Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70D36A2416E711F1B634EFCDDAE4EC9C.roa
File: 70D36A2416E711F1B634EFCDDAE4EC9C.roa (raw, json)
Hash identifier: wZB7DcTDgRqUHoiQ3GaPb7XiOtbDuQOTZyHhqFlkEHc=
Subject key identifier: 79:3F:9A:4B:0B:B7:4F:07:E2:B8:97:1B:EC:9E:FF:11:99:D7:BD:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BD2A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70D36A2416E711F1B634EFCDDAE4EC9C.roa
Signing time: Tue 03 Mar 2026 09:57:51 +0000
ROA not before: Tue 03 Mar 2026 09:57:47 +0000
ROA not after: Mon 16 Mar 2026 09:57:47 +0000
asID: 40779
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Mar 2026 00:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113962 (0x1bd2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 09:57:47 2026 GMT
Not After : Mar 16 09:57:47 2026 GMT
Subject: CN=69a6b09f-76d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:81:01:9e:4e:36:a3:02:96:29:06:f9:b8:75:
5b:49:83:ae:73:c0:b1:63:ae:7a:52:05:01:8b:7e:
13:a9:92:d8:95:41:28:53:bd:6f:4c:ac:e0:2c:f3:
e9:1a:b7:7d:70:df:bd:a9:45:74:a0:64:9e:5e:92:
3d:8e:01:24:b4:68:5d:6e:8e:12:bd:46:a0:46:5b:
49:35:2a:75:e2:3f:1f:ff:4f:74:07:13:97:81:b9:
e2:17:f8:9f:22:d6:14:f5:46:02:9a:08:70:4b:a6:
87:be:c8:1c:17:a8:e3:6f:b4:8a:ac:8e:6e:54:66:
38:ae:c6:1b:41:68:86:1a:5d:12:d4:89:b3:07:d6:
e6:a4:62:fc:c4:c6:ae:2c:fd:67:49:6f:57:59:8c:
20:67:08:6f:48:98:ea:fc:f9:a6:7f:b0:01:56:fa:
bf:b6:af:98:b3:10:87:43:eb:f7:92:2e:eb:68:5e:
e1:33:6a:a0:d2:48:36:fd:46:69:84:85:67:ae:1f:
6e:2f:f4:a0:aa:07:69:23:90:f5:37:37:da:0e:85:
b5:ca:2a:55:31:8f:2a:b2:01:cd:11:3c:bb:ca:b3:
45:92:73:4d:ef:a3:94:b4:41:b2:ab:74:39:d3:f7:
ee:58:93:29:c7:0f:0e:f9:7a:e3:1c:e6:93:34:f8:
80:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3F:9A:4B:0B:B7:4F:07:E2:B8:97:1B:EC:9E:FF:11:99:D7:BD:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70D36A2416E711F1B634EFCDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
2c:f2:9e:b4:49:d3:0b:7f:b3:a5:58:19:54:86:e1:63:f3:46:
01:14:79:8e:3d:22:8d:d3:85:1d:18:42:71:71:1e:ab:1c:d0:
cb:38:fe:f6:91:a1:6b:b1:e2:c8:76:59:bc:e7:ec:94:ae:8f:
72:82:57:2d:1e:1e:a9:0a:48:05:ea:1c:cd:a7:eb:56:55:33:
13:2b:95:2b:0e:81:73:5f:79:c4:4f:b3:d5:0b:2d:0d:5f:50:
8d:35:a3:55:3b:b8:6e:58:ac:d0:80:b3:5f:ca:42:bb:1a:a3:
8b:30:d4:3f:46:2f:16:26:64:e4:a2:77:70:81:cb:87:78:1c:
f3:0f:4e:df:18:5e:a2:90:75:c1:01:8d:ae:36:9a:3a:f6:88:
57:fb:7d:bc:f1:71:06:39:85:67:b3:5f:95:77:b2:04:64:21:
c0:a2:c6:33:29:1f:34:c0:70:d1:43:11:a9:94:90:37:98:ae:
8c:ca:71:16:83:06:e7:d8:6c:fe:89:8f:d3:20:a6:4a:62:83:
cf:9d:14:8e:fc:99:91:47:8c:7d:9e:60:ea:a7:d7:10:d0:dc:
2e:ea:ca:c9:eb:87:48:04:78:40:a7:73:4b:4f:c6:30:70:2d:
38:a5:bf:b5:f8:bd:67:4e:58:95:64:9e:34:af:af:c2:92:ee:
f9:27:f9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 14:32:15 2026 by rpki-client