Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AE2D7482C1C11F1914013BEDAE4EC9C.roa
File: 3AE2D7482C1C11F1914013BEDAE4EC9C.roa (raw, json)
Hash identifier: hSV7ZgyjES9YV94dSEQDKdEpaoBT6l/pCUBWIi2R6E0=
Subject key identifier: A8:95:E7:0F:41:B4:E7:03:BB:3F:0B:9E:39:19:32:C2:4F:75:12:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C1BF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AE2D7482C1C11F1914013BEDAE4EC9C.roa
Signing time: Mon 30 Mar 2026 09:38:39 +0000
ROA not before: Mon 30 Mar 2026 09:38:33 +0000
ROA not after: Mon 05 Apr 2027 09:38:33 +0000
asID: 265038
IP address blocks: 154.91.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Apr 2026 09:15:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115135 (0x1c1bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 30 09:38:33 2026 GMT
Not After : Apr 5 09:38:33 2027 GMT
Subject: CN=69ca449f-6312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1f:9e:34:10:cc:d5:08:a8:b1:d9:19:1b:cb:
9c:92:54:c7:64:ae:5e:97:44:c7:53:ed:9a:6b:c5:
6c:2a:11:cc:83:db:90:34:10:bc:5a:4f:f3:da:48:
d4:d3:f0:dd:ff:2b:ef:3c:ef:b9:53:a0:41:5e:7a:
03:36:c8:e1:ff:e5:78:1f:1c:a1:66:b1:05:e0:3f:
4d:f7:37:37:c1:80:43:77:9b:f3:04:9e:6d:e5:fc:
57:e4:e8:42:7f:b3:ae:7b:c2:42:49:ef:f3:32:80:
64:75:4c:65:1d:4f:d0:2d:33:d6:ae:49:9b:bf:e3:
54:ba:f1:93:7d:b2:09:86:35:5a:18:20:43:18:74:
5e:4a:ab:a2:b8:89:18:66:f4:bb:c6:8b:e2:f5:51:
cb:c0:16:ad:b4:8d:8a:56:54:73:0f:3d:27:cb:2e:
35:66:62:7a:39:4e:c2:b0:d8:25:92:bf:31:39:52:
7a:23:73:57:ac:b7:e0:51:db:c7:c4:84:dd:37:fd:
10:3c:97:ee:cf:51:e8:01:8b:f0:80:6b:89:dd:db:
9c:60:29:57:53:ba:b2:c8:fd:a1:60:73:c2:06:81:
a9:ca:fb:ae:1f:56:2a:63:b3:a5:6a:86:8a:59:c1:
e9:9f:6e:b8:91:10:7e:d1:50:ad:60:c8:6c:9b:5b:
4c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:95:E7:0F:41:B4:E7:03:BB:3F:0B:9E:39:19:32:C2:4F:75:12:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AE2D7482C1C11F1914013BEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.138.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:0a:8c:da:62:5a:ff:b9:20:d2:46:d6:d3:53:1e:e3:31:5c:
79:bf:ff:82:13:7b:2a:a5:f7:ac:35:5a:ec:25:49:08:30:73:
3d:f4:81:95:fb:84:40:9a:a9:3d:7c:75:53:de:af:29:b9:0f:
51:e9:2f:f1:f3:dd:2d:b9:8b:a1:a8:de:82:a4:05:a1:2e:b1:
cc:28:8a:a3:aa:46:e4:31:ce:97:64:2b:c2:7d:25:3e:fb:04:
ab:50:7e:fc:f6:ca:23:83:79:c9:8c:7b:56:18:87:75:76:22:
fb:44:2e:8e:be:0e:19:d7:ef:fe:f4:52:8c:97:a6:e8:76:75:
4f:cf:ee:9f:07:56:83:93:7b:62:1b:35:93:cd:32:3e:09:7c:
d8:06:32:44:fa:ae:d9:fe:bc:3e:cc:a6:06:3f:85:b4:23:86:
46:39:e2:ff:4e:68:a1:48:4c:e2:b4:36:c2:b5:30:f1:cc:0f:
d5:0e:3d:7b:45:bb:f3:99:f6:85:e3:45:97:92:73:c2:e7:6f:
92:3a:75:52:89:0c:c4:c5:b3:ad:86:16:61:92:5d:dc:83:20:
c0:67:d0:12:ed:9e:20:02:ea:0d:0b:5f:58:b4:7b:bb:9d:50:
80:4c:11:1f:ea:5f:eb:c9:d6:63:6e:29:62:34:ad:5b:ad:b4:
ea:22:76:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 20:12:21 2026 by rpki-client