Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/032E11E817CA11F1AF7943BCDAE4EC9C.roa
File: 032E11E817CA11F1AF7943BCDAE4EC9C.roa (raw, json)
Hash identifier: io4V0OeIYOTg9uF9pwd87isCKETX6xytKqdH/O2t9wk=
Subject key identifier: 92:F3:4A:50:EF:FE:4D:7A:79:F0:B5:64:29:3E:80:D5:25:EF:A0:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BD7B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/032E11E817CA11F1AF7943BCDAE4EC9C.roa
Signing time: Wed 04 Mar 2026 12:59:43 +0000
ROA not before: Wed 04 Mar 2026 12:59:39 +0000
ROA not after: Fri 10 Apr 2026 12:59:39 +0000
asID: 40779
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114043 (0x1bd7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 4 12:59:39 2026 GMT
Not After : Apr 10 12:59:39 2026 GMT
Subject: CN=69a82cbf-31d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:3a:f6:e2:f0:f9:6e:e0:51:db:2b:5c:73:
1b:57:a7:66:72:6a:3e:51:12:34:c2:a5:a2:3e:6d:
c1:15:0d:8c:f1:4a:ad:51:e8:8f:a4:40:2b:51:b3:
26:3b:ac:0e:8a:b8:a9:f4:7e:6f:63:42:73:be:a2:
76:c0:95:cb:b2:de:dd:fa:a5:1f:be:32:98:5f:59:
aa:6c:4b:0c:24:18:b8:d2:8e:75:40:29:a9:04:61:
3f:09:6c:de:57:68:4f:78:d5:5d:76:7e:a8:3b:26:
73:80:51:3e:fd:17:41:d6:6d:6d:48:0f:95:f2:01:
91:cf:8c:ec:aa:e6:6a:d4:9d:72:c7:b5:4f:1f:40:
84:f8:ee:39:c9:b8:42:7b:9b:be:89:d4:0b:cd:1c:
05:07:7e:23:7b:9a:e0:cd:28:49:d8:6a:f4:49:05:
8c:52:17:ea:c8:e3:24:f3:b8:69:8d:e2:58:12:44:
57:89:6d:08:18:23:ac:89:1e:cb:2d:9c:36:f4:f4:
82:97:ca:87:1c:e1:a7:7a:f1:53:85:90:54:ef:ee:
3f:77:6b:84:a7:70:73:d1:6d:33:21:7e:0e:42:40:
86:25:84:8d:9c:95:54:54:97:a8:25:2b:3e:b1:42:
81:d0:c3:2f:31:49:9c:f3:9c:b3:04:e6:d2:a1:49:
74:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F3:4A:50:EF:FE:4D:7A:79:F0:B5:64:29:3E:80:D5:25:EF:A0:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/032E11E817CA11F1AF7943BCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
b3:c4:f6:42:8c:91:a9:60:0d:3b:28:40:89:ef:c6:fb:6d:ac:
28:9f:9c:0a:ab:67:7f:b8:41:cc:a9:9a:cf:06:95:2a:a3:9a:
48:4d:56:7b:d1:2a:0a:67:aa:a5:bc:f3:f6:b9:d9:d2:d8:65:
0d:f2:02:9f:79:6d:fc:46:0e:d9:8f:bd:43:7c:49:34:b4:38:
1a:a6:ef:5a:a7:e4:22:6f:c3:b4:d8:91:6c:c6:4e:85:4d:91:
48:1c:9a:db:30:72:ab:d7:58:22:44:d8:ac:b9:80:df:fe:9e:
f1:38:3c:72:08:b7:7a:dd:f2:06:35:3c:dc:41:0c:fb:14:51:
7a:b2:3e:b0:1b:b1:17:17:e9:dd:f4:49:78:22:bc:72:e0:74:
17:12:e5:e8:61:fa:ed:84:21:bd:e8:01:65:9a:d4:9c:4f:b6:
57:20:07:c4:13:40:8e:ba:1f:1e:cd:e4:f7:48:92:85:69:bc:
f5:82:93:1a:c5:a8:33:d9:f1:61:c3:b3:aa:35:8f:d6:c1:17:
7b:a0:5c:2b:9d:05:d4:75:81:10:63:4c:c4:b8:fd:04:6f:76:
ee:0a:e4:1a:55:29:45:d6:d8:e7:09:05:5e:78:80:8f:f8:6a:
1d:1e:ea:de:e5:2d:ad:fb:be:05:12:ea:54:7f:fd:5c:da:91:
c2:2f:57:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:20:35 2026 by rpki-client