Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/921E404E161211F1AF1644B2DAE4EC9C.roa
File: 921E404E161211F1AF1644B2DAE4EC9C.roa (raw, json)
Hash identifier: daPFedyrPR0Mhujg2iiJOP3fa0LHPmFja8/oZCiR118=
Subject key identifier: 37:A0:42:FA:2A:E9:CC:BF:3C:89:8D:54:6D:B4:B2:EB:E7:FF:AB:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BCC8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/921E404E161211F1AF1644B2DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 08:34:04 +0000
ROA not before: Mon 02 Mar 2026 08:34:00 +0000
ROA not after: Sun 12 Apr 2026 08:34:00 +0000
asID: 212042
IP address blocks: 154.83.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Mar 2026 09:46:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113864 (0x1bcc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 2 08:34:00 2026 GMT
Not After : Apr 12 08:34:00 2026 GMT
Subject: CN=69a54b7c-4a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:7b:8c:80:8c:b5:19:26:fd:e8:b3:6d:e8:
35:fd:be:8a:de:50:c6:05:3a:0a:4b:b2:d1:e4:9f:
9d:fd:7c:82:8b:09:13:f6:72:ab:62:78:b3:c3:29:
98:e9:28:a6:93:9f:1c:ee:2e:3f:70:3c:03:64:5f:
72:90:34:08:72:ed:5a:b3:5d:09:94:95:cd:15:4c:
30:b2:26:0b:4e:ac:15:48:ef:ad:c0:da:19:a5:da:
82:9e:97:13:7b:17:af:65:a9:8f:22:2d:ea:34:4b:
e2:93:7a:59:02:c6:67:ad:5e:f9:5c:3a:8c:48:00:
dc:dc:94:a4:af:27:0e:1c:a5:96:a0:3f:48:d3:fb:
d3:04:62:25:8a:f1:ad:7a:ac:c0:89:d4:10:2f:32:
60:8d:1b:f4:dd:ab:7c:d3:eb:e8:c9:1c:0b:3f:0e:
21:f7:bf:44:dd:77:c3:8b:3a:5b:b5:36:32:46:03:
dd:a8:12:d6:0b:70:d7:b0:71:c7:b1:b4:7a:d9:17:
8d:ed:bf:7f:57:25:c1:71:cd:02:db:27:e7:25:fd:
c2:77:c1:bd:2f:bc:91:8f:f9:82:8f:73:df:2c:73:
f5:e5:53:38:fb:4b:e9:94:ff:27:22:ee:ce:8e:c5:
63:3e:a4:20:f8:11:45:c8:0d:23:b2:ae:0b:c9:42:
b1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A0:42:FA:2A:E9:CC:BF:3C:89:8D:54:6D:B4:B2:EB:E7:FF:AB:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/921E404E161211F1AF1644B2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.136.0/24
Signature Algorithm: sha256WithRSAEncryption
88:77:cc:5a:7e:65:68:46:cd:c9:dc:c8:43:80:92:85:ed:72:
17:1f:d3:c4:92:11:90:7d:bb:35:db:c1:f1:cd:bd:d4:90:ce:
61:8e:f0:e2:57:7d:72:f5:bd:7e:32:e6:c8:6a:b1:33:58:ae:
03:1f:a0:1f:e2:44:0e:e9:3f:7f:ad:f2:29:73:05:43:4d:ff:
1b:52:22:45:39:40:37:05:7e:d6:6d:5d:94:1c:96:ab:cd:7d:
15:48:d0:41:82:0d:f8:b9:03:84:c3:92:fb:cb:a3:ee:c3:d7:
71:dd:08:8c:de:25:9f:0d:90:78:ce:4a:b9:ed:f7:29:b5:fa:
0d:f0:c6:d8:ea:2d:a4:6b:d5:75:7e:6b:d3:38:4e:a6:6f:38:
67:86:ff:b4:52:78:e4:f0:50:3b:16:29:72:bb:32:98:5b:5a:
5d:3e:a0:1b:4c:1d:52:4d:87:ba:01:5d:81:42:c3:f0:7f:96:
5c:3b:fc:00:f8:19:3e:82:53:c7:00:91:c8:b4:b4:09:24:e4:
dc:fb:c5:a9:8f:29:a8:1d:15:c3:3e:6d:4e:f4:1b:9a:3a:cc:
62:3e:93:af:5a:87:09:3d:84:37:88:ed:46:c4:ff:b3:7c:24:
d5:8e:6f:06:cc:64:2b:47:18:44:9e:f5:97:6f:18:a9:84:63:
02:b6:37:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 01:17:36 2026 by rpki-client