Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11D09E98019D11F1A6848383DAE4EC9C.roa
File: 11D09E98019D11F1A6848383DAE4EC9C.roa (raw, json)
Hash identifier: mUVvfS4jeD0qYrbzA43TxPRkZejJRVkEyiwtlEJNDa8=
Subject key identifier: 1B:9C:23:15:22:A0:3D:5B:53:AD:0F:5C:34:B5:1D:17:A6:B3:CA:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B877
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11D09E98019D11F1A6848383DAE4EC9C.roa
Signing time: Wed 04 Feb 2026 07:42:35 +0000
ROA not before: Wed 04 Feb 2026 07:42:30 +0000
ROA not after: Thu 12 Mar 2026 07:42:30 +0000
asID: 138915
IP address blocks: 154.95.78.0/24 maxlen: 24
154.95.79.0/24 maxlen: 24
154.95.80.0/24 maxlen: 24
154.95.81.0/24 maxlen: 24
154.95.82.0/24 maxlen: 24
154.95.83.0/24 maxlen: 24
154.95.84.0/24 maxlen: 24
154.95.85.0/24 maxlen: 24
154.95.86.0/23 maxlen: 24
154.95.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112759 (0x1b877)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 4 07:42:30 2026 GMT
Not After : Mar 12 07:42:30 2026 GMT
Subject: CN=6982f86b-1889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:91:48:71:1a:a8:00:6e:3b:98:55:d9:74:35:
89:e0:e9:8c:b8:99:0d:4d:b4:42:7f:dc:4d:48:46:
e5:ef:39:ed:32:c6:87:25:31:a6:95:5a:0b:fe:ec:
60:d3:d8:60:9f:22:25:21:f3:50:a3:dd:ad:43:b5:
4b:ad:43:ee:cd:97:2a:bc:6c:c0:81:e3:64:9b:21:
74:1b:82:6e:e9:d2:1f:fa:c2:b9:1d:e3:ac:9d:7b:
53:69:0a:81:7a:6d:db:3f:fb:e7:1a:ab:b6:7d:43:
f4:1c:67:47:2e:7c:68:6b:dc:ca:13:3a:31:de:d5:
1a:5b:f2:3d:1d:04:95:bc:ee:53:82:7f:86:05:75:
67:e0:41:bb:a2:ff:5c:34:3c:8d:af:d2:72:d2:75:
a5:ce:e1:64:ec:ec:83:ed:c0:3e:36:eb:0b:2e:ab:
d6:e9:d0:64:09:f6:20:de:e6:f2:19:a1:a4:e0:4f:
34:06:19:1f:dd:d2:3e:7e:4b:fc:96:ba:e1:a6:8c:
1a:9d:fd:d4:43:89:2c:95:cf:80:29:c0:cc:69:b4:
7c:f6:bf:d8:d1:86:06:d8:23:dd:68:2e:d1:1f:5a:
d9:8b:5a:b3:87:1a:d3:70:58:37:78:b3:21:82:b4:
63:04:f8:73:b9:ab:e1:f6:d0:dd:7e:f8:b8:f4:cc:
a1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9C:23:15:22:A0:3D:5B:53:AD:0F:5C:34:B5:1D:17:A6:B3:CA:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11D09E98019D11F1A6848383DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.78.0-154.95.88.255
Signature Algorithm: sha256WithRSAEncryption
d4:40:aa:4a:60:e4:d9:45:bf:78:d4:f6:d4:3c:9a:50:54:bd:
19:59:0e:49:a7:6e:1f:f1:30:95:1b:d0:e6:5f:5b:99:29:e1:
6a:b8:0f:b3:fd:58:48:3f:d8:12:35:12:d5:e3:17:0e:b2:7c:
f4:e2:87:8d:76:50:00:39:44:43:2a:8b:a5:d5:28:16:62:fe:
e9:83:ef:e4:33:24:7c:1c:ad:08:13:1b:8e:4f:fe:e0:cc:bc:
b7:6b:e8:12:8b:aa:c9:c5:ac:c3:2d:94:15:a3:0c:a8:c9:45:
e4:45:23:c5:5e:d7:2b:36:2f:13:19:d3:f3:dd:78:82:fc:0d:
89:09:3c:01:6b:a6:f0:66:49:fa:16:4c:b7:07:b8:b6:80:f8:
18:ad:bf:1d:25:6a:48:f2:62:91:d2:b7:bf:1e:76:0a:6b:5e:
9a:56:7d:38:d2:89:13:9b:b7:c7:f8:a6:95:11:9a:10:3e:25:
54:d6:ec:d7:b0:0e:31:c9:5e:a3:00:44:fa:9a:a7:9e:b7:21:
c2:72:73:bd:a9:06:97:74:98:ee:79:bd:df:6f:4d:81:08:4a:
9e:53:cd:0d:a5:4d:97:a6:58:92:36:4b:d6:2a:ad:a5:32:34:
11:d5:76:ce:c4:d7:bc:db:1b:ce:1b:9e:67:ba:49:8e:64:42:
3e:29:77:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:10:04 2026 by rpki-client