Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3922EB6844A011F1984876A5CE1D38B0.roa
File: 3922EB6844A011F1984876A5CE1D38B0.roa (raw, json)
Hash identifier: Cmlepice1dZVAX4NXQUX46+3qMAIzezL/+LX2apCC+I=
Subject key identifier: 21:29:3C:A5:A3:4B:FA:CB:17:D4:16:F9:CB:3E:A0:BC:5B:F8:BD:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C85D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3922EB6844A011F1984876A5CE1D38B0.roa
Signing time: Thu 30 Apr 2026 14:23:57 +0000
ROA not before: Thu 30 Apr 2026 14:23:53 +0000
ROA not after: Sun 28 Mar 2027 14:23:53 +0000
asID: 132513
IP address blocks: 154.85.98.0/24 maxlen: 24
154.91.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116829 (0x1c85d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 14:23:53 2026 GMT
Not After : Mar 28 14:23:53 2027 GMT
Subject: CN=69f365fd-6886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:ad:4b:9f:bc:87:ed:ae:8a:a0:41:df:6c:
e1:84:50:9a:ba:6e:32:5b:04:cb:ea:cd:90:b9:57:
65:b4:70:30:41:f8:7f:60:02:8f:d6:64:59:79:10:
64:3c:06:87:5b:19:73:e6:d0:e3:cf:43:b7:b0:20:
14:3d:20:0b:df:d6:99:99:56:ca:71:94:92:82:68:
dd:40:2b:8e:24:9c:38:5e:be:cc:d0:d1:5f:93:af:
ba:cf:f4:04:23:c7:df:1d:05:42:cf:b6:17:42:3f:
c2:0b:fa:7e:2b:86:cf:dd:d7:8e:67:55:56:d1:0d:
a3:a2:95:eb:0a:3a:b3:96:ee:78:19:6d:36:68:20:
0d:05:7f:dc:a2:f6:c0:76:bf:61:56:83:41:53:04:
d7:54:c6:d7:6e:db:e4:c6:67:a7:23:19:ce:32:bc:
23:53:30:a8:ce:ba:ca:64:4a:09:93:e6:3e:01:6a:
34:64:ee:46:74:e2:28:a7:31:d7:fb:69:c8:63:32:
b4:d1:12:8c:42:f9:f3:2b:07:80:b1:f8:34:7e:23:
db:03:5e:89:0e:1f:7b:53:2c:c8:ec:9d:32:f2:23:
b1:fd:50:3a:7d:f2:aa:f6:5a:4d:04:7d:e0:c8:04:
d1:d4:00:40:3e:e8:6b:cb:3d:e3:5a:b9:67:64:b1:
43:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:29:3C:A5:A3:4B:FA:CB:17:D4:16:F9:CB:3E:A0:BC:5B:F8:BD:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3922EB6844A011F1984876A5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.98.0/24
154.91.139.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:23:a6:50:5a:93:0a:5e:02:b4:64:82:b9:e0:93:e3:bc:f4:
2b:aa:9d:c9:1f:9c:cd:f8:1c:ce:81:1c:a4:18:33:da:48:18:
86:98:87:58:ac:b7:93:7a:d4:40:85:aa:4b:03:05:06:99:60:
e1:d8:e1:4d:49:7d:82:a3:96:52:2d:ea:e9:7b:d7:9e:e2:a9:
44:bc:e0:68:83:a3:6c:ef:a3:c3:9b:ed:00:d4:2d:8f:26:33:
58:0d:24:cf:50:cd:96:38:e4:c7:b5:7c:f0:0f:fe:06:eb:54:
33:ce:1f:2b:1a:db:c0:45:c9:72:cf:8c:2c:b5:59:1c:63:c9:
d5:12:1d:17:56:9c:05:f5:ee:43:ff:70:28:af:b4:11:91:67:
a2:6c:81:02:b8:f2:d5:cf:df:a3:38:9c:72:12:b2:94:9e:c2:
99:73:ea:0f:39:1c:ca:8f:ce:ed:a1:d1:e8:86:0d:9b:19:f9:
bf:59:fa:45:fe:80:91:c2:ce:23:4f:e8:9e:ce:f6:a3:ac:be:
a6:7f:f2:dd:98:37:1a:d2:24:af:cb:2d:0d:b0:f1:a0:ba:51:
e7:12:ee:b2:86:e9:62:0c:58:20:a8:8a:0b:5b:10:06:6c:df:
8a:1e:04:58:2c:fb:61:06:5f:b3:ad:67:b4:2b:8a:31:fa:09:
6b:31:e3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:07 2026 by rpki-client