Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1175E6AA135A11F18A4BEAEEDAE4EC9C.roa
File: 1175E6AA135A11F18A4BEAEEDAE4EC9C.roa (raw, json)
Hash identifier: cyz4apf6/D8yV3xuX3R0td1UJ+PWxJ+jlXzFyARIln8=
Subject key identifier: A9:37:EE:AD:E1:04:B5:E3:17:00:CF:B4:BD:98:19:99:CA:2D:21:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC1F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1175E6AA135A11F18A4BEAEEDAE4EC9C.roa
Signing time: Thu 26 Feb 2026 21:28:19 +0000
ROA not before: Thu 26 Feb 2026 21:28:14 +0000
ROA not after: Mon 30 Mar 2026 21:28:14 +0000
asID: 9304
IP address blocks: 154.193.35.0/24 maxlen: 24
154.196.179.0/24 maxlen: 24
154.196.180.0/24 maxlen: 24
154.200.26.0/24 maxlen: 24
154.200.43.0/24 maxlen: 24
154.200.51.0/24 maxlen: 24
154.200.52.0/24 maxlen: 24
154.200.140.0/24 maxlen: 24
154.200.142.0/24 maxlen: 24
154.200.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113695 (0x1bc1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 26 21:28:14 2026 GMT
Not After : Mar 30 21:28:14 2026 GMT
Subject: CN=69a0baf2-b3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e7:a6:4b:af:3f:58:2f:ca:2e:8b:e4:ba:e0:
8a:28:90:7e:ea:e3:20:a9:c6:5a:27:0d:f3:d7:5b:
cb:f8:9f:1c:44:18:12:aa:03:9e:99:62:81:44:49:
4b:c1:07:a5:0f:c3:6a:f4:dc:7e:07:06:af:97:cd:
93:d3:4e:62:1b:4e:d3:ef:9c:5c:d9:48:bc:6b:10:
8c:2c:4d:6d:0f:e6:7f:47:f9:d2:8b:b5:49:29:6e:
2a:5c:fa:41:9a:f4:6f:65:93:b6:43:5c:c7:da:cd:
31:ac:95:3d:9b:f9:97:c9:18:07:10:1a:79:16:ec:
5a:32:07:3c:4c:ee:8f:83:42:b0:72:b3:97:89:f7:
d2:cf:11:73:cb:ba:ac:41:73:e3:b6:89:50:e4:29:
c3:a1:af:c1:d9:cd:e3:db:5f:c2:8f:6b:2c:68:27:
0d:e3:48:1d:3c:ca:e1:9f:5c:ec:fe:4a:07:8c:46:
a9:2f:d0:33:a4:37:58:28:06:d5:2a:8a:0e:d4:90:
7b:3a:9c:e7:fc:7b:81:d1:a8:09:70:ff:d8:6d:28:
27:21:14:86:91:fd:dc:af:59:4c:e1:c1:50:1d:b8:
0c:04:63:03:5e:89:88:7f:9f:76:71:c6:4f:8d:ac:
ff:6a:23:4c:6e:2b:8a:7b:86:2b:fb:68:6f:25:2b:
92:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:37:EE:AD:E1:04:B5:E3:17:00:CF:B4:BD:98:19:99:CA:2D:21:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1175E6AA135A11F18A4BEAEEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.35.0/24
154.196.179.0-154.196.180.255
154.200.26.0/24
154.200.43.0/24
154.200.51.0-154.200.52.255
154.200.140.0/24
154.200.142.0/24
154.200.191.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:1c:b5:74:56:9d:1e:15:75:33:41:9f:af:17:dd:3c:fa:49:
bb:28:20:d3:9c:95:b5:ad:e3:8d:ce:b8:cd:8e:e8:58:ee:93:
53:31:8c:e4:20:5b:c9:92:5a:8b:93:89:55:94:15:a8:1b:e6:
95:1f:21:06:ac:61:ee:8f:b3:95:cc:23:70:b6:67:fe:15:60:
b1:74:c6:1c:f9:4b:7a:42:90:5a:a4:18:e6:fe:db:fa:ad:c1:
3d:78:e7:95:3b:ed:f5:24:74:eb:1a:07:ff:58:cc:76:d8:ba:
e0:f3:40:d5:b4:ef:3d:e1:c5:9d:7c:d5:5d:47:ca:c0:a1:f9:
41:8b:69:00:37:06:0a:ac:70:76:67:77:1b:6f:9a:0f:77:7b:
d6:c1:6c:5e:78:4d:da:ab:42:84:05:9f:3a:8d:85:2f:13:5c:
df:26:d3:09:d9:8b:4d:e5:0b:6b:10:10:07:d0:93:25:00:83:
1a:22:b5:fb:cd:bb:0c:9c:dc:94:24:a0:79:1e:80:39:79:29:
10:f3:bc:85:c4:c4:44:ed:63:9b:55:33:04:18:41:ba:f4:58:
db:09:e9:46:3a:9c:fd:1e:df:42:ea:a0:95:55:db:91:80:f1:
03:69:45:70:30:bb:50:f8:eb:da:70:40:86:6a:73:e5:f0:f5:
26:0c:08:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:41:23 2026 by rpki-client