Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/028B0B7C1C5911F19636F08FDAE4EC9C.roa
File: 028B0B7C1C5911F19636F08FDAE4EC9C.roa (raw, json)
Hash identifier: pTAMK4SC8Hp7XoWqwHIJpIxlHkTCBf6dxhOGgu8rOsc=
Subject key identifier: 7A:D6:77:DC:13:41:6D:6E:46:CA:BD:E6:21:61:B9:DC:D1:33:46:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BEA3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/028B0B7C1C5911F19636F08FDAE4EC9C.roa
Signing time: Tue 10 Mar 2026 08:13:25 +0000
ROA not before: Tue 10 Mar 2026 08:13:19 +0000
ROA not after: Fri 10 Apr 2026 08:13:19 +0000
asID: 14315
IP address blocks: 154.203.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114339 (0x1bea3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 10 08:13:19 2026 GMT
Not After : Apr 10 08:13:19 2026 GMT
Subject: CN=69afd2a5-9ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e9:a1:6d:ff:10:a3:9c:4f:d4:3e:4a:6d:fa:
76:96:f5:a8:20:dd:fb:b9:90:7b:4d:60:f0:2b:0d:
cf:e5:6f:c4:b6:c4:21:5c:a3:bb:c3:5a:20:f9:c1:
03:0b:85:84:f2:e8:46:e0:c8:9e:4f:62:06:f5:ec:
f1:4c:4f:cc:90:0b:9d:44:7b:42:7c:90:e2:13:51:
f3:03:3c:08:ba:dd:cd:3a:13:3f:f4:0e:c7:25:8f:
9a:59:bc:44:a8:58:7c:01:2f:36:74:c7:9f:0b:f1:
ec:f8:10:3f:74:b1:d2:b4:35:f6:d5:e1:e6:ef:4e:
11:2c:d7:9e:28:ae:5f:2e:c1:31:65:b0:26:8c:01:
8d:a7:91:48:7e:23:de:0e:eb:62:5f:06:da:0d:04:
36:c8:80:20:a4:2a:be:d4:95:82:ad:96:97:08:68:
0b:dc:85:47:09:88:c0:15:01:11:1e:1e:ae:f6:c0:
9c:60:28:56:0f:e7:13:31:c0:2a:6c:75:42:9f:2f:
fd:ed:15:1c:da:d2:4f:17:c6:30:cf:27:bb:ce:04:
d7:91:f2:14:eb:d9:94:ac:f7:58:e3:89:08:b9:af:
dc:63:48:01:d5:b5:d4:75:fa:62:0f:d5:03:6d:22:
0a:dd:5d:19:59:f1:4c:d1:5e:72:c7:64:96:fc:78:
cc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D6:77:DC:13:41:6D:6E:46:CA:BD:E6:21:61:B9:DC:D1:33:46:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/028B0B7C1C5911F19636F08FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.4.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:5c:a1:02:bc:af:19:c0:c8:b1:c3:14:1b:e0:95:be:0a:db:
60:3e:77:b7:e4:6e:fa:21:c9:4b:e2:a3:4d:fa:82:c8:28:4c:
bd:61:7d:43:eb:f3:cb:7e:00:1f:cb:5f:ea:32:76:54:b5:99:
22:2a:8e:a3:82:b0:a9:b8:b9:d0:be:4b:ba:69:5e:b2:f9:5e:
61:f3:95:37:c9:4e:b5:35:4a:eb:a7:a7:5b:2d:b7:81:26:75:
65:7f:ae:63:1d:e5:e1:86:58:a6:b9:c5:a5:58:f1:fc:c6:85:
86:cb:1b:43:75:54:d2:23:d1:33:73:33:2d:48:c9:f5:bd:1f:
8a:50:56:5b:6b:fa:73:5e:18:67:0b:39:e3:41:8f:a6:30:08:
87:bf:9f:56:69:4a:b0:d0:b6:8c:18:6e:9b:f6:1f:6f:17:23:
7d:bd:39:e7:9d:dc:4b:a9:9b:b5:be:aa:92:e3:5d:d1:c7:c3:
57:88:08:9a:3f:32:97:e2:4c:31:f8:6a:64:87:06:59:57:24:
02:4a:e7:4a:c4:15:17:65:94:f4:af:b7:68:ca:3a:84:5e:30:
8e:3a:7d:77:ae:1a:1d:37:ef:2d:e2:26:37:0c:88:a1:bf:a1:
ca:3a:e8:eb:13:11:f2:60:66:e2:9c:13:4d:0c:df:55:5c:51:
d6:2e:6b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:24 2026 by rpki-client