Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09A4E84E195011F1BC8F5F9FDAE4EC9C.roa
File: 09A4E84E195011F1BC8F5F9FDAE4EC9C.roa (raw, json)
Hash identifier: oxZOORU1F6N2sX9TPsZ7IDS/yER3QjhUITUonbq+dUw=
Subject key identifier: C8:3B:09:14:17:98:D5:D7:68:34:69:63:FC:0F:34:AE:1B:57:9F:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE0B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09A4E84E195011F1BC8F5F9FDAE4EC9C.roa
Signing time: Fri 06 Mar 2026 11:31:38 +0000
ROA not before: Fri 06 Mar 2026 11:31:33 +0000
ROA not after: Sun 05 Apr 2026 11:31:33 +0000
asID: 272040
IP address blocks: 154.88.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Mar 2026 00:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114187 (0x1be0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 6 11:31:33 2026 GMT
Not After : Apr 5 11:31:33 2026 GMT
Subject: CN=69aabb1a-e774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:57:ac:e1:85:66:f1:96:e3:45:f0:20:9d:bb:
70:35:ee:17:29:08:ac:58:34:6f:4e:22:c0:a8:b4:
fa:90:cb:ea:09:6e:f7:33:97:70:38:77:b2:b8:66:
6b:c1:cd:a8:6a:a0:98:3f:04:6b:0e:b1:df:1b:d1:
12:6b:53:10:05:e6:77:a0:18:f9:de:e8:a1:17:de:
57:45:46:00:80:c5:d1:0b:45:63:e2:06:92:49:6d:
e1:8d:b1:61:49:7c:dc:8e:4a:e3:ba:77:3a:ee:f5:
e9:46:c4:90:ac:fa:b8:d7:fe:a9:e0:0c:ae:51:7e:
ab:68:62:a9:19:3a:e0:2d:4f:ea:c4:81:b0:f3:71:
a3:0b:00:84:73:f5:40:ae:65:a7:66:7b:d2:8d:dc:
c4:cb:ac:2b:dd:26:a0:c9:74:68:db:67:3f:31:83:
ed:be:15:70:0b:4a:45:de:6f:b2:2f:ab:29:2d:32:
21:c3:02:c6:f0:1b:3c:0c:df:a0:2d:aa:b4:d0:2a:
3b:89:12:e1:fb:40:3f:22:e9:87:73:94:9d:f2:43:
99:8c:35:f2:06:a7:2e:4a:32:ac:ec:3f:9b:d5:28:
a8:2d:02:7d:36:cf:ce:a5:98:93:ec:07:39:26:dd:
3a:37:03:c4:70:4e:40:83:ab:ab:89:f4:70:c6:5d:
71:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3B:09:14:17:98:D5:D7:68:34:69:63:FC:0F:34:AE:1B:57:9F:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09A4E84E195011F1BC8F5F9FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.184.0/23
Signature Algorithm: sha256WithRSAEncryption
52:61:5c:bd:32:01:a0:cc:ba:ef:b4:37:fc:3c:65:d7:c3:d7:
ae:5d:87:43:4c:9b:85:11:d7:b3:50:7f:e6:56:20:ea:42:ff:
a8:f1:47:05:90:4c:b7:81:1d:ca:b2:51:60:47:ba:98:ef:63:
46:06:03:ac:5a:9f:92:63:52:6b:dc:88:fc:47:2c:02:fa:dc:
73:a3:c6:65:82:ca:34:9d:ae:f3:fb:9f:c5:0e:e8:e4:c0:c6:
69:09:13:a7:33:b6:2a:81:02:24:4b:36:a9:4d:81:cf:30:2b:
8f:d1:36:98:1b:29:10:34:02:7e:43:49:2b:d6:ee:3f:b0:e4:
f5:49:7a:f7:e5:83:22:7b:04:ce:0f:ff:92:89:16:f3:32:08:
4b:5b:76:41:04:1a:e1:ce:7a:00:a2:a3:80:fe:45:4d:f5:da:
6f:d2:df:33:dd:0d:ad:13:30:53:21:c2:cf:42:8c:77:30:2f:
00:0b:43:b2:b8:34:60:c0:ef:40:e0:c6:c1:26:b3:c7:3c:36:
8f:10:7d:62:c5:7a:2d:1a:36:b5:89:42:8b:2e:28:0c:57:c7:
9a:34:4d:56:b9:e1:0b:a1:f6:f9:05:4e:70:bf:08:3c:e7:34:
fc:7a:28:a6:48:f8:ad:e1:52:c5:75:10:43:08:17:ff:d4:a7:
98:e8:f2:8c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAb4LMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzA2MTEzMTMzWhcNMjYwNDA1MTEzMTMzWjAYMRYw
FAYDVQQDEw02OWFhYmIxYS1lNzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArVes4YVm8ZbjRfAgnbtwNe4XKQisWDRvTiLAqLT6kMvqCW73M5dwOHey
uGZrwc2oaqCYPwRrDrHfG9ESa1MQBeZ3oBj53uihF95XRUYAgMXRC0Vj4gaSSW3h
jbFhSXzcjkrjunc67vXpRsSQrPq41/6p4AyuUX6raGKpGTrgLU/qxIGw83GjCwCE
c/VArmWnZnvSjdzEy6wr3SagyXRo22c/MYPtvhVwC0pF3m+yL6spLTIhwwLG8Bs8
DN+gLaq00Co7iRLh+0A/IumHc5Sd8kOZjDXyBqcuSjKs7D+b1SioLQJ9Ns/OpZiT
7Ac5Jt06NwPEcE5Ag6urifRwxl1x2QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMg7
CRQXmNXXaDRpY/wPNK4bV5/lMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wOUE0RTg0RTE5NTAxMUYxQkM4RjVGOUZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmli4MA0GCSqGSIb3DQEB
CwUAA4IBAQBSYVy9MgGgzLrvtDf8PGXXw9euXYdDTJuFEdezUH/mViDqQv+o8UcF
kEy3gR3KslFgR7qY72NGBgOsWp+SY1Jr3Ij8RywC+txzo8Zlgso0na7z+5/FDujk
wMZpCROnM7YqgQIkSzapTYHPMCuP0TaYGykQNAJ+Q0kr1u4/sOT1SXr35YMiewTO
D/+SiRbzMghLW3ZBBBrhznoAoqOA/kVN9dpv0t8z3Q2tEzBTIcLPQox3MC8AC0Oy
uDRgwO9A4MbBJrPHPDaPEH1ixXotGja1iUKLLigMV8eaNE1WueELofb5BU5wvwg8
5zT8eiimSPit4VLFdRBDCBf/1KeY6PKM
-----END CERTIFICATE-----
Generated at Mon Mar 16 05:47:43 2026 by rpki-client