Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38DE3DC4279F11F1AFE483CADAE4EC9C.roa
File: 38DE3DC4279F11F1AFE483CADAE4EC9C.roa (raw, json)
Hash identifier: 9wiS4TI+urpLUW+ZW6hSQSxQP68bkkTfXL/Il+0on3o=
Subject key identifier: 45:4F:8B:59:3F:B0:23:18:C2:2F:C5:14:50:BA:3E:61:B7:AE:65:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C0B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38DE3DC4279F11F1AFE483CADAE4EC9C.roa
Signing time: Tue 24 Mar 2026 16:33:44 +0000
ROA not before: Tue 24 Mar 2026 16:33:38 +0000
ROA not after: Fri 01 May 2026 16:33:38 +0000
asID: 62240
IP address blocks: 154.194.73.0/24 maxlen: 24
154.194.74.0/24 maxlen: 24
154.196.24.0/24 maxlen: 24
154.196.25.0/24 maxlen: 24
154.196.26.0/24 maxlen: 24
154.196.27.0/24 maxlen: 24
154.196.28.0/24 maxlen: 24
154.196.51.0/24 maxlen: 24
154.196.52.0/24 maxlen: 24
154.196.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114869 (0x1c0b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 16:33:38 2026 GMT
Not After : May 1 16:33:38 2026 GMT
Subject: CN=69c2bce8-bf03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b5:ad:e1:97:04:83:7e:40:86:3d:bf:5f:41:
25:36:34:d6:8d:f6:8f:27:53:7c:18:44:a0:a7:7d:
23:f7:e7:ac:57:d2:d6:d8:c7:71:46:2f:a6:b2:22:
fc:bd:a4:c5:12:f7:1e:d9:c9:80:ef:2f:b9:f8:67:
f1:fb:d8:03:bc:3a:b6:a4:21:8d:44:dd:34:8b:35:
d0:f5:65:ec:a7:69:81:13:f2:ac:0d:09:b6:4e:cb:
18:c2:59:32:5f:27:13:47:e6:a5:be:87:5d:34:59:
09:d3:55:76:21:06:55:a0:4a:52:92:94:0f:f9:f7:
17:00:4c:2e:65:50:8a:5e:de:74:9e:cf:eb:32:3c:
2a:6a:86:c9:d7:53:b0:7d:09:c8:7f:3a:ca:0b:29:
a8:e5:e7:dc:fc:5a:e0:b7:ea:67:3d:58:0f:c4:84:
b1:44:95:42:c4:23:7a:f5:83:ba:6f:ea:58:72:af:
75:32:89:8f:8c:83:25:2b:77:50:29:b5:aa:84:3b:
92:b2:26:55:66:67:ca:5e:4c:ca:3f:98:28:67:43:
ee:9b:57:58:56:f3:11:8e:8f:da:82:a1:8a:be:4c:
d8:c7:cf:dd:42:77:da:3d:ba:ee:3b:90:f4:e3:e9:
6a:68:93:bf:88:c9:5b:ba:c5:54:80:d0:c2:50:32:
06:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4F:8B:59:3F:B0:23:18:C2:2F:C5:14:50:BA:3E:61:B7:AE:65:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38DE3DC4279F11F1AFE483CADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.73.0-154.194.74.255
154.196.24.0-154.196.28.255
154.196.51.0-154.196.53.255
Signature Algorithm: sha256WithRSAEncryption
83:b9:34:55:98:a9:9d:e8:9b:8e:5b:64:14:c0:ba:1c:6e:a1:
62:c6:71:f2:c6:3f:db:29:52:3c:11:47:fd:2e:5f:8a:42:77:
ed:ba:fb:fb:bc:90:79:d8:5d:03:5f:7b:c8:f7:ec:3d:68:a3:
49:6c:b5:3f:63:21:17:bb:cf:3d:1d:04:2c:f9:14:c9:89:5f:
89:a8:06:eb:a3:9a:a5:44:50:e3:7f:cb:85:4b:d0:1c:65:84:
d4:51:2a:5f:17:5d:64:2f:c7:5c:5f:66:6b:51:55:4f:67:dc:
f3:57:dc:3b:c7:0a:4f:cf:c6:33:58:55:13:35:a4:ff:a6:6c:
c8:08:51:1e:3e:4a:45:ad:a0:ed:af:e3:64:13:09:1e:01:51:
7a:72:56:60:18:26:92:13:f5:14:01:99:39:59:33:14:8a:b6:
37:ee:ae:68:c4:99:77:d1:d6:76:9e:58:fc:d2:ee:8f:3e:c6:
fe:6d:02:61:0c:db:d4:c7:fe:64:17:83:85:1d:f8:ed:24:62:
4e:5a:08:38:cf:2a:af:fb:79:55:2a:10:52:af:3b:06:a9:f9:
24:95:48:d9:67:d0:42:3f:9f:a4:ff:19:bb:90:4f:63:5b:f9:
e9:95:97:d1:b9:44:67:a0:6f:2a:7a:f7:e2:14:d3:66:ee:76:
22:78:16:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:02:35 2026 by rpki-client