Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/446F7DFC1AB511F1B8E141BBDAE4EC9C.roa
File: 446F7DFC1AB511F1B8E141BBDAE4EC9C.roa (raw, json)
Hash identifier: dZ/Z6OZcv5Sm7Wtrzs5BSAcCtoY2OwuD57oqsAX4jOM=
Subject key identifier: 13:59:3B:ED:B5:71:0C:A0:B2:F3:8B:D4:F4:C0:70:3E:88:33:77:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE4D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/446F7DFC1AB511F1B8E141BBDAE4EC9C.roa
Signing time: Sun 08 Mar 2026 06:08:47 +0000
ROA not before: Sun 08 Mar 2026 06:08:42 +0000
ROA not after: Thu 28 May 2026 06:08:42 +0000
asID: 40779
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114253 (0x1be4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 8 06:08:42 2026 GMT
Not After : May 28 06:08:42 2026 GMT
Subject: CN=69ad126f-c286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:45:47:00:85:38:ba:04:93:af:3d:a7:d9:41:
b0:c0:8f:40:03:a5:54:67:05:be:4a:db:98:47:ab:
8d:99:d1:3e:b2:e1:e3:28:f3:3f:8c:98:a7:52:9d:
f5:9f:b7:b2:ba:73:c3:4b:9d:60:a9:b2:6e:21:6b:
da:00:33:7a:f1:1d:ea:38:7b:8f:ad:dc:f3:87:2c:
08:6d:f3:a9:f3:1f:c1:ac:09:6e:35:d0:ba:9d:10:
94:4a:54:36:04:ea:59:4c:3f:5a:df:28:76:ba:68:
38:9f:de:fe:27:b3:dd:58:6b:47:fd:d6:28:5e:49:
ed:19:d2:4e:51:7c:bd:0b:65:17:08:f8:e6:3b:21:
01:d9:3a:8d:be:eb:bd:4e:49:14:75:36:d9:98:30:
83:f0:60:94:28:bf:10:e1:b6:a4:99:9d:45:53:40:
4c:12:4f:ba:ba:0d:c7:b5:94:dc:02:aa:24:90:3b:
80:ec:bb:c3:e8:d0:62:de:03:c3:a0:82:49:d9:40:
ad:4d:d3:98:9f:84:79:9a:af:f0:01:a3:3d:b0:29:
1f:40:ad:a1:7d:c9:e6:dc:3d:28:3a:6a:04:79:ec:
2d:3e:85:2e:20:30:f6:31:53:83:2d:d4:5e:6f:40:
c2:81:05:f1:00:88:da:1f:c3:22:a9:16:19:1a:b8:
d0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:59:3B:ED:B5:71:0C:A0:B2:F3:8B:D4:F4:C0:70:3E:88:33:77:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/446F7DFC1AB511F1B8E141BBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
67:00:d3:65:44:2c:bb:d6:c9:3f:8d:d3:63:97:91:e8:8e:86:
4c:77:9e:95:51:74:3f:bf:1d:f3:f4:80:16:71:90:8b:e5:1e:
5b:f1:c2:4b:62:3f:19:03:0d:b0:39:82:6c:52:d0:ce:36:a2:
d4:21:28:b0:9b:bc:a5:69:38:2a:e6:e2:a0:b0:74:e4:32:e2:
0c:2c:55:18:54:8a:e8:e9:5e:bb:b5:f8:a2:02:9b:70:53:f9:
10:66:f8:89:65:37:ee:fa:35:71:e1:24:a4:06:38:0b:da:a6:
2c:f6:43:9b:c3:54:55:61:cc:f8:7e:69:e0:d0:81:f3:9d:df:
85:82:48:3d:5b:60:47:0c:45:7f:60:0e:6e:cf:ad:35:bc:96:
73:12:39:f6:71:40:e1:34:5c:36:c0:67:a5:03:b6:2a:a9:5e:
dd:24:27:6b:25:3c:cb:a1:24:11:c9:36:93:b8:8a:3f:59:e3:
54:b9:58:5f:62:42:7e:9f:90:ee:be:a0:1f:48:a0:b2:2d:c1:
65:e7:d8:49:0e:82:5f:76:4c:b7:32:b8:50:67:e8:04:6e:1e:
51:40:3c:43:15:65:f9:c4:13:8f:d1:4d:aa:6b:ad:58:67:65:
76:08:57:d3:31:85:df:65:f9:61:f8:f3:2a:4b:2e:53:0f:d9:
fc:c7:8d:89
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAb5NMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzA4MDYwODQyWhcNMjYwNTI4MDYwODQyWjAYMRYw
FAYDVQQDEw02OWFkMTI2Zi1jMjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9UVHAIU4ugSTrz2n2UGwwI9AA6VUZwW+StuYR6uNmdE+suHjKPM/jJin
Up31n7eyunPDS51gqbJuIWvaADN68R3qOHuPrdzzhywIbfOp8x/BrAluNdC6nRCU
SlQ2BOpZTD9a3yh2umg4n97+J7PdWGtH/dYoXkntGdJOUXy9C2UXCPjmOyEB2TqN
vuu9TkkUdTbZmDCD8GCUKL8Q4bakmZ1FU0BMEk+6ug3HtZTcAqokkDuA7LvD6NBi
3gPDoIJJ2UCtTdOYn4R5mq/wAaM9sCkfQK2hfcnm3D0oOmoEeewtPoUuIDD2MVOD
LdReb0DCgQXxAIjaH8MiqRYZGrjQvwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBNZ
O+21cQygsvOL1PTAcD6IM3feMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NDZGN0RGQzFBQjUxMUYxQjhFMTQxQkJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmttgMA0GCSqGSIb3DQEB
CwUAA4IBAQBnANNlRCy71sk/jdNjl5HojoZMd56VUXQ/vx3z9IAWcZCL5R5b8cJL
Yj8ZAw2wOYJsUtDONqLUISiwm7ylaTgq5uKgsHTkMuIMLFUYVIro6V67tfiiAptw
U/kQZviJZTfu+jVx4SSkBjgL2qYs9kObw1RVYcz4fmng0IHznd+Fgkg9W2BHDEV/
YA5uz601vJZzEjn2cUDhNFw2wGelA7YqqV7dJCdrJTzLoSQRyTaTuIo/WeNUuVhf
YkJ+n5DuvqAfSKCyLcFl59hJDoJfdky3MrhQZ+gEbh5RQDxDFWX5xBOP0U2qa61Y
Z2V2CFfTMYXfZflh+PMqSy5TD9n8x42J
-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:35 2026 by rpki-client