Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAF774D01C5111F1B428C8E4DAE4EC9C.roa
File: DAF774D01C5111F1B428C8E4DAE4EC9C.roa (raw, json)
Hash identifier: e56NXRuv5RPBYQ7iMs5CS0Ytp1UcMEX2OowylEa20lg=
Subject key identifier: 1C:55:2D:F4:47:CB:9F:CB:B2:49:8E:E9:D1:62:31:E8:87:72:91:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE99
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAF774D01C5111F1B428C8E4DAE4EC9C.roa
Signing time: Tue 10 Mar 2026 07:22:12 +0000
ROA not before: Tue 10 Mar 2026 07:22:07 +0000
ROA not after: Thu 19 Mar 2026 07:22:07 +0000
asID: 139880
IP address blocks: 154.82.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114329 (0x1be99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 10 07:22:07 2026 GMT
Not After : Mar 19 07:22:07 2026 GMT
Subject: CN=69afc6a4-cf47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:90:53:6a:0d:31:55:58:4f:57:7b:c1:da:53:
aa:7c:bb:ae:39:69:da:e0:0c:49:7c:f8:09:b3:fb:
07:be:81:85:8f:a0:8a:72:97:ce:d7:72:95:a7:ca:
69:7e:ad:f9:7d:5d:af:00:2d:33:72:a6:a9:9e:df:
62:42:22:c2:1d:f8:a8:c6:60:98:f4:fc:bb:9c:3c:
ed:b9:8e:61:af:c8:e3:e9:0a:7c:71:29:dd:61:fa:
10:8e:41:8c:60:cf:b4:ca:cf:69:29:9a:4e:b3:d3:
ce:7a:54:eb:08:07:b1:d4:cc:a9:82:4d:ff:ae:a1:
8c:3b:d2:58:a7:47:b8:41:4c:ce:59:6b:45:c8:8b:
d7:b5:9f:bd:ef:8b:eb:8b:46:9d:e8:0d:9d:34:8d:
d9:68:ff:6c:29:cd:f2:97:1b:cd:bb:2d:aa:05:59:
43:9a:07:04:ad:81:87:6b:68:f8:ea:a4:72:84:5c:
38:d9:fb:e3:1b:5b:6f:cd:8b:2e:25:ef:66:0a:00:
a7:cf:95:ad:93:6f:46:a9:3e:85:b2:a9:5d:8a:5f:
5e:ed:19:00:2a:89:de:1b:7d:31:ae:34:23:9f:d1:
f2:84:fa:35:3f:3d:3b:39:a3:dd:86:bd:cf:49:42:
bc:86:51:c7:cf:ff:20:9e:20:71:23:a0:37:ec:de:
0a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:55:2D:F4:47:CB:9F:CB:B2:49:8E:E9:D1:62:31:E8:87:72:91:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAF774D01C5111F1B428C8E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.32.0/19
Signature Algorithm: sha256WithRSAEncryption
bf:c9:c8:f3:56:52:ef:80:e5:df:61:71:04:1a:ea:31:39:8f:
c8:67:c9:ca:54:9e:6e:cf:10:4e:23:c3:60:92:9b:60:f6:c4:
e9:66:29:24:bb:7f:5a:69:f4:37:b7:90:b0:5b:64:68:a4:fa:
00:28:2b:92:95:af:93:4c:0d:ec:e8:9b:e0:b6:9b:11:38:36:
39:21:d4:c2:3d:fb:1d:82:34:ea:f5:dd:e3:e5:92:e5:7c:83:
7c:cc:99:98:c4:81:99:5c:47:3c:65:d8:be:5a:5e:25:f7:a4:
89:58:fc:8e:17:98:2a:90:55:36:06:42:55:73:f2:d7:15:16:
55:f5:0a:fd:c8:5f:bc:19:e7:38:a5:dc:7a:53:84:a2:64:02:
e8:ba:55:13:be:7f:a7:60:7f:00:93:54:60:e3:0a:f5:69:aa:
03:2b:8d:d7:be:ba:f8:5b:0e:a3:04:ac:f7:88:85:ea:88:12:
f5:95:7d:0b:ac:de:fb:94:75:63:1d:a1:09:d8:68:3f:26:7a:
db:e9:34:05:a1:f4:38:5a:ff:af:bd:aa:a9:12:42:71:8a:1f:
33:52:4c:7e:57:08:02:eb:0b:57:c6:2d:24:a8:7c:0c:f9:af:
c1:31:b7:4b:60:27:d4:1f:2c:7b:95:2b:68:f6:b5:9e:f8:ae:
c3:9f:03:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:26:15 2026 by rpki-client