Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EB31A3428EA11F194111FDFDAE4EC9C.roa
File: 3EB31A3428EA11F194111FDFDAE4EC9C.roa (raw, json)
Hash identifier: iB7Ya63P8ZBlYfAn4+gBmAJgs+TCT21nLJe3Yie5Bhw=
Subject key identifier: 93:0A:85:2D:F5:BA:2B:21:BC:78:30:DF:85:91:79:69:44:93:D7:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C0FB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EB31A3428EA11F194111FDFDAE4EC9C.roa
Signing time: Thu 26 Mar 2026 08:03:17 +0000
ROA not before: Thu 26 Mar 2026 08:03:11 +0000
ROA not after: Tue 12 May 2026 08:03:11 +0000
asID: 20326
IP address blocks: 154.83.152.0/22 maxlen: 24
154.83.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114939 (0x1c0fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 26 08:03:11 2026 GMT
Not After : May 12 08:03:11 2026 GMT
Subject: CN=69c4e845-6299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c7:0b:e8:93:05:fc:e0:7e:ff:e0:c0:b7:60:
4e:97:2d:27:7c:5b:db:c1:3e:e1:e0:12:f4:8f:cd:
83:79:63:39:d1:70:c3:4f:65:8b:99:91:61:79:09:
4f:89:7b:34:ae:ff:4c:2c:1d:e8:34:7c:80:1e:eb:
bb:f7:d9:c2:55:50:6b:4c:d2:1d:f2:21:60:09:6f:
9d:77:84:54:d9:73:1d:0b:39:08:78:6a:ee:a6:33:
ad:f6:de:3c:6e:f5:21:24:0e:d6:93:d2:8a:5b:e8:
71:e3:41:c2:e1:26:29:79:22:b1:21:fb:4f:50:d4:
69:c1:0b:6e:97:d7:cd:5a:0a:93:61:00:29:1a:15:
db:3e:5d:3c:32:30:94:78:5e:a8:59:f2:ad:d6:6f:
65:de:a7:95:83:94:d7:be:57:07:3e:d1:c9:4f:e5:
6b:b1:72:83:4d:15:f7:b3:72:4c:17:ab:fe:0a:6d:
7f:2f:25:f9:58:1e:0e:06:89:25:fd:4a:1b:8c:39:
af:ae:89:1a:38:19:b3:13:8c:35:70:23:64:7e:aa:
e2:a1:50:a9:b3:b8:54:1d:88:fa:82:a1:7a:e1:94:
2a:b6:0b:94:15:d9:aa:32:75:28:46:ed:db:d1:ef:
07:06:e0:f7:f6:10:03:f1:07:e4:34:6a:7a:4a:9a:
4b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0A:85:2D:F5:BA:2B:21:BC:78:30:DF:85:91:79:69:44:93:D7:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EB31A3428EA11F194111FDFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.152.0/22
154.83.184.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:b5:ba:3b:5c:19:80:88:70:dd:2b:7e:04:2e:70:18:65:3d:
02:a9:7f:bd:36:9e:ea:3d:44:dd:37:7e:9c:6a:59:ed:92:86:
70:0f:cf:ee:2f:a2:77:f3:6b:17:57:87:aa:86:f2:98:04:ad:
7a:c4:90:3e:79:ed:ee:7b:58:cf:06:c2:f5:d2:01:a3:2f:35:
79:65:20:8c:88:2e:06:53:7c:7a:71:04:98:42:f8:6e:69:29:
d3:9b:85:08:94:06:23:e1:6b:24:b1:7a:9d:21:6c:6d:9c:87:
0c:54:77:f2:a5:f3:0b:7b:10:20:93:f5:da:83:b2:ef:e5:74:
9c:7b:59:9a:44:ea:f5:45:7e:03:49:47:1e:65:37:7b:30:8c:
de:5d:cf:3e:8e:dc:5a:71:aa:0b:75:36:4b:e3:95:65:20:15:
cc:a1:93:70:b3:41:33:88:1d:52:dd:18:89:07:e1:87:70:59:
b5:fc:81:e2:87:ea:78:8a:6b:12:93:9b:fc:09:91:1b:e4:74:
0d:06:0f:9a:42:f2:1f:d0:2d:a1:73:24:e5:d3:a8:82:65:6d:
bc:bf:0a:35:5f:bc:21:73:1f:f5:03:16:36:d0:ee:ff:38:6c:
d3:9f:a4:c8:93:e2:7c:d6:70:59:d5:db:e7:86:a9:95:c6:c8:
62:57:a1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:51:48 2026 by rpki-client