Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57121AF81EB811F18E59EDECDAE4EC9C.roa
File: 57121AF81EB811F18E59EDECDAE4EC9C.roa (raw, json)
Hash identifier: jsUYw5hpjUYHGhUT2Om1OfQf9CsggH3/rhC4nYSP+6k=
Subject key identifier: 51:70:70:DD:03:0C:93:9A:86:DE:DE:85:2D:2B:0E:BC:61:A7:62:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF51
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57121AF81EB811F18E59EDECDAE4EC9C.roa
Signing time: Fri 13 Mar 2026 08:40:51 +0000
ROA not before: Fri 13 Mar 2026 08:40:46 +0000
ROA not after: Wed 29 Apr 2026 08:40:46 +0000
asID: 395793
IP address blocks: 154.83.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114513 (0x1bf51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 13 08:40:46 2026 GMT
Not After : Apr 29 08:40:46 2026 GMT
Subject: CN=69b3cd93-a933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7e:95:e0:4a:2f:1a:4b:d8:0f:d9:1f:1e:73:
51:32:70:51:e8:90:54:59:0b:63:e6:3b:5e:10:62:
92:33:69:3a:db:5f:4c:e4:bf:6c:4a:0c:2d:a8:6e:
05:bd:56:c6:79:7a:53:d6:ca:63:03:0c:59:53:fc:
e3:78:61:51:5e:5b:b8:96:40:31:7f:c5:48:2a:54:
13:a6:d3:8e:e0:3d:c8:32:91:04:81:38:b2:bf:04:
8c:a1:8a:aa:ea:31:f7:19:86:3e:98:9f:dc:68:d6:
b9:14:d2:ec:70:1f:26:23:b1:df:db:90:54:12:0f:
47:c0:b2:8a:41:e9:df:29:6b:bc:27:df:0a:0f:39:
f6:d4:16:ab:e2:5f:fe:05:c1:85:33:95:2c:a0:44:
87:b1:12:ce:59:32:79:0d:b0:7e:da:f2:18:50:3d:
99:e9:b0:81:fa:0e:61:f3:0a:ae:29:c3:a9:d9:f2:
59:59:61:dd:52:e6:d1:23:ff:a5:0b:4c:44:7d:08:
a8:ed:5f:3c:04:d7:8a:52:c8:13:ec:b7:c8:3c:ce:
30:1e:33:39:5b:b5:09:cb:bb:1a:04:d5:18:76:bd:
5c:d5:6a:64:92:43:08:03:85:de:80:10:55:8a:07:
81:a3:82:0c:52:96:a2:f8:3d:63:cd:8a:68:c5:59:
b0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:70:70:DD:03:0C:93:9A:86:DE:DE:85:2D:2B:0E:BC:61:A7:62:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57121AF81EB811F18E59EDECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.104.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:cf:f0:ec:94:1e:aa:2f:7e:0a:c0:8c:ab:bf:76:db:9b:39:
b9:03:ee:75:64:1c:f6:8d:c7:18:37:bf:c2:a7:c1:13:e4:17:
67:4e:e8:cd:e0:a2:ae:32:7d:0c:7f:cd:ae:4c:f6:36:5b:6e:
08:cb:69:a6:78:53:5a:64:50:20:99:e2:19:e2:98:80:d6:dd:
7b:aa:62:e3:63:a1:bf:0b:c1:fb:83:c4:03:9d:a7:78:4d:bc:
78:61:ae:47:32:9d:32:76:cf:72:70:6e:9d:fa:52:d4:d1:8c:
50:33:4a:3a:09:1b:80:b4:ab:a3:4f:18:36:77:a1:2d:bb:2f:
e2:4a:97:0d:e1:3b:bd:17:6b:b3:92:1c:77:47:d8:a0:14:7c:
7b:f4:fd:b9:a0:f6:f7:90:0c:f0:e1:39:14:59:db:7f:58:1a:
fe:c9:65:6c:c4:96:65:8d:32:74:52:78:89:0a:d4:14:9a:7b:
ee:94:88:92:5c:97:b3:54:ef:47:90:e0:2a:bf:4e:8c:81:db:
cd:2c:a8:a2:0f:82:67:2e:b1:44:33:95:5f:fa:70:8a:6b:db:
00:03:e3:26:1b:44:e5:aa:77:01:e7:3a:47:19:f7:85:ad:c2:
79:8f:7b:c9:4e:2f:7a:34:e8:f7:46:d1:61:63:f1:8f:71:4b:
78:5b:db:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:20 2026 by rpki-client