Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CBEF5CC229611F1B67FBB7CDAE4EC9C.roa
File: 3CBEF5CC229611F1B67FBB7CDAE4EC9C.roa (raw, json)
Hash identifier: s7w3l9JwDlK4hR8yHNBz9ApDVqs7e8mawK9dFifz4gk=
Subject key identifier: 19:11:0B:9F:BC:7F:C0:9C:D4:CD:D3:DE:56:FC:40:3A:E8:08:DB:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BFA8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CBEF5CC229611F1B67FBB7CDAE4EC9C.roa
Signing time: Wed 18 Mar 2026 06:46:49 +0000
ROA not before: Wed 18 Mar 2026 06:46:44 +0000
ROA not after: Fri 24 Apr 2026 06:46:44 +0000
asID: 200758
IP address blocks: 154.83.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114600 (0x1bfa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 18 06:46:44 2026 GMT
Not After : Apr 24 06:46:44 2026 GMT
Subject: CN=69ba4a59-21d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:22:f9:10:f4:cf:f4:5c:13:b5:8b:8f:13:22:
76:4c:f0:4c:06:e4:41:b0:86:57:0b:e4:49:b8:dc:
01:57:f4:92:86:57:34:7e:d2:68:a7:a2:fa:cc:f8:
ef:c9:e8:58:e1:c5:94:80:35:1c:9f:df:13:b0:16:
49:c8:b2:03:70:23:78:57:77:e5:63:dd:9a:01:b2:
17:0c:ba:b1:54:53:a3:73:e4:fa:63:da:fe:4b:bd:
d4:22:89:67:bf:dd:b3:77:e7:e9:e3:d2:1e:cb:0d:
36:5f:f2:74:2b:71:11:62:98:89:98:cc:c4:41:06:
e6:ba:99:9c:a8:b6:89:bb:fb:11:74:d7:e2:49:68:
f6:5a:c1:b5:3e:f4:d0:71:d8:7a:fc:9a:c6:aa:38:
fd:9a:67:d7:24:a8:34:3f:7c:0a:eb:c4:07:d0:75:
d9:01:f6:61:e0:55:0f:8f:c7:4d:61:8b:ae:ce:eb:
a2:7e:31:6b:89:cc:20:cc:99:47:39:f6:d3:e6:04:
65:72:b2:34:f9:57:e3:82:28:dc:55:d8:cf:2e:80:
4a:4a:fe:5a:42:44:c1:1a:9b:0c:be:81:f2:ed:a1:
8c:68:ca:89:7f:b0:ad:28:02:1a:25:74:39:cc:db:
de:44:ca:3d:39:73:a1:2b:b3:d5:25:ed:2e:85:36:
db:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:11:0B:9F:BC:7F:C0:9C:D4:CD:D3:DE:56:FC:40:3A:E8:08:DB:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CBEF5CC229611F1B67FBB7CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.186.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:3c:0b:c0:67:21:2b:a5:1f:95:9a:dc:b8:a1:4b:24:06:fb:
e4:e2:bb:0b:a1:47:9f:5f:36:a7:73:e7:5e:74:a3:88:64:f3:
08:29:7c:34:95:cc:83:c7:b2:9f:7e:ff:82:6a:f9:0e:43:ea:
a4:52:39:b4:a2:af:1c:0e:b1:b2:cc:65:ee:50:9b:7b:ab:0d:
dd:5b:03:e5:4d:e5:5e:d7:bc:38:90:f6:d7:d3:88:79:70:d3:
f9:05:43:38:3b:5d:8e:13:03:c1:18:89:d6:a7:7f:cc:3d:50:
e3:5c:8f:8f:3a:d2:a3:36:ab:ea:02:2e:45:bd:b9:42:21:3b:
09:5b:34:66:86:2e:64:2e:45:b3:90:be:3b:2e:bd:9a:c3:ae:
06:4b:96:a7:81:f9:f6:42:7d:6a:60:ef:50:c0:92:76:8b:cf:
d6:fd:eb:3d:ee:a9:a8:1d:4b:42:80:f4:5a:a2:8c:35:09:52:
f8:a4:65:da:11:48:79:01:e8:76:7a:f3:c4:66:69:01:a1:19:
a5:c5:a0:e9:1d:36:c5:c7:c6:08:eb:93:0a:65:38:00:ab:91:
2a:bb:b7:bc:fe:e9:3b:7f:d4:1f:25:c9:b0:30:94:34:13:f8:
1d:ef:ab:40:ce:d5:f6:c9:82:03:b1:f0:67:d6:20:37:be:13:
4e:d3:02:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:33 2026 by rpki-client