Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61FD68E2205111F197B073BEDAE4EC9C.roa
File: 61FD68E2205111F197B073BEDAE4EC9C.roa (raw, json)
Hash identifier: sw1i7lIqZu2ERimBYI3zeJCpJD5drsqKmDN+2lLRwcg=
Subject key identifier: 9B:88:89:4A:62:53:0E:E8:E1:A8:52:6C:3B:C9:86:A7:65:C7:B9:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF75
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61FD68E2205111F197B073BEDAE4EC9C.roa
Signing time: Sun 15 Mar 2026 09:28:53 +0000
ROA not before: Sun 15 Mar 2026 09:28:49 +0000
ROA not after: Sat 25 Apr 2026 09:28:49 +0000
asID: 174
IP address blocks: 154.214.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114549 (0x1bf75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 15 09:28:49 2026 GMT
Not After : Apr 25 09:28:49 2026 GMT
Subject: CN=69b67bd5-0d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:70:64:cb:d2:8a:43:9b:b3:3a:cd:37:93:ab:
52:08:22:96:75:00:27:ae:b7:04:91:c9:70:a0:d5:
ef:d5:f5:47:08:7c:fc:0c:f1:b2:06:06:62:26:7c:
b1:37:7c:e9:2c:e8:83:ec:06:35:99:e3:bc:fa:a0:
eb:86:37:f2:79:9f:70:a7:d6:54:a3:11:5f:7c:ba:
dd:ea:19:b2:fa:17:7e:c7:dd:3c:f9:a9:85:fc:40:
f6:c1:06:c7:a9:b7:d2:d7:bd:e9:3d:82:21:a5:7d:
ed:03:bf:a3:bc:a4:44:4d:d1:0c:d8:c6:a0:3b:98:
e7:9a:58:21:bc:8c:82:10:46:1c:a7:3a:e4:e6:65:
1c:2f:a9:d9:25:46:05:52:6e:ae:ce:cd:0f:c3:26:
e1:64:e2:86:eb:9e:e7:76:90:2e:58:0a:8d:fc:0e:
96:09:8d:fb:25:a3:0c:b3:be:09:ea:19:58:7f:57:
18:23:71:53:e3:fa:9c:23:bb:55:e5:60:dd:55:8d:
88:13:f1:4a:46:f1:65:04:a2:1f:32:d7:dc:95:86:
57:2a:6b:a8:ca:8b:8e:9a:43:35:b4:34:fa:e1:e8:
83:d7:20:e0:17:df:66:72:f1:be:06:69:c5:86:f4:
0d:cd:a4:9e:a4:5a:71:a6:0d:38:fe:f4:62:35:2f:
4d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:88:89:4A:62:53:0E:E8:E1:A8:52:6C:3B:C9:86:A7:65:C7:B9:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61FD68E2205111F197B073BEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.0.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:11:77:14:6e:13:96:00:62:23:b4:0f:27:8d:1f:a3:0d:26:
64:bd:22:e1:5a:84:d2:bb:5c:48:1f:85:1b:d4:d1:4b:20:f0:
e7:b6:0c:c6:3e:2b:0d:7a:81:9c:7f:eb:b8:19:32:af:f6:1d:
7f:5c:51:f9:72:e0:42:4a:0a:7e:2b:78:8d:82:2a:5f:f3:a7:
7f:f9:f1:ef:99:61:0d:09:41:ab:7e:bb:d2:d9:0c:12:24:de:
54:93:be:b5:83:d2:a8:25:cf:f8:a7:38:8e:91:90:75:42:8a:
97:61:b7:9d:b2:d6:0e:5a:5e:61:1b:15:52:40:0c:3d:fe:53:
e9:be:a5:56:d3:3d:34:b1:db:b1:20:a3:8a:81:25:18:c4:c4:
31:71:e0:22:63:3b:b3:3f:48:8a:d7:9f:8f:a6:d3:e0:b1:ac:
d2:34:54:bc:f6:7b:e9:75:3e:12:b3:94:b9:c0:48:76:46:5e:
37:a9:6d:a5:4b:6c:3f:08:8b:21:65:0d:ab:86:45:1d:56:68:
da:d4:4d:05:93:fc:fb:08:f6:7e:97:90:ce:7b:79:ec:3c:25:
55:b3:03:e7:c4:ee:81:62:8c:55:06:60:1d:3c:86:5c:30:97:
2f:c5:79:fa:51:e5:03:43:13:ed:8c:86:58:c1:31:5d:f8:9a:
eb:3d:88:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:20:34 2026 by rpki-client