Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCA4BCD034EF11F1926F46B4CE1D38B0.roa
File: FCA4BCD034EF11F1926F46B4CE1D38B0.roa (raw, json)
Hash identifier: uffxWem5b7d9+EXBO/lKhIrd5YEh1NGUPEab32mQ42Y=
Subject key identifier: 9D:8C:CA:CD:C5:60:4E:2E:0A:03:C3:81:1B:37:D0:4F:90:D4:D9:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C46F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCA4BCD034EF11F1926F46B4CE1D38B0.roa
Signing time: Fri 10 Apr 2026 15:14:37 +0000
ROA not before: Fri 10 Apr 2026 15:14:32 +0000
ROA not after: Fri 17 Apr 2026 15:14:32 +0000
asID: 401696
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 17 Apr 2026 15:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115823 (0x1c46f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 15:14:32 2026 GMT
Not After : Apr 17 15:14:32 2026 GMT
Subject: CN=69d913dd-e991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:29:5c:f1:f4:35:6c:d3:9f:02:fe:48:a4:9e:
5a:2a:ab:0c:f8:ca:55:f0:e4:32:9d:c0:5c:f6:9d:
7b:be:c0:8b:8b:b3:46:b9:2e:43:21:37:2d:d1:82:
b7:ff:1e:24:c6:41:94:3d:bb:77:8e:2c:01:65:40:
94:f7:95:a6:9b:fd:0f:98:42:ce:58:f3:52:65:7d:
50:b8:25:42:7c:1b:11:b5:a2:74:cc:ae:39:fc:18:
1b:3e:28:55:56:a9:2d:b6:5d:8d:41:9a:56:28:b7:
8d:67:f3:bc:b7:4c:18:49:93:27:06:9b:82:91:93:
e4:7c:cc:8f:bd:57:fa:5a:22:e6:3a:47:e7:e0:47:
fb:8a:79:c2:c1:5c:a0:6b:fa:9f:0f:c5:93:e8:5b:
2c:32:c7:98:7c:3e:34:35:5f:dc:de:56:de:b6:3e:
ff:70:ac:3e:42:99:8f:9c:b8:b0:0c:d6:a3:e8:3d:
27:84:6c:3e:c8:13:7c:88:a4:5b:93:ad:c3:e0:c8:
ed:53:db:6d:cb:d5:30:3d:03:f3:96:7a:68:7e:3c:
f9:48:36:58:04:a2:10:fb:ab:47:17:67:6e:fb:0b:
d8:4d:65:9c:43:24:d4:ad:01:0a:70:3f:dd:3f:bc:
42:a5:b8:9a:ab:66:57:f5:8a:f4:50:92:6a:23:ed:
54:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8C:CA:CD:C5:60:4E:2E:0A:03:C3:81:1B:37:D0:4F:90:D4:D9:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCA4BCD034EF11F1926F46B4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
9c:54:21:97:2d:24:5d:d6:36:a3:a8:09:1e:e3:b4:55:ff:d0:
c0:71:4d:dc:60:91:48:0f:f0:59:01:c6:e6:23:79:13:b0:62:
57:0f:8b:e6:53:ad:7d:37:0c:7f:1f:71:53:6a:72:c5:6e:69:
12:6f:b6:a7:99:93:8e:26:4a:60:3d:ba:62:e7:52:e7:8e:04:
9d:c9:74:26:db:fd:2b:d7:3d:e2:ba:02:39:fb:3a:99:6f:f2:
0b:be:38:88:aa:4f:86:ff:4a:ad:4a:e5:4f:ca:e8:2b:d7:81:
7d:d1:1a:b4:82:63:f3:68:76:6d:d3:a9:a1:62:dd:51:f2:20:
ce:18:4b:57:a7:1d:27:d7:08:3d:b6:6a:b4:51:4f:e0:db:5a:
da:05:ce:ed:4f:ea:c7:d2:51:de:8a:7f:4e:5d:71:b6:e7:6a:
16:ef:38:9d:f6:1f:31:bf:30:44:1c:ac:b5:38:5d:8f:15:07:
b0:5c:47:fd:73:0b:3b:e5:ed:4c:99:a4:87:9c:2a:46:84:97:
df:c4:d7:a8:dd:73:d5:ce:e1:53:5c:58:0c:7f:ed:b5:34:44:
11:0b:bf:69:20:99:10:2c:58:1d:91:56:2c:b8:c1:dc:51:1d:
3b:3a:a5:a8:af:49:32:3a:21:47:33:52:5a:65:66:c7:26:56:
e0:c1:6c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:07:58 2026 by rpki-client