Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33C09960163B11F1B32349AADAE4EC9C.roa
File: 33C09960163B11F1B32349AADAE4EC9C.roa (raw, json)
Hash identifier: iyIpxNpfJcN1Njd1kZTc+lWASBouMxVKIye5v2dtzEc=
Subject key identifier: 35:49:20:9D:F8:6D:F4:30:E4:FE:C5:59:4B:35:C1:B2:B9:1E:A5:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BD0D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33C09960163B11F1B32349AADAE4EC9C.roa
Signing time: Mon 02 Mar 2026 13:24:55 +0000
ROA not before: Mon 02 Mar 2026 13:24:51 +0000
ROA not after: Thu 09 Apr 2026 13:24:51 +0000
asID: 138915
IP address blocks: 154.223.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Mar 2026 00:06:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113933 (0x1bd0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 2 13:24:51 2026 GMT
Not After : Apr 9 13:24:51 2026 GMT
Subject: CN=69a58fa7-fbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:32:c9:b3:c8:fa:1c:bd:6a:8f:f1:95:72:
c5:dd:4a:40:94:41:02:bd:6c:e3:8a:e9:46:7a:ba:
76:38:ea:46:73:47:7a:44:3c:b4:f4:58:23:81:9c:
44:47:31:f2:7b:35:ad:f3:7e:a5:a7:92:59:28:39:
84:eb:12:d7:72:db:bb:8b:93:31:88:5d:da:56:d7:
c3:21:06:0b:79:a0:08:47:a0:bd:bb:90:d8:df:00:
26:c5:57:e7:47:52:b0:d6:63:22:6e:5d:3a:b0:10:
5d:bd:48:f1:14:08:03:de:44:8a:51:5d:41:25:26:
9e:66:f2:f7:b2:e4:0a:72:4e:13:8f:19:b7:89:e3:
b2:97:ff:c9:18:ef:cb:c5:cc:85:46:55:e5:ff:cf:
2c:c8:90:66:96:83:bf:1f:62:b6:f6:bc:df:37:62:
8d:f4:96:c1:ac:02:2b:82:0c:33:3b:bc:04:3d:48:
86:ce:49:28:5b:ae:f9:84:b0:9d:67:27:13:9a:e5:
d9:f8:be:1d:7e:0e:fa:77:04:d9:69:c1:0a:f6:c7:
d3:9a:bb:d5:75:d0:3a:74:0d:21:38:8e:e1:5e:bc:
b4:6a:a3:29:8b:c0:06:cd:43:03:a1:8c:8f:53:dd:
a3:41:b2:09:f8:38:68:ee:a7:ea:3a:58:25:df:f8:
a3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:49:20:9D:F8:6D:F4:30:E4:FE:C5:59:4B:35:C1:B2:B9:1E:A5:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33C09960163B11F1B32349AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.65.0/24
Signature Algorithm: sha256WithRSAEncryption
09:d2:9c:70:b7:17:42:af:a6:59:de:08:ae:21:ec:b7:bd:f0:
55:b8:ac:db:1e:6b:fd:13:fd:1a:b7:2d:1b:08:de:aa:6f:ed:
07:9b:73:b2:7f:6e:9a:46:45:eb:b3:e4:50:6d:5c:1c:37:fc:
da:9d:a2:5f:30:29:fd:b9:ee:3e:cf:38:72:f0:df:36:33:cf:
f2:87:0b:75:86:8b:45:c0:f7:b0:3f:c8:43:8d:1d:8b:b2:fb:
69:c2:b1:09:0d:86:e1:92:26:c2:95:4d:46:05:15:da:e0:18:
f8:ed:7a:c6:25:eb:97:1c:04:fd:47:3e:48:07:52:0f:48:e5:
6a:2a:a5:43:8a:cb:88:82:e9:af:4c:8b:f7:64:06:d8:c7:c4:
f2:a6:c2:fd:8c:c8:c1:39:36:4b:dc:c3:a3:70:95:4f:be:08:
bf:a3:94:ae:fc:db:48:a7:8a:6f:ef:fe:09:61:dd:9b:9a:ed:
a4:c7:16:c5:45:37:ed:87:a3:54:21:15:0a:cc:b2:d4:3b:78:
18:5e:d1:0a:05:27:7d:7a:41:bf:a8:dd:5d:9a:02:1c:09:6e:
e3:ad:4c:2e:34:98:48:ee:d1:4e:05:3f:44:62:ac:74:c4:df:
5d:90:74:77:52:63:4a:40:d5:31:5c:79:34:78:da:8e:8c:f7:
70:77:a5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 22:17:33 2026 by rpki-client