Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/036E46981EAD11F1A10527ABDAE4EC9C.roa
File: 036E46981EAD11F1A10527ABDAE4EC9C.roa (raw, json)
Hash identifier: SOqQpTOCzwYXoFDzC6T9y+AonYbL7o0aTZIbg+s4LAw=
Subject key identifier: 90:2D:78:83:5B:45:E5:2D:7F:76:57:D1:D1:38:F6:79:6A:11:CF:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF43
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/036E46981EAD11F1A10527ABDAE4EC9C.roa
Signing time: Fri 13 Mar 2026 07:19:46 +0000
ROA not before: Fri 13 Mar 2026 07:19:42 +0000
ROA not after: Fri 17 Apr 2026 07:19:42 +0000
asID: 22773
IP address blocks: 154.94.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114499 (0x1bf43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 13 07:19:42 2026 GMT
Not After : Apr 17 07:19:42 2026 GMT
Subject: CN=69b3ba92-dfe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d0:15:6a:58:a5:98:18:41:1a:b0:fe:1b:41:
7c:a2:5c:62:21:2b:7f:cc:c4:6a:5b:66:f1:03:f7:
bf:ad:77:ce:7c:de:f9:ac:3a:18:87:d9:82:4c:30:
3f:7c:55:9d:34:ab:2a:0c:6b:cf:f6:2a:71:d3:6a:
bd:c9:9f:e0:bf:e8:49:10:ab:f7:67:b9:77:64:2e:
87:df:5a:7f:65:05:d7:5d:5f:d2:4d:8a:d7:19:1a:
74:a6:06:ea:ef:c8:46:d9:ad:bc:16:c3:c5:da:11:
6f:2e:bb:0a:ff:9b:b8:d3:2c:c7:48:f2:b0:4c:1a:
6e:7d:15:b8:8a:a8:bd:98:a0:e1:6e:4f:0b:bb:00:
4c:0a:dc:96:6b:e3:a9:ec:98:f8:af:bf:45:74:e6:
68:32:08:a6:29:42:d0:32:bf:6c:e0:61:b5:d5:f9:
3b:b0:46:c8:d6:81:2b:16:44:61:f6:06:ae:52:48:
68:b2:d1:55:3a:7f:f3:56:09:9f:51:51:0b:d3:39:
a3:4c:e4:18:b5:db:e4:39:7b:f7:ae:fe:2b:8d:7d:
4c:66:73:e8:39:a1:96:5e:3b:3c:e4:e7:a4:26:79:
ae:4f:da:69:7b:7f:a6:15:bc:79:5f:9d:f8:88:49:
06:22:52:c4:1a:4f:cb:ae:89:6b:0d:7e:f6:f7:d1:
1f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2D:78:83:5B:45:E5:2D:7F:76:57:D1:D1:38:F6:79:6A:11:CF:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/036E46981EAD11F1A10527ABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.63.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:96:b6:e6:e2:76:8e:fc:8e:bf:da:af:14:68:03:90:81:e2:
3f:29:45:e8:21:1c:f0:1a:bb:ec:ca:64:af:70:fa:45:15:e7:
3d:a6:70:bf:f9:ed:72:87:85:4e:87:e5:57:82:ec:97:f2:c9:
5f:32:77:00:35:43:24:87:35:ce:de:33:70:2b:c9:1d:5e:79:
ac:f8:98:5a:bd:39:ae:c2:69:05:d0:88:c9:37:62:1a:2f:0e:
4d:fb:ed:57:68:40:6f:8b:05:dc:2f:2c:98:3d:36:ca:64:47:
4d:45:c9:61:30:75:13:8e:0e:17:e8:75:64:25:18:f5:6d:27:
82:e9:56:88:8a:68:26:69:50:99:d4:ed:92:29:6b:48:38:1b:
24:27:4f:27:83:42:c9:be:7b:2e:79:a8:3d:23:4e:86:a4:dc:
bb:66:91:08:73:49:2b:a6:f9:f5:40:d1:ca:0f:79:a4:a0:1f:
cc:4c:8a:25:55:ed:35:ef:d6:13:f1:67:4b:17:91:af:77:b1:
21:34:1f:7d:69:66:38:f5:75:41:0a:e7:cf:19:d1:22:48:7c:
e1:a2:00:69:1f:7e:4f:00:34:7c:56:04:bb:ba:ba:73:1e:f6:
0e:fd:a1:21:fb:db:d4:aa:39:83:49:be:63:32:49:76:42:18:
63:5b:e6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:15:57 2026 by rpki-client