Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CC5D40E155B11F1B3ADECC9DAE4EC9C.roa
File: 1CC5D40E155B11F1B3ADECC9DAE4EC9C.roa (raw, json)
Hash identifier: k0X9fuWM10ohPSQrfxc2YfFbBn7sYfFkBgvySKWDzPc=
Subject key identifier: 2B:1D:D7:79:DE:C7:76:8A:B0:61:5A:89:CF:E2:FA:02:CC:75:3C:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC7E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CC5D40E155B11F1B3ADECC9DAE4EC9C.roa
Signing time: Sun 01 Mar 2026 10:40:49 +0000
ROA not before: Sun 01 Mar 2026 10:40:45 +0000
ROA not after: Sun 05 Apr 2026 10:40:45 +0000
asID: 202656
IP address blocks: 154.219.1.0/24 maxlen: 24
154.219.4.0/24 maxlen: 24
154.219.17.0/24 maxlen: 24
154.219.18.0/24 maxlen: 24
154.219.19.0/24 maxlen: 24
154.219.20.0/24 maxlen: 24
154.219.21.0/24 maxlen: 24
154.219.22.0/24 maxlen: 24
154.219.26.0/24 maxlen: 24
154.219.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113790 (0x1bc7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 10:40:45 2026 GMT
Not After : Apr 5 10:40:45 2026 GMT
Subject: CN=69a417b1-a435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4b:07:a2:49:8a:35:5b:46:c5:b5:0e:da:ff:
54:08:ff:1a:1e:05:f8:92:be:1e:d3:61:14:77:82:
b4:d4:a9:78:2d:9b:59:b3:21:fc:c5:81:2c:27:26:
c4:e8:ff:bd:c8:b3:9a:41:78:f1:7c:81:62:a4:19:
ed:14:16:e8:7b:66:6e:60:ac:95:b4:85:87:bb:d1:
fb:47:1d:e5:0a:01:43:ff:eb:56:be:aa:da:a6:a4:
40:8e:5f:5a:2b:1c:a7:17:40:5d:1d:3d:61:c4:28:
76:b3:4b:27:0e:b7:cc:8a:a5:50:14:73:44:ca:85:
e6:22:01:f4:10:cd:3c:fb:ee:d9:c5:c6:02:e1:e0:
7b:a9:1e:f6:aa:3b:ad:9d:59:68:e3:94:d2:8a:27:
f7:7c:9e:61:98:75:aa:b1:ec:5e:47:11:e8:68:3a:
ed:be:a5:ee:a0:7e:af:a4:ce:62:a4:15:52:d2:64:
c6:7b:2d:7f:bb:e1:81:ad:cd:83:58:e5:d4:23:dd:
8c:48:9d:a9:89:33:36:33:3b:f4:6d:8c:85:d4:b5:
93:ab:bb:02:9b:fa:77:d3:2d:f1:73:40:a0:cc:95:
74:12:0f:53:fb:2b:a5:38:e6:f8:d2:0e:e9:68:53:
58:95:b8:ad:83:59:01:f2:94:52:bc:84:58:86:79:
c5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1D:D7:79:DE:C7:76:8A:B0:61:5A:89:CF:E2:FA:02:CC:75:3C:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CC5D40E155B11F1B3ADECC9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.1.0/24
154.219.4.0/24
154.219.17.0-154.219.22.255
154.219.26.0/23
Signature Algorithm: sha256WithRSAEncryption
58:6d:17:04:14:f6:cf:d6:09:c4:44:fb:e8:57:4c:46:52:d9:
5e:e1:2a:6b:6f:e8:5c:59:a4:80:29:a3:eb:5b:e8:23:ea:71:
74:f8:89:ee:4f:e9:03:05:07:33:4d:16:e9:51:d8:13:a7:1d:
91:fc:4a:30:21:bc:73:a0:4f:e9:7b:fe:49:9f:b6:c9:20:65:
cc:e9:df:9f:5a:bb:39:5d:c1:7e:8d:76:86:fc:1b:49:c5:24:
e2:45:89:47:af:59:f1:a5:ae:2d:f9:e6:5e:e3:b3:67:6e:de:
2d:c3:31:43:ac:90:d4:a1:f4:3f:bc:ea:d9:3c:7d:82:d7:af:
56:2a:6f:f8:2c:d3:1b:10:7e:fe:d4:24:92:af:6f:9c:43:15:
a8:92:0f:f1:dc:80:20:6e:d8:cb:d6:f4:c3:ed:75:c6:ed:95:
57:f3:0b:14:d9:19:73:a4:1d:30:91:02:0b:77:f4:4c:a4:aa:
6a:24:3a:99:91:91:c6:c0:3d:7d:5b:1d:57:da:b9:2d:4f:c6:
af:cd:0b:c0:da:f4:02:aa:a1:3a:d4:9f:64:c5:1d:5e:59:3c:
d4:7c:2a:48:08:df:3c:fd:bc:50:7d:cb:4e:49:04:2a:90:a7:
ed:c3:0f:61:54:f5:c1:0e:99:5d:f6:c9:4b:57:6f:17:4a:c9:
e1:97:13:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:52:36 2026 by rpki-client