Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87628A24236F11F1B9B293EEDAE4EC9C.roa
File: 87628A24236F11F1B9B293EEDAE4EC9C.roa (raw, json)
Hash identifier: PK3VJUDJQASnH8igyv6hLtZ3EYBxg4aWJcEQSjMe+pE=
Subject key identifier: 0C:4D:33:A5:9B:71:08:6E:1E:AE:0D:39:B3:AC:C8:67:5C:D1:B7:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BFBF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87628A24236F11F1B9B293EEDAE4EC9C.roa
Signing time: Thu 19 Mar 2026 08:42:15 +0000
ROA not before: Thu 19 Mar 2026 08:42:10 +0000
ROA not after: Fri 24 Apr 2026 08:42:10 +0000
asID: 40065
IP address blocks: 154.89.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114623 (0x1bfbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 19 08:42:10 2026 GMT
Not After : Apr 24 08:42:10 2026 GMT
Subject: CN=69bbb6e7-7ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e0:ee:f2:ca:2c:60:bc:95:6e:ff:d6:70:fe:
cc:77:c2:d4:72:b6:49:12:e5:07:60:fd:d9:1a:80:
21:ff:5d:7c:96:97:ec:f7:f8:89:d1:8f:80:da:ee:
4f:9d:fb:15:88:19:a2:e0:c3:c9:12:06:2d:13:0a:
af:2e:3d:b4:9a:40:eb:3e:65:01:1a:d4:30:a8:f6:
d9:3b:f2:89:51:45:9e:42:7c:ad:25:6e:98:8d:d8:
38:83:82:71:92:37:7f:e6:54:11:7a:8e:15:a6:38:
3a:23:e8:75:dd:e6:6e:63:c0:1b:3a:8d:19:4e:d9:
11:f2:80:00:a8:dc:76:b0:a7:72:09:c3:73:b1:b2:
57:bb:c1:7c:4b:a0:c3:88:6a:50:a1:ee:c9:96:13:
30:d5:26:b9:52:50:5e:17:e0:a7:92:86:67:98:e7:
c4:2c:69:75:f3:33:cb:23:e5:74:b4:1a:b8:f8:4a:
61:a6:3a:c9:3e:e7:90:6e:74:1e:33:d0:ac:a4:bc:
e1:a0:8a:75:f9:d0:70:92:df:2b:39:07:c5:1e:bb:
e9:81:48:ef:8a:0e:6c:d4:c7:b1:ca:11:ab:b9:60:
7b:8b:47:6d:ec:16:a8:a3:26:ee:a8:c4:53:24:30:
12:cd:9b:0d:b5:90:3e:84:fd:d8:91:29:3c:c1:87:
24:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4D:33:A5:9B:71:08:6E:1E:AE:0D:39:B3:AC:C8:67:5C:D1:B7:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87628A24236F11F1B9B293EEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.160.0/19
Signature Algorithm: sha256WithRSAEncryption
85:7c:8f:68:84:4a:5f:5f:a4:f4:f0:11:f5:7a:83:47:db:99:
01:87:53:37:c7:ea:bc:58:fa:71:53:e8:18:43:b1:37:e8:07:
c0:f8:35:ce:65:d7:49:ae:5b:b9:80:d3:a3:32:d4:f7:0b:69:
41:89:97:d1:a4:5b:2a:68:47:42:72:15:5a:12:5c:10:9a:2b:
dd:2c:c9:01:33:75:2b:11:94:36:f6:97:b1:3a:52:f3:e4:1f:
88:15:0d:a4:82:63:bc:81:5a:57:12:0a:ee:e4:e6:b4:d5:cc:
e5:2c:22:3e:3d:f3:46:de:16:34:43:b9:03:ed:00:72:9b:be:
33:03:0d:d0:5e:9a:2a:99:47:89:f1:ed:5a:78:1f:8a:f1:09:
f0:a3:54:9f:d4:49:19:94:6f:bb:a6:55:b1:c4:fe:eb:57:07:
a6:0f:cb:a8:29:b3:ee:5f:87:50:3b:40:cc:92:c3:70:40:0f:
5d:b0:2a:d2:5a:80:6f:f8:d2:b3:47:66:6e:ad:2e:6c:e5:64:
bf:ad:8b:dd:a3:72:c1:81:ae:f9:b3:6b:43:49:f5:05:0a:b9:
9d:32:db:f3:06:bc:03:66:58:f1:88:51:10:c4:57:e3:eb:bb:
94:93:ab:ab:59:d0:cf:fa:d4:25:fa:f2:2f:2d:98:5e:67:4a:
bf:cc:44:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:15:55 2026 by rpki-client