Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B95D946697111F1B3E9250FCF1D38B0.roa
File: 3B95D946697111F1B3E9250FCF1D38B0.roa (raw, json)
Hash identifier: rlB3XMmGcQMaubMiv5SD33DCK75Br18L2UOKaoqJ6fo=
Subject key identifier: ED:8C:93:65:93:12:90:F3:54:A6:FB:5B:0F:B9:01:53:29:F1:6A:BA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D32E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B95D946697111F1B3E9250FCF1D38B0.roa
Signing time: Tue 16 Jun 2026 10:50:48 +0000
ROA not before: Tue 16 Jun 2026 10:50:43 +0000
ROA not after: Thu 16 Jul 2026 10:50:43 +0000
asID: 401696
IP address blocks: 154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119598 (0x1d32e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 10:50:43 2026 GMT
Not After : Jul 16 10:50:43 2026 GMT
Subject: CN=6a312a88-182e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6f:ca:d0:67:b2:5a:32:26:41:1d:f1:a3:7c:
30:69:97:f0:42:ee:10:3c:12:76:ae:3c:aa:da:94:
cf:7a:39:be:a8:3f:cd:97:e4:32:61:26:0c:b5:47:
a3:35:07:8e:40:29:63:02:9d:35:7f:e2:37:de:91:
e2:33:ec:a9:49:9a:5c:48:be:7a:a0:6d:3a:4f:18:
03:8f:d4:47:c1:05:8d:c8:94:f5:c5:e3:3e:e1:72:
f3:aa:e5:06:8a:86:cc:90:62:35:95:a4:9f:1e:3a:
d6:de:1d:e8:6b:6c:d2:55:12:86:cb:9e:bd:b4:64:
ae:89:81:93:1b:90:58:2f:d4:fc:b6:a8:ca:66:92:
18:80:05:b2:52:02:33:19:e4:aa:ca:4e:10:7b:8f:
40:ba:b4:05:dc:e4:9d:f6:88:d0:de:9e:dc:64:16:
4b:11:35:d9:b2:6d:08:dd:6e:f3:9e:b8:cf:8e:02:
26:53:cc:e2:de:ca:6b:5c:ed:e9:aa:a5:00:c7:48:
62:e9:c5:d8:af:10:79:2e:fd:e3:1f:40:fe:f4:0b:
ae:ab:3c:04:3b:16:42:15:71:4d:2b:20:3d:14:5c:
cf:bd:56:aa:86:84:33:6f:de:09:ac:94:84:bc:f2:
b6:83:02:3f:d0:5c:68:c6:2d:92:22:84:85:df:95:
ed:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8C:93:65:93:12:90:F3:54:A6:FB:5B:0F:B9:01:53:29:F1:6A:BA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B95D946697111F1B3E9250FCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
3b:ea:85:13:b1:c7:2b:3e:19:38:5b:cb:c8:e7:8d:54:f5:4d:
70:94:71:a4:d9:0f:fa:93:56:34:98:4d:d2:b6:2e:e9:40:ce:
e8:6b:f1:ad:5a:63:35:ad:a7:92:78:dd:04:ca:d3:5d:b5:fa:
dc:95:78:13:7b:14:78:c3:fe:d8:11:a6:57:f4:a4:49:23:d0:
66:e2:78:1d:14:ec:9a:e5:64:74:a1:9b:8d:f8:9f:e6:50:c0:
86:3e:16:f3:1d:02:3f:50:d0:37:ef:67:70:d4:55:68:d7:37:
03:fd:aa:87:17:fa:27:40:e0:34:de:87:de:63:72:20:93:c5:
fc:f9:79:61:0b:15:98:27:2c:57:b6:ea:96:74:de:7f:0d:dd:
02:60:f3:ae:af:83:f6:96:53:3d:d1:5f:9c:e0:95:7d:7c:90:
53:26:21:32:81:ff:50:1d:5b:0f:bf:e8:ed:29:ce:69:3c:58:
4e:4c:20:cf:de:2d:0c:23:00:16:34:8a:5f:95:0a:b3:d6:8b:
62:01:de:db:7b:25:6b:9c:22:f5:b2:7b:83:0e:2e:e7:29:ce:
37:87:78:9d:b6:7a:b1:f5:0a:c6:9a:d5:a9:bd:7c:d6:a1:cd:
1d:a4:b6:33:d7:6e:d6:37:10:06:9a:5a:66:81:4e:2c:2e:90:
36:b6:5c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:31 2026 by rpki-client