Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49B21966237811F1939569A0DAE4EC9C.roa
File: 49B21966237811F1939569A0DAE4EC9C.roa (raw, json)
Hash identifier: A4cIwIzt2h3Nj1yxYYAoHSmdSR0IQkoQrHDeItu2HqU=
Subject key identifier: 7C:B4:16:B4:B8:98:99:6D:F0:FA:C2:AA:2E:E4:6D:FC:B1:60:74:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BFD1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49B21966237811F1939569A0DAE4EC9C.roa
Signing time: Thu 19 Mar 2026 09:44:57 +0000
ROA not before: Thu 19 Mar 2026 09:44:52 +0000
ROA not after: Fri 24 Apr 2026 09:44:52 +0000
asID: 18013
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114641 (0x1bfd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 19 09:44:52 2026 GMT
Not After : Apr 24 09:44:52 2026 GMT
Subject: CN=69bbc599-5ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:85:34:93:76:f6:0f:84:1e:82:a7:66:3d:fd:
fe:1a:44:17:c5:26:72:e6:5c:4b:e0:4b:c0:11:71:
d8:14:d9:11:ac:b4:0f:47:eb:52:20:a6:6d:38:c4:
29:5a:16:36:98:9b:69:d1:a8:3a:52:ad:07:23:6d:
06:93:47:0d:b9:35:42:16:bb:3a:1a:94:99:9e:2f:
4f:de:c3:5d:78:f9:27:04:c5:ee:4e:80:d6:28:6e:
ea:16:3e:29:ca:dc:e3:f9:bf:db:cf:e4:bb:3f:92:
d7:25:f2:79:fb:e1:18:89:86:6f:b8:49:37:e6:6f:
21:05:a2:78:db:f1:9a:ea:f9:4e:e5:10:33:fb:46:
57:3e:9c:50:ea:a7:af:c3:fe:65:52:fd:df:a9:a3:
40:43:a1:96:f5:fe:18:f4:7b:a9:2a:dc:71:80:98:
a3:59:71:60:92:9c:96:0e:e7:1d:ae:95:1d:f3:7b:
34:0f:a8:12:05:dc:79:7a:fd:d5:6b:06:0d:2d:8e:
30:df:86:9b:10:20:e9:23:ec:52:59:77:ba:b3:64:
bd:99:ec:b8:01:bc:8f:5b:8e:93:4e:0a:39:81:b6:
a6:a3:6d:e6:ce:65:90:ae:48:84:c5:b2:5a:9d:a7:
cc:91:6e:cb:fe:83:fe:b0:88:2a:4b:57:6c:33:eb:
8a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B4:16:B4:B8:98:99:6D:F0:FA:C2:AA:2E:E4:6D:FC:B1:60:74:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49B21966237811F1939569A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.191.255
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:4b:1c:eb:50:36:67:b8:f5:11:2f:16:2f:1c:f8:b0:84:b3:
9d:ea:85:a7:b2:71:0b:20:65:bf:78:5a:99:58:71:3f:23:22:
06:1b:00:97:5e:63:49:61:ba:03:2a:fc:ea:64:3c:df:b4:0a:
55:37:c9:0b:75:8a:0d:05:6b:1c:10:77:ab:67:b4:da:d7:9c:
f4:1c:d1:4f:9b:ee:db:99:5f:f2:1e:41:89:bf:af:0f:43:5f:
1c:2b:ae:c8:95:61:c1:3d:83:31:ac:c2:63:cf:62:62:6c:61:
37:25:7e:96:25:ca:57:f9:e4:dc:89:bd:4b:74:08:8d:83:3b:
b4:34:b9:cd:63:4b:a7:52:c3:ce:1a:6c:b8:6d:6a:0a:b1:41:
04:81:e5:8b:a1:64:08:87:99:ba:c5:ef:12:4d:23:37:49:a9:
02:44:c6:d7:6a:52:25:73:50:79:03:ec:d8:28:77:23:82:6b:
76:d0:7f:3e:85:2e:a3:dc:23:d1:bf:c0:f8:97:69:9b:81:aa:
5a:64:92:e7:07:f9:fb:b5:f0:e9:8c:cc:34:81:84:8a:3c:b3:
dc:03:6a:5d:83:65:06:47:26:31:f5:8b:ca:36:c9:94:8f:b0:
13:b9:26:87:60:54:c4:77:88:85:8a:d7:b9:ac:6e:2e:8b:6f:
7a:01:2a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 17:17:32 2026 by rpki-client