Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CB34694457A11F1968041D1CE1D38B0.roa
File: 3CB34694457A11F1968041D1CE1D38B0.roa (raw, json)
Hash identifier: KOWSmXyrISaNNyVFJAQ+SXogs0kjMHnXZvRXrHq79RE=
Subject key identifier: 63:20:14:1E:6E:CA:15:4E:95:4C:11:AB:B8:5E:E9:E2:31:08:D7:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C8B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CB34694457A11F1968041D1CE1D38B0.roa
Signing time: Fri 01 May 2026 16:24:33 +0000
ROA not before: Fri 01 May 2026 16:24:29 +0000
ROA not after: Tue 09 Jun 2026 16:24:29 +0000
asID: 44559
IP address blocks: 154.209.140.0/24 maxlen: 24
154.219.73.0/24 maxlen: 24
154.219.74.0/24 maxlen: 24
154.219.75.0/24 maxlen: 24
154.219.76.0/24 maxlen: 24
154.219.77.0/24 maxlen: 24
154.219.78.0/24 maxlen: 24
154.219.79.0/24 maxlen: 24
154.219.80.0/24 maxlen: 24
154.219.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116921 (0x1c8b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 16:24:29 2026 GMT
Not After : Jun 9 16:24:29 2026 GMT
Subject: CN=69f4d3c1-5d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d5:fd:50:46:72:8a:78:b9:d8:63:47:47:e4:
74:cf:72:f2:b5:bd:17:57:5f:3e:f6:67:3e:dd:6e:
88:0c:32:17:69:d6:1a:ae:5a:d4:9f:b2:44:87:76:
f9:9b:88:0f:48:23:14:2a:e5:4f:70:b9:f6:b3:9b:
a5:09:da:c1:85:3a:6a:71:96:cf:b7:fe:94:46:ed:
29:c3:f6:58:f0:3f:10:1e:a2:11:de:18:bf:7d:e4:
40:fc:61:1f:b0:e0:79:97:98:a6:72:96:44:1d:8d:
5f:d8:89:e9:10:0b:8e:ae:73:51:e4:12:10:af:73:
c7:9b:c1:e4:e9:62:6e:b4:b0:8f:e6:b6:88:ff:2e:
70:06:22:78:c3:25:3a:f5:2a:26:8e:bf:91:3f:5c:
9a:35:20:e5:91:fc:7a:8e:70:04:a1:99:9e:9b:6b:
eb:b4:f3:9e:45:34:18:6b:69:ac:53:e5:53:f6:61:
29:2a:7b:03:99:75:2e:d5:19:6c:64:e0:15:28:7e:
93:a1:1d:96:0b:75:a4:82:af:d3:43:c6:b2:db:74:
fd:6a:f3:2c:a1:68:17:37:97:a3:0f:79:b4:69:c9:
34:70:0e:e0:4a:fb:81:38:fc:22:1d:44:a8:09:84:
e8:16:11:45:9b:83:07:ee:eb:0d:a7:53:e9:4d:fd:
cc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:20:14:1E:6E:CA:15:4E:95:4C:11:AB:B8:5E:E9:E2:31:08:D7:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CB34694457A11F1968041D1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.140.0/24
154.219.73.0-154.219.81.255
Signature Algorithm: sha256WithRSAEncryption
33:9a:98:29:41:8f:8e:a1:bd:9c:fd:ca:76:20:66:e8:ee:af:
56:da:7b:1a:97:3e:6a:c1:5d:f4:f8:31:ed:0a:fc:d4:a4:94:
b4:66:2c:8c:f4:10:ed:16:8a:33:a0:59:19:bb:63:f7:4e:f6:
c5:97:14:b4:9e:48:2c:6f:28:eb:a8:85:26:71:9b:1c:3d:f0:
3a:f6:9e:54:6c:3f:97:18:6d:8d:0a:28:cd:59:06:f3:b4:2a:
d0:29:38:5f:54:1c:01:fd:d7:03:17:c3:51:a8:23:f8:06:86:
e5:d6:ba:4e:e7:5f:18:03:6e:95:8a:80:1f:e1:c3:ad:99:d8:
9d:e4:17:51:99:41:18:77:d0:e4:fd:9e:f7:cf:3f:a7:68:75:
eb:e6:60:70:d0:83:16:7a:58:09:a8:ff:a6:3a:05:3b:df:06:
30:5d:6a:62:50:30:ea:16:70:d7:bf:1b:af:d1:5c:3d:d2:5c:
b9:f3:1f:40:ed:7b:a9:fc:f4:e3:3a:15:0b:bc:22:56:a0:76:
ee:54:43:6b:71:36:ad:02:1e:bc:94:60:cf:66:10:9a:c3:f3:
ab:de:32:9b:3f:c6:8f:29:93:48:f4:b6:d4:d0:ea:91:5c:78:
f2:cc:bc:9f:40:5a:80:0c:9a:5e:22:b9:ed:78:41:80:e0:11:
b0:a1:ae:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:46 2026 by rpki-client