Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E275FE016D711F1B3F462EFDAE4EC9C.roa
File: 9E275FE016D711F1B3F462EFDAE4EC9C.roa (raw, json)
Hash identifier: P4avAOjhxkUVevKVzYRAzBINCAlxGOL7yWkbYJxztE0=
Subject key identifier: CE:45:B9:2B:F4:3F:11:7A:C6:88:25:E8:32:A9:2F:5B:1A:EF:19:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BD12
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E275FE016D711F1B3F462EFDAE4EC9C.roa
Signing time: Tue 03 Mar 2026 08:04:35 +0000
ROA not before: Tue 03 Mar 2026 08:04:31 +0000
ROA not after: Sun 15 Mar 2026 08:04:31 +0000
asID: 139880
IP address blocks: 154.82.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113938 (0x1bd12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 08:04:31 2026 GMT
Not After : Mar 15 08:04:31 2026 GMT
Subject: CN=69a69613-e57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d6:72:ec:64:6a:6c:85:d1:27:58:19:c8:e4:
e5:b9:37:d5:0f:0d:33:9d:ac:aa:18:86:48:4b:7a:
06:98:ae:18:87:29:26:21:3c:6c:28:f8:cc:9b:7f:
1e:d6:98:13:ee:6a:16:65:3c:56:2b:e9:8e:7e:95:
6d:03:07:4e:2f:67:97:41:76:a9:ab:f2:9d:92:97:
0e:c2:54:9f:95:0b:28:11:f7:a4:55:8a:1d:79:50:
77:d3:7c:9e:8b:9b:01:38:9f:01:20:32:3e:67:e5:
b4:3b:aa:c3:29:0a:f3:e4:60:d7:76:7a:1d:26:4b:
b1:e4:39:ae:d6:6d:13:33:52:c5:27:75:27:17:f0:
35:ab:b0:9d:22:08:b5:ac:3e:b5:51:2b:3c:f7:dd:
17:27:f8:af:15:de:f0:3d:75:ff:e5:51:f0:1d:15:
c4:b4:12:94:d3:b9:9d:ec:7d:29:84:48:80:77:2c:
b9:a0:94:9e:cb:40:15:c2:3c:d2:2b:60:0e:c6:41:
7e:4e:37:65:b5:0a:e8:83:9a:d0:f8:05:e2:51:8f:
ef:3e:c2:8e:08:23:d8:5b:d0:62:37:6b:4a:e5:b6:
27:85:2d:77:e4:e9:60:9a:d0:ef:97:e3:32:c3:51:
ef:c7:5b:fe:3b:17:1e:fb:a7:db:58:29:6a:86:9d:
9c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:45:B9:2B:F4:3F:11:7A:C6:88:25:E8:32:A9:2F:5B:1A:EF:19:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E275FE016D711F1B3F462EFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.32.0/19
Signature Algorithm: sha256WithRSAEncryption
26:dc:22:1a:0f:b6:df:f4:d1:02:aa:8e:7d:01:a2:fa:58:b3:
3e:75:a7:ca:b1:ee:a5:79:18:b5:cd:5c:38:99:f6:e9:4a:c9:
74:93:c1:33:d2:51:7b:57:13:86:4a:fd:9b:42:6a:b0:15:4d:
4e:02:72:84:ab:e3:38:7c:97:39:ea:24:36:ce:60:d9:08:97:
05:19:ed:aa:90:25:62:c6:0e:7b:65:d2:21:b2:e9:c3:a8:1f:
5b:08:f8:75:f8:c8:eb:ed:d9:ab:77:57:6a:a7:f9:60:61:2d:
28:8c:44:a2:c8:a7:08:a3:aa:fa:ee:d3:e9:72:46:2e:f7:5f:
87:9b:72:4b:8c:5d:72:54:14:ea:43:cb:fc:35:8a:c7:27:91:
af:0b:97:e4:3c:5d:44:85:54:4c:de:10:48:0c:18:cd:09:c7:
fc:91:ed:1d:5f:5f:85:37:7d:6f:bc:b9:7a:5a:c6:78:73:f7:
cc:86:3f:17:0b:4a:76:3f:eb:fe:00:e2:b2:4b:bd:60:ae:1b:
42:92:ce:c6:0b:56:96:d6:4d:2d:7a:ca:16:0f:18:f8:a6:3c:
31:be:41:4e:23:5a:1c:b6:6f:83:24:92:74:58:30:3f:06:d4:
fd:ab:32:34:fa:9e:07:56:50:e8:fb:b0:36:43:50:0f:c7:9c:
e2:ab:89:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:26:28 2026 by rpki-client