Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BDA711872E611F1AF690ED1CE1D38B0.roa
File: 3BDA711872E611F1AF690ED1CE1D38B0.roa (raw, json)
Hash identifier: RGtjEBw/pxX1UDGVNC0qkpTIRA4DJ7ROe6yL7D+E+bU=
Subject key identifier: E0:66:F3:20:76:81:A2:4B:46:38:F5:E2:66:F8:24:2B:15:3F:BC:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D5BF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BDA711872E611F1AF690ED1CE1D38B0.roa
Signing time: Sun 28 Jun 2026 11:41:00 +0000
ROA not before: Sun 28 Jun 2026 11:40:55 +0000
ROA not after: Thu 30 Jul 2026 11:40:55 +0000
asID: 61461
IP address blocks: 154.216.192.0/18 maxlen: 24
154.218.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120255 (0x1d5bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 28 11:40:55 2026 GMT
Not After : Jul 30 11:40:55 2026 GMT
Subject: CN=6a41084c-6a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f7:19:91:4a:64:66:31:23:35:53:78:03:c6:
27:64:e1:0d:98:6c:27:c7:dd:b8:a9:0b:87:4d:a6:
81:57:39:a7:8d:80:98:44:2f:58:c7:75:83:dd:77:
ab:84:9d:f2:95:8b:76:f9:c6:fa:c8:0b:74:00:68:
8a:03:cf:d4:b1:d4:3f:0e:0b:26:c3:19:fe:c4:e5:
42:66:81:7c:f9:1e:f0:3a:e3:65:85:aa:ef:3b:49:
5f:87:a9:0a:f4:33:c9:1f:40:fa:7d:92:43:e6:e9:
09:07:e6:67:fb:71:fd:f6:bf:de:22:14:b9:d0:79:
c8:16:5f:a7:ff:56:56:e0:cf:8f:8b:d0:f8:91:d1:
19:99:88:31:33:3a:0d:6e:6e:80:21:a0:aa:e5:2d:
e6:a0:f5:46:5f:09:2e:a0:b2:e6:f0:d1:b3:cc:e7:
30:72:b0:e4:e5:db:13:7e:54:24:3a:c3:7d:ac:d7:
b7:2c:34:e1:e7:46:3a:04:2b:ac:82:ca:ca:f8:34:
0b:9c:4e:41:9b:13:e1:df:4a:44:d9:d1:c6:bc:e9:
10:bf:4d:2d:b4:fe:86:98:7f:8b:40:8e:ae:2a:d9:
98:17:05:8b:17:eb:90:eb:32:01:fd:61:eb:77:9f:
d4:b7:bc:1f:62:a2:a0:4a:bb:4f:ed:83:50:c4:a3:
d4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:66:F3:20:76:81:A2:4B:46:38:F5:E2:66:F8:24:2B:15:3F:BC:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BDA711872E611F1AF690ED1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.192.0/18
154.218.192.0/18
Signature Algorithm: sha256WithRSAEncryption
c4:5e:cd:ca:6f:13:ed:21:04:3f:0e:22:d4:85:f6:f1:05:48:
7d:38:0e:d1:cb:24:7d:92:18:b8:3e:93:b9:29:c7:8d:22:f6:
27:aa:5b:8d:b8:8a:ae:24:a8:7f:ad:8d:23:d5:0b:33:8e:1c:
c0:c4:10:d2:79:3c:01:c8:fe:47:89:7b:da:0a:cb:a9:69:a5:
9d:0f:25:da:c1:d7:8b:35:5a:c9:49:cf:55:dc:df:13:18:25:
b1:ed:cb:c9:d7:8d:b3:7d:4c:70:f7:9c:b3:32:10:1c:6f:70:
98:72:54:b6:72:a7:55:5b:82:9a:ca:ec:72:a6:a6:e5:5a:fc:
39:30:a1:74:12:90:44:59:2a:db:6a:1b:06:b2:af:6d:64:3d:
68:36:63:6a:0e:9e:62:68:54:d9:42:0e:91:67:4c:78:8d:a0:
df:a8:46:c5:4d:2c:28:80:96:c3:d2:32:10:d9:30:32:3d:0a:
72:22:31:92:43:73:b6:ef:1c:03:a4:96:e3:45:20:c7:99:76:
7a:13:bc:1b:53:60:e7:16:bc:fa:9f:50:38:0d:76:92:01:19:
91:4d:34:12:ba:d2:61:fd:a3:4d:b6:6e:42:07:91:cb:ec:8f:
1d:25:8c:b1:02:47:b0:b4:89:35:92:83:0c:98:97:06:3e:a9:
15:67:e6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:27 2026 by rpki-client