Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C8B37FE1FA211F18B65ADBEDAE4EC9C.roa
File: 5C8B37FE1FA211F18B65ADBEDAE4EC9C.roa (raw, json)
Hash identifier: QGJ3niV5rlqATdjqsevc5Sc5cLhjLsmf7VQ58P4yIoM=
Subject key identifier: 84:EF:31:D3:F0:CB:68:FD:2A:CD:E4:A8:3F:72:EC:5D:3D:2B:39:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF6E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C8B37FE1FA211F18B65ADBEDAE4EC9C.roa
Signing time: Sat 14 Mar 2026 12:36:03 +0000
ROA not before: Sat 14 Mar 2026 12:35:58 +0000
ROA not after: Sat 25 Apr 2026 12:35:58 +0000
asID: 20326
IP address blocks: 154.193.132.0/24 maxlen: 24
154.193.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114542 (0x1bf6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 14 12:35:58 2026 GMT
Not After : Apr 25 12:35:58 2026 GMT
Subject: CN=69b55633-c7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8a:be:a0:83:b2:27:d1:78:ba:24:6d:63:db:
4a:6e:13:94:a8:c3:2b:82:85:45:b5:25:68:0c:db:
63:5d:0e:20:4f:2d:23:45:70:d7:2c:f5:85:d7:cd:
c7:3e:38:62:0f:9b:77:29:02:d4:dc:1d:1d:63:f3:
29:a2:18:a3:0c:d7:24:70:9d:66:09:ed:7a:8d:8b:
f6:57:06:54:a1:bc:9f:bc:56:87:ae:f6:7a:ad:54:
c2:6f:df:ab:74:ea:1b:98:13:aa:e4:83:90:8c:c2:
99:c5:6f:60:cf:38:07:e9:9d:a7:9e:0d:02:c0:ed:
4d:f8:56:65:e1:ae:46:42:9f:53:6b:50:28:e7:96:
83:bd:87:a9:61:be:ef:67:a6:7e:30:51:63:da:85:
8e:96:27:83:80:08:af:c7:f2:b7:b2:a1:3a:56:62:
71:cf:64:73:90:f7:02:31:a2:d1:a8:e9:5e:b5:9b:
b5:6f:9e:f9:19:0e:8c:a7:b5:91:40:f0:ef:2b:0e:
30:43:26:7c:9b:87:fd:13:95:87:3f:26:95:eb:72:
02:87:e5:3c:2d:9a:64:69:27:6d:10:73:b2:96:56:
cb:f3:4c:3b:a4:ae:bd:6e:1f:28:8c:d7:a9:74:06:
4e:fa:13:95:dc:0b:35:1a:ad:e6:b6:94:03:af:c9:
0a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EF:31:D3:F0:CB:68:FD:2A:CD:E4:A8:3F:72:EC:5D:3D:2B:39:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C8B37FE1FA211F18B65ADBEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.132.0/24
154.193.164.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:83:5f:ee:0d:13:c4:0f:c3:db:4f:75:a4:4c:6c:ef:7c:0e:
3f:59:ed:0d:9f:b2:70:18:0c:61:2a:5f:0e:b1:e5:4b:0b:ab:
c2:71:95:5f:fa:fb:13:96:2e:e2:72:de:f1:2a:b8:69:31:4c:
59:91:c8:0b:e7:b6:fb:13:2d:42:1f:e1:e9:b4:47:ff:3d:c4:
66:aa:fd:47:84:bf:71:aa:da:51:c0:e3:c0:cc:7e:5d:f5:d2:
06:9a:fb:50:e9:39:96:0d:fd:24:3d:0f:da:c8:41:95:ef:63:
8d:41:b8:38:ac:38:83:29:67:84:a8:dc:48:ba:4d:c0:31:9b:
2e:c9:cf:45:11:1d:96:3d:f5:f7:fe:4a:9d:9a:98:64:e8:65:
d7:f4:49:b9:55:69:ae:35:a9:48:51:6b:2c:86:a4:fc:e3:61:
3b:18:22:e7:01:9e:dd:9f:8f:d9:03:dd:82:9d:11:79:79:41:
71:51:6b:05:e0:2a:68:6e:c7:3e:b3:54:76:95:bc:ff:22:d5:
56:48:5c:fd:5b:a7:3d:73:d4:7d:a4:86:90:33:a7:d2:20:c0:
e7:60:62:99:2d:b5:d0:1d:eb:c8:ca:69:eb:17:c8:1a:43:14:
c1:02:00:4c:41:37:11:12:13:62:32:4a:38:ac:c1:e7:fa:63:
ad:b4:72:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:20:34 2026 by rpki-client