Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B74808A19FC11F184D032C8DAE4EC9C.roa
File: 3B74808A19FC11F184D032C8DAE4EC9C.roa (raw, json)
Hash identifier: 5ZnM8smUHJsDsZlbUC7NvFORREOCTYUWEzUhRaCYj4s=
Subject key identifier: E5:8E:F0:97:FD:C9:C0:90:88:00:A2:C9:D3:13:BC:08:7B:41:BF:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE32
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B74808A19FC11F184D032C8DAE4EC9C.roa
Signing time: Sat 07 Mar 2026 08:04:15 +0000
ROA not before: Sat 07 Mar 2026 08:04:10 +0000
ROA not after: Wed 08 Apr 2026 08:04:10 +0000
asID: 147176
IP address blocks: 154.197.116.0/24 maxlen: 24
154.197.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 13 Mar 2026 00:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114226 (0x1be32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 7 08:04:10 2026 GMT
Not After : Apr 8 08:04:10 2026 GMT
Subject: CN=69abdbff-ccd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a6:73:90:48:22:80:23:24:8a:36:c5:5e:4b:
78:de:94:a7:c2:5b:43:34:cf:50:0c:7d:d9:ef:c2:
6a:21:8b:d4:d9:8f:b2:2d:18:a2:87:33:80:e1:35:
10:de:06:c6:90:94:59:59:42:0d:fc:21:5d:cb:88:
2d:2e:98:93:14:8d:ba:50:43:0e:09:c6:b4:81:a5:
0b:7a:48:5c:39:89:c3:eb:31:1b:be:0b:c6:3d:53:
7b:5b:61:ce:49:b7:d6:40:57:81:d8:97:48:68:64:
6c:fd:19:82:76:bf:8a:2e:95:ac:3d:71:5e:a6:be:
e0:1c:5c:70:44:a8:81:54:1c:8e:9d:01:50:20:16:
57:59:f1:ca:96:e0:e0:23:83:e6:3d:63:1b:a3:26:
4f:c7:ec:42:9a:27:2c:d5:08:18:29:ee:86:09:f1:
45:1f:33:1d:3a:6e:75:49:b0:88:37:fd:de:7b:ce:
dd:52:3b:55:56:ac:f0:e0:7d:66:be:c9:9e:66:3a:
e6:6a:b7:ed:b6:2f:23:f8:a5:47:32:70:ce:92:17:
eb:23:2b:f1:00:e0:4f:3e:6c:12:5a:24:86:8c:14:
e9:1d:ba:0d:0a:b5:4d:70:80:e7:d0:1a:25:11:b0:
1e:22:18:a4:4d:34:96:af:97:57:66:6a:e7:9c:f1:
8c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8E:F0:97:FD:C9:C0:90:88:00:A2:C9:D3:13:BC:08:7B:41:BF:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B74808A19FC11F184D032C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.116.0/24
154.197.124.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:11:ed:c0:fd:c8:af:63:1f:26:6d:70:a8:0c:b3:aa:3d:90:
1d:c3:e3:6b:24:c9:c0:1f:12:4e:77:2f:fa:dc:7b:1a:6c:fe:
63:71:ed:d4:89:bc:c7:22:29:0e:21:15:6c:4a:b4:82:2d:bb:
66:1e:c0:93:4d:49:78:74:ea:cf:6b:97:6d:01:3c:0c:c8:fe:
f4:c6:2f:db:01:98:4e:52:7a:c8:6e:5d:89:3e:10:b4:a5:cb:
6b:5e:f5:bc:5f:f8:f2:84:d0:53:ba:22:c7:11:88:8f:f4:92:
58:59:09:8d:41:2c:13:c6:cc:85:a8:aa:24:54:5e:d6:07:24:
4c:f9:72:12:33:82:4a:4d:4c:66:d5:b7:dc:46:45:39:ea:be:
f3:f1:5a:93:3d:1e:c8:c7:98:6b:17:2a:ab:84:48:f9:ef:53:
4c:5b:b0:89:41:49:0b:b1:90:67:5c:9a:46:81:f4:72:b9:1a:
07:2e:89:c5:82:9e:22:6c:ca:3b:7d:99:ff:55:26:ab:69:bb:
95:3e:6e:89:fc:79:0b:a2:15:c0:d1:0d:a3:a0:92:d9:0f:f6:
c7:36:7f:de:93:69:a5:26:2b:d4:41:09:56:4d:39:6b:4f:af:
24:6e:38:1c:c6:6b:86:ac:91:10:a4:6f:46:09:71:41:e4:bc:
7c:34:96:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 14:21:22 2026 by rpki-client