Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B220E5628F511F1AB4FA79BDAE4EC9C.roa
File: 3B220E5628F511F1AB4FA79BDAE4EC9C.roa (raw, json)
Hash identifier: 8lSVGf7aDnvm5Uzfiv9QjOQldsYX6tkLKBZQDkOXTIk=
Subject key identifier: A6:6C:9E:F5:DC:AB:5F:91:CB:1B:61:8B:34:DE:98:CC:5D:C2:DF:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C101
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B220E5628F511F1AB4FA79BDAE4EC9C.roa
Signing time: Thu 26 Mar 2026 09:21:55 +0000
ROA not before: Thu 26 Mar 2026 09:21:50 +0000
ROA not after: Wed 06 May 2026 09:21:50 +0000
asID: 40115
IP address blocks: 154.86.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114945 (0x1c101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 26 09:21:50 2026 GMT
Not After : May 6 09:21:50 2026 GMT
Subject: CN=69c4fab3-5bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:d6:ed:68:9f:5f:59:15:7f:a2:ff:0b:4a:
5a:19:e8:54:b8:14:58:27:e8:bd:ff:49:6b:6c:84:
af:d1:17:0f:a6:db:8d:33:bc:d5:90:de:d2:ab:59:
a0:c8:22:11:5f:17:8e:00:41:0a:72:64:1c:ef:9b:
a1:d7:a6:88:e0:6c:3d:35:2d:90:28:a1:8e:2b:2c:
70:4b:4a:e6:8f:27:55:99:37:c5:20:a1:06:41:30:
c4:a4:ba:1e:4c:de:c5:88:31:f1:a0:94:9b:40:80:
39:ad:57:29:18:a4:7a:9e:38:89:8e:6b:bc:5a:97:
28:a6:ce:50:91:1d:69:37:c1:4b:15:40:27:c1:67:
24:ad:04:63:c7:0c:a7:c8:8f:aa:09:fe:7d:fd:ac:
3a:b1:41:04:09:d0:95:52:55:31:5d:45:04:bc:a7:
41:a4:a4:01:a0:d1:ef:96:3a:47:be:0a:06:34:29:
9e:6a:7b:52:c7:ab:39:0e:53:bd:ee:55:ce:37:27:
4d:9a:04:22:2f:97:70:1b:0e:bf:62:33:42:2e:76:
e1:9b:4e:81:15:0c:c0:c3:62:70:3f:e0:e7:2f:1b:
0b:9a:41:6f:09:1f:a3:66:57:85:e0:49:f8:eb:ac:
7c:52:af:f9:40:36:6b:ed:a4:77:61:00:25:0a:42:
8f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6C:9E:F5:DC:AB:5F:91:CB:1B:61:8B:34:DE:98:CC:5D:C2:DF:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B220E5628F511F1AB4FA79BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/20
Signature Algorithm: sha256WithRSAEncryption
d2:80:52:f6:9f:16:59:43:69:34:aa:0e:d8:86:d1:c0:18:ce:
bc:07:93:e0:ca:53:8e:09:c7:5f:73:c1:11:45:8e:8e:15:c9:
9e:d3:4c:9a:79:84:e5:ba:d8:30:73:60:be:8b:c8:a4:fa:76:
87:ca:5c:ba:16:67:6e:79:95:a7:56:55:c7:b1:63:69:77:a4:
d3:6e:64:76:62:69:02:59:69:ae:61:52:12:8d:ba:4d:ca:d5:
62:e2:37:92:42:91:ce:75:68:d3:09:ab:1d:94:b5:75:d4:78:
81:3b:dc:48:78:41:62:3f:d0:ba:bb:4e:95:98:8e:98:00:3c:
e5:37:cd:ae:0f:f9:24:9c:2a:6c:a4:cd:69:9a:9c:1d:a8:27:
77:c6:b6:a7:27:fe:27:34:c4:d2:ca:d7:b8:ff:31:34:8a:f9:
e6:f1:9c:ee:4f:16:bc:c9:ec:b3:b2:66:54:fc:7e:6d:ae:a7:
49:27:13:9b:75:36:21:8b:ab:df:b3:93:b4:b4:d5:44:78:35:
b4:6f:3b:17:13:ca:2b:a9:a9:e9:7b:65:7b:b3:4d:ec:a4:82:
78:be:e0:8b:89:34:ed:dd:a1:fa:32:fc:cc:b5:79:dc:22:03:
e7:8b:9d:66:53:f8:a3:10:30:72:c9:bf:5b:aa:fe:7e:36:6b:
ae:35:df:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:51:41 2026 by rpki-client