce:bc:ee:5b:cb:d3:a0:2e:56:8b:6f:91:f8:a2:
76:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E1:65:4B:5B:7D:4D:54:98:42:F3:6D:C8:F7:B2:C2:3E:BD:69:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3CBD2D433FE11F18F8B691BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.135.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:65:b7:f7:c1:c9:34:2f:01:69:58:bc:35:46:79:e0:e2:2f:
45:90:b6:e2:9c:3f:d9:fe:c1:56:85:fc:b1:2e:e7:c1:0f:2e:
7b:70:29:14:58:39:12:61:41:79:67:a6:3b:da:ca:71:08:42:
22:95:c3:67:44:77:19:9d:36:58:36:9c:93:8c:bb:f7:50:2a:
86:9b:5f:2b:b9:43:b4:41:17:5d:78:65:b2:f6:fa:ab:b8:45:
4b:af:ed:0e:6c:b5:5e:44:a2:c6:92:32:31:8b:14:80:2a:2f:
8b:dc:d1:78:8d:aa:91:8e:50:6c:fb:06:18:35:cc:9d:36:0d:
0c:d2:88:59:4f:41:3f:a9:19:ea:5c:99:5d:68:64:39:78:ed:
c9:95:ad:a7:b3:27:71:9d:fd:71:f6:e9:c7:ea:57:6e:3d:fd:
56:72:fb:37:d6:e2:5d:a8:c4:0e:4b:01:4c:e6:38:16:58:d6:
df:19:2d:ce:fa:45:49:5c:e8:1a:98:4d:87:d8:55:3d:81:b7:
ad:1d:52:74:ba:30:19:00:06:5f:65:33:d4:6a:40:38:19:43:
3d:c9:93:ff:f2:74:cc:b1:a0:a7:77:b8:d3:ee:d6:d4:f7:34:
ca:10:f5:c7:57:76:36:65:16:08:86:56:5c:cb:6d:64:86:67:
76:2d:bb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:45:44 2026 by rpki-client