Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81BFB9E81A0511F1BEFAAC82DAE4EC9C.roa
File: 81BFB9E81A0511F1BEFAAC82DAE4EC9C.roa (raw, json)
Hash identifier: N+TzTNzQ8xKqfXo+tAldN9c/RA6E+5vUaFmscSzE4Fc=
Subject key identifier: 88:CA:10:2A:DD:10:36:8F:6B:9C:7F:AF:E9:6E:6F:12:25:DC:3C:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE34
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81BFB9E81A0511F1BEFAAC82DAE4EC9C.roa
Signing time: Sat 07 Mar 2026 09:10:38 +0000
ROA not before: Sat 07 Mar 2026 09:10:34 +0000
ROA not after: Mon 13 Apr 2026 09:10:34 +0000
asID: 200758
IP address blocks: 154.84.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114228 (0x1be34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 7 09:10:34 2026 GMT
Not After : Apr 13 09:10:34 2026 GMT
Subject: CN=69abeb8e-ac1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:03:c3:ae:2f:e4:b3:c2:89:47:6b:cc:76:aa:
96:ca:1b:33:50:92:3d:7a:e0:83:2f:ac:49:83:2b:
35:40:a9:1e:ba:8c:1c:07:aa:a7:b0:7b:92:c6:45:
f0:d1:41:e7:d1:87:8a:ad:0a:94:6e:29:58:0c:75:
a3:f1:e7:26:25:7c:e7:d9:1f:57:ba:51:3e:4c:9c:
4b:18:a7:af:17:35:f4:3b:05:b9:14:51:4b:ff:ac:
0d:b5:fe:6a:d1:bb:a0:5a:5b:20:4b:9a:77:61:16:
a2:93:94:ad:aa:ad:35:71:70:8e:c4:14:47:25:4e:
c7:78:e7:56:d2:25:9e:e1:79:df:a0:6d:3e:fb:ae:
e8:6b:59:6b:a3:a4:66:0a:87:dd:b3:7f:c3:24:9e:
1b:ff:81:7f:09:cc:8e:65:76:4c:06:09:15:4e:2f:
db:52:7a:30:dd:42:a4:f8:a6:38:07:99:57:de:d7:
ab:dd:e3:f7:44:d7:81:b1:6b:50:17:54:3d:dc:45:
7e:66:3c:81:77:af:71:8e:ad:e5:ac:a2:a1:1e:c0:
dc:88:49:de:9a:6c:4a:95:9c:e5:25:6f:92:85:1d:
ff:f2:cf:ae:ef:d8:e8:ff:d2:e7:fc:d6:85:97:54:
f2:93:4d:ea:82:7c:cf:14:81:cf:ee:dd:ec:33:cd:
c6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CA:10:2A:DD:10:36:8F:6B:9C:7F:AF:E9:6E:6F:12:25:DC:3C:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81BFB9E81A0511F1BEFAAC82DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.154.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:04:bc:ab:36:61:9a:aa:7e:72:63:ca:06:34:8a:b2:b0:47:
1f:53:98:72:05:48:7a:a9:44:fc:ff:52:55:a9:04:03:2e:b3:
98:07:e7:8e:f0:7a:5b:6d:f7:5e:11:64:62:27:49:a3:37:30:
05:b1:d6:f6:aa:a5:2c:c6:45:da:77:3f:89:94:8b:6b:71:4a:
31:dc:2e:37:1f:d6:ab:b6:7e:0a:00:7d:a2:77:df:82:e6:88:
a5:d1:41:c6:f1:2f:81:2f:c5:eb:73:d9:d4:24:65:65:79:73:
76:3a:4d:d0:33:2b:1d:6b:6f:1a:34:bc:be:51:10:f2:ed:ce:
7a:ea:87:7a:e2:89:33:48:af:95:49:b9:7e:ca:ee:92:c7:54:
a2:af:76:db:32:34:e2:be:9c:58:80:16:b3:e8:4c:6f:04:c9:
e3:c2:c2:27:80:d5:1d:ac:4d:7d:66:8e:b6:60:ac:bd:c3:d9:
7b:40:5b:be:78:fa:08:be:f2:bb:60:db:59:de:88:d6:92:9a:
b5:3d:64:79:f9:2d:fa:93:8b:33:1d:be:21:23:7b:b5:9d:ce:
08:81:48:cf:48:f9:e9:d1:5a:1a:14:9c:3b:7d:c7:0d:5a:b5:
32:c8:a5:6d:24:38:ba:fe:f4:77:b8:25:75:6b:b2:03:a6:98:
70:54:9e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:15:55 2026 by rpki-client