Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A76C1A012E911F1AF8CC8C9DAE4EC9C.roa
File: 1A76C1A012E911F1AF8CC8C9DAE4EC9C.roa (raw, json)
Hash identifier: 5QqT/Ko0wbqDF6y6lbn2Tz4v8HzDYMoCm57ypHP2xRE=
Subject key identifier: 3E:EF:F7:01:60:0D:E1:80:45:7B:F2:40:3D:84:0B:5A:08:26:19:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BBF1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A76C1A012E911F1AF8CC8C9DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 07:59:41 +0000
ROA not before: Thu 26 Feb 2026 07:59:36 +0000
ROA not after: Mon 30 Mar 2026 07:59:36 +0000
asID: 9304
IP address blocks: 154.82.153.0/24 maxlen: 24
154.82.196.0/24 maxlen: 24
154.82.197.0/24 maxlen: 24
154.82.198.0/24 maxlen: 24
154.82.199.0/24 maxlen: 24
154.83.65.0/24 maxlen: 24
154.83.67.0/24 maxlen: 24
154.89.132.0/24 maxlen: 24
154.90.65.0/24 maxlen: 24
154.90.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113649 (0x1bbf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 26 07:59:36 2026 GMT
Not After : Mar 30 07:59:36 2026 GMT
Subject: CN=699ffd6c-2a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:80:fe:89:16:04:ed:38:be:8e:e7:0f:c3:
e7:d7:2e:7c:38:1c:71:dd:8e:2b:b8:c1:55:59:fb:
d4:e7:05:be:4c:e4:6e:ef:d7:3e:fe:00:ef:b6:56:
29:67:98:ca:19:f7:ad:56:b0:bf:82:cd:91:95:9e:
fa:9e:96:2b:b8:05:b0:99:38:af:02:b1:5c:d2:56:
5e:a9:a8:fe:25:32:35:3d:33:e3:6b:86:4a:e8:23:
1c:1e:56:02:1a:f6:df:3f:2a:8d:fb:2f:83:f3:90:
68:0d:64:21:5c:0e:78:ba:9a:e2:ea:3c:57:45:d6:
25:bc:81:c4:2c:ae:5e:6e:8a:81:89:02:72:e9:30:
2b:50:2f:49:85:57:1e:c2:6b:d4:0c:08:a7:12:bb:
0e:48:27:09:94:34:4d:7b:9f:7a:82:27:ae:5d:c8:
9a:0a:e7:4e:53:a3:c6:8a:1b:95:0b:e4:a4:20:65:
5d:c5:ea:39:8b:eb:b3:ca:f2:48:8b:ec:69:bc:aa:
19:d0:17:6f:20:cd:50:6e:4c:49:30:51:3c:92:3f:
a8:2a:14:e9:26:5a:3e:22:e3:73:01:83:d8:8b:b6:
7b:94:12:95:5a:6f:07:60:dc:9b:04:6e:f6:97:f6:
8d:fe:af:9b:ff:12:83:df:16:94:4f:a5:8d:f5:7f:
28:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EF:F7:01:60:0D:E1:80:45:7B:F2:40:3D:84:0B:5A:08:26:19:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A76C1A012E911F1AF8CC8C9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.153.0/24
154.82.196.0/22
154.83.65.0/24
154.83.67.0/24
154.89.132.0/24
154.90.65.0/24
154.90.128.0/24
Signature Algorithm: sha256WithRSAEncryption
34:62:97:46:f1:ee:fd:59:1e:a7:56:2e:30:7f:72:78:6c:38:
bc:d7:32:3c:9d:0b:82:31:09:78:32:37:fb:4c:d1:3a:11:0c:
9e:b7:31:6b:f3:8c:7c:46:68:c8:63:09:5a:32:0c:a0:cb:c7:
87:fd:4f:10:8d:bf:fe:96:c0:37:71:7a:80:c6:15:f3:ee:b2:
2e:b2:f9:70:9b:95:85:b8:09:65:3e:24:41:dc:f5:2b:0e:7d:
52:f5:d0:a0:d4:f5:49:7d:30:62:9a:63:7e:bd:73:ae:25:44:
90:09:24:81:ee:1d:cf:76:ef:37:9e:cc:ee:eb:2d:39:24:49:
6d:4f:f6:77:0d:d1:45:40:5e:30:1f:05:9b:9d:72:86:8d:5a:
c2:5f:55:e7:13:4e:6e:b8:79:e3:2c:98:94:3c:61:97:4b:9d:
3b:2d:f6:13:01:8a:8e:52:50:89:76:fa:29:4e:55:3f:51:92:
76:bb:02:32:84:60:cc:3d:26:58:b7:43:1d:a3:96:3d:ec:24:
6e:3d:da:db:07:91:b4:ab:fa:39:bf:a8:49:f6:3b:46:5e:e3:
a0:02:2e:24:5d:d9:6d:f4:2f:48:dc:9f:db:28:b4:66:77:13:
c8:02:47:1b:9b:0e:d1:fa:63:0c:41:f8:d2:a2:5e:d6:6e:05:
28:7b:42:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:15 2026 by rpki-client