Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BF37AB085F511F18B950BC1CE1D38B0.roa
File: 3BF37AB085F511F18B950BC1CE1D38B0.roa (raw, json)
Hash identifier: D8JwAujo3NvNGkEXGh4+a/7oTbVmSABkBbvt7mIze68=
Subject key identifier: AE:36:2C:4D:CD:BF:CB:00:06:54:A6:B5:25:F1:5E:1C:3A:35:09:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DAD7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BF37AB085F511F18B950BC1CE1D38B0.roa
Signing time: Wed 22 Jul 2026 17:46:15 +0000
ROA not before: Wed 22 Jul 2026 17:46:11 +0000
ROA not after: Wed 09 Sep 2026 17:46:11 +0000
asID: 395793
IP address blocks: 154.83.9.0/24 maxlen: 24
154.83.10.0/24 maxlen: 24
154.83.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121559 (0x1dad7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 22 17:46:11 2026 GMT
Not After : Sep 9 17:46:11 2026 GMT
Subject: CN=6a6101e7-5d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e3:96:02:c2:ef:bb:c2:85:c0:d1:e0:9e:44:
ae:60:4d:0c:67:c4:4f:9b:98:04:9e:df:e4:af:08:
ac:27:e2:d5:12:3e:f8:df:8a:4d:00:75:e0:d3:5f:
50:94:88:6b:10:0b:b8:40:90:35:89:bf:71:9b:f5:
99:58:4a:d1:84:37:a4:e7:0c:17:af:70:cb:9d:d3:
88:60:61:01:8b:0a:95:a0:d6:4c:ac:09:7a:60:2d:
89:c3:2e:a4:7e:83:26:9c:42:a8:f5:20:49:36:3b:
00:ce:ff:02:10:03:26:1f:f1:1e:b9:aa:23:7a:5a:
53:37:d8:ee:c8:c7:ee:4b:de:a0:0d:9e:b9:24:d1:
e7:c4:60:64:e8:46:91:1f:0b:39:45:00:ea:c2:a3:
be:0f:07:74:1b:5e:d7:07:eb:d4:9c:72:70:30:a6:
cc:2f:78:e4:ff:a6:be:16:f1:fa:88:cb:fc:27:e8:
76:ba:1e:71:00:bc:b7:b8:8a:00:c2:8b:31:23:a7:
de:69:62:13:19:95:f8:99:fa:f5:ba:9b:16:4c:40:
f5:c7:c1:39:ef:3e:e8:ef:8e:c1:21:e0:f2:6d:de:
e7:e7:09:0f:77:27:ee:b8:50:dd:32:85:fe:2e:7e:
ca:09:e9:7f:75:ab:a7:56:f9:d0:29:c2:ea:41:08:
e0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:36:2C:4D:CD:BF:CB:00:06:54:A6:B5:25:F1:5E:1C:3A:35:09:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BF37AB085F511F18B950BC1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.9.0-154.83.11.255
Signature Algorithm: sha256WithRSAEncryption
3c:0d:db:c3:15:ff:76:53:29:36:50:5e:0c:8d:2b:b4:80:dd:
ee:d2:1a:db:34:db:7b:70:80:d7:7e:d3:62:13:77:dc:ef:d9:
4d:5c:8d:2a:af:7d:59:74:60:11:b6:ed:85:1b:3d:6b:46:92:
41:88:64:08:b5:45:ed:c2:b9:c5:9a:30:d1:b6:96:35:9f:57:
7d:db:ed:1f:ad:c3:cb:7d:6e:9a:7f:75:cf:29:5a:3a:6e:1a:
27:79:60:04:57:b3:da:73:0a:18:c4:10:e6:19:9b:66:b9:8f:
95:c3:71:0c:f5:31:35:09:26:f0:dc:70:49:ba:e3:a7:96:3a:
88:e4:f1:59:19:f1:52:d8:d6:0d:3d:8a:7f:d0:f3:78:44:8d:
7a:67:c7:6e:fd:b2:dd:24:51:0c:6b:18:44:5c:47:d2:9d:b8:
58:a0:b8:fc:32:99:67:db:3a:c1:70:2a:15:14:70:d7:22:56:
d6:03:be:44:3b:25:3b:7c:c7:3b:0e:0e:05:b3:ba:3b:a6:0a:
e8:3d:9e:d4:e0:ea:19:e4:1d:13:f0:3b:6e:95:a3:e6:b9:2a:
69:23:76:73:de:c8:f8:3c:4a:2c:4a:23:21:37:55:5d:b5:bb:
70:2a:fa:97:23:15:94:a8:5e:17:73:20:70:cd:3d:11:0f:8f:
75:9d:f9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:18 2026 by rpki-client