Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1C36B52170E11F186D706BADAE4EC9C.roa
File: B1C36B52170E11F186D706BADAE4EC9C.roa (raw, json)
Hash identifier: H7LMxdCmGYOG960OXKqUO3CdGAEgSRKLAw03b488I1Y=
Subject key identifier: 5F:DA:31:FE:A5:61:33:27:A2:F9:39:AC:0C:91:2A:A3:AB:9F:9B:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BD3E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1C36B52170E11F186D706BADAE4EC9C.roa
Signing time: Tue 03 Mar 2026 14:38:50 +0000
ROA not before: Tue 03 Mar 2026 14:38:45 +0000
ROA not after: Fri 10 Apr 2026 14:38:45 +0000
asID: 8796
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Mar 2026 00:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113982 (0x1bd3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 14:38:45 2026 GMT
Not After : Apr 10 14:38:45 2026 GMT
Subject: CN=69a6f27a-1a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:97:2f:b1:f6:fb:94:a1:33:3d:f0:8c:0f:
83:6f:ef:eb:67:cb:c1:a8:63:eb:3d:de:ae:73:20:
ec:61:70:e3:62:01:43:72:6b:91:b4:43:ba:08:6d:
2f:83:a6:33:83:ef:ef:b7:2e:a1:a9:bc:5e:b2:71:
82:b3:ce:5c:b8:3a:53:28:89:b9:c9:9a:b2:5c:6e:
51:94:ff:c6:2a:cd:92:00:7d:e7:b5:3b:c9:5d:52:
82:bd:47:08:5d:13:c6:93:bc:3f:bb:b5:65:30:34:
97:99:c8:7c:15:59:64:88:59:2a:51:fb:30:ac:82:
c1:60:b8:45:67:0f:5c:37:d1:99:ca:a9:35:2d:13:
d3:4c:9a:ae:b1:26:1c:57:e8:ad:b8:bd:c3:22:4f:
b7:cf:69:9b:6a:c5:77:bb:37:ac:9b:5b:9c:8c:ee:
5d:49:04:f9:3d:18:a1:44:38:a3:e4:e2:c1:d4:5b:
b2:d2:9e:1d:cb:0b:20:1e:24:cd:2b:ea:db:f6:b1:
8e:53:3f:b5:fd:fe:81:b7:5d:b1:32:a7:34:9a:ce:
45:be:4c:f4:ea:cf:b1:53:1a:69:52:0b:89:11:81:
8f:66:f4:37:ba:2e:2a:10:cc:e1:eb:9e:e2:30:16:
af:ca:d9:e2:30:51:7e:33:30:5a:bc:7a:9d:20:09:
b7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DA:31:FE:A5:61:33:27:A2:F9:39:AC:0C:91:2A:A3:AB:9F:9B:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1C36B52170E11F186D706BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
29:69:3a:39:37:ad:e5:cf:3d:9e:0d:35:2a:74:32:ca:7f:9c:
91:80:ad:12:b0:96:06:64:84:7d:29:37:ef:cf:c6:da:fc:f3:
ba:7f:17:1b:f8:0b:a9:8c:47:3e:c0:86:9b:01:76:ae:75:c1:
9f:f4:2b:e4:2a:1f:d4:41:47:84:b9:35:de:8b:4a:a4:19:99:
bb:97:46:62:e4:8d:d2:6e:1c:48:93:47:a4:e8:49:69:38:3c:
8e:35:67:40:6f:13:e8:58:0a:65:e5:57:2d:93:37:a8:13:aa:
e0:19:44:d7:4c:1d:17:a4:df:b3:b9:31:24:05:1f:6c:d4:0d:
98:ee:bd:4b:5d:92:ed:57:9b:59:a1:67:3d:71:e7:13:51:51:
20:88:70:c7:16:bf:fb:7f:30:f8:95:c6:6c:04:22:1d:9b:90:
8b:13:16:05:a0:0d:82:fe:23:42:6a:9f:21:ef:d5:92:5f:ff:
68:22:28:ce:f9:ec:94:8d:c7:1e:c2:9e:85:2b:39:8a:c9:76:
fb:0f:0a:19:eb:61:dd:89:21:93:68:0f:f5:33:b9:87:a3:5d:
ee:8e:f2:90:9a:2e:8c:32:3a:33:42:78:39:4e:b5:a7:91:6a:
07:91:b0:ed:76:f4:c6:87:20:f4:49:99:05:44:47:90:39:52:
85:2d:51:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 10:59:38 2026 by rpki-client