Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D86FD82FC2411F0BAC39EDBDAE4EC9C.roa
File: 1D86FD82FC2411F0BAC39EDBDAE4EC9C.roa (raw, json)
Hash identifier: g4zFvPK/VfhsW/vM/pbSVfhSJWDUk/KPNNqsGsOzeGY=
Subject key identifier: 67:65:3A:EC:32:08:02:CD:FA:25:EC:E2:89:51:0B:EF:4C:99:4E:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B703
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D86FD82FC2411F0BAC39EDBDAE4EC9C.roa
Signing time: Wed 28 Jan 2026 08:34:10 +0000
ROA not before: Wed 28 Jan 2026 08:34:05 +0000
ROA not after: Mon 02 Mar 2026 08:34:05 +0000
asID: 9304
IP address blocks: 154.82.197.0/24 maxlen: 24
154.82.198.0/24 maxlen: 24
154.82.199.0/24 maxlen: 24
154.83.65.0/24 maxlen: 24
154.89.132.0/24 maxlen: 24
154.90.65.0/24 maxlen: 24
154.90.67.0/24 maxlen: 24
154.90.128.0/24 maxlen: 24
154.90.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 02 Mar 2026 08:34:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112387 (0x1b703)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 08:34:05 2026 GMT
Not After : Mar 2 08:34:05 2026 GMT
Subject: CN=6979ca02-a86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ee:7c:43:70:31:d1:6e:34:de:ce:99:d6:6b:
e5:3c:cb:25:3b:cf:7a:04:b1:c9:52:e9:b0:64:18:
e7:c2:0d:9f:61:9f:cd:f2:b7:29:eb:94:ba:fd:e5:
72:18:9b:16:33:0c:4f:c0:0f:78:bd:c7:fb:df:5e:
9d:f0:91:bb:46:93:8f:19:6b:4c:ac:e3:00:aa:49:
08:8b:cb:8c:91:d9:11:cd:62:99:7e:7a:5b:e5:31:
b4:5b:23:a8:fe:e2:d9:e1:1a:63:8f:6c:1c:eb:f7:
f7:b1:60:5d:38:1e:37:89:5b:0d:67:7e:34:64:5b:
d1:26:55:b0:67:a3:57:58:c1:1f:bc:1d:56:df:a0:
54:1b:cf:f9:b7:4c:62:8e:c8:d1:a5:7a:9c:3d:13:
4a:77:9c:24:f7:42:50:fa:18:fb:6c:9c:91:0c:4f:
57:76:e3:ca:70:c5:a2:1e:0c:c8:55:d3:3c:27:e4:
53:c8:aa:80:22:d3:00:ef:4c:8d:39:cd:98:1f:39:
4b:9d:2c:23:6a:9c:c2:3a:38:4d:0f:06:41:6b:0a:
74:ad:cb:a4:6d:2c:a1:69:51:63:74:3c:8e:a0:10:
b9:1b:1e:69:4f:89:8c:d5:a2:94:04:ab:71:d2:61:
8a:ca:1a:90:11:f8:ca:af:5f:e1:d2:57:3a:8a:d3:
46:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:65:3A:EC:32:08:02:CD:FA:25:EC:E2:89:51:0B:EF:4C:99:4E:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D86FD82FC2411F0BAC39EDBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.197.0-154.82.199.255
154.83.65.0/24
154.89.132.0/24
154.90.65.0/24
154.90.67.0/24
154.90.128.0/24
154.90.189.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:10:d4:8e:c3:0c:b0:d7:da:2c:46:85:14:7b:74:75:7a:5e:
29:1c:6e:e0:31:96:a4:7f:f1:4a:a1:42:cb:23:36:eb:88:70:
92:75:8b:0c:27:49:41:dc:13:f2:d8:6e:77:3c:2d:cf:70:61:
56:18:d4:b0:aa:a9:f0:79:0e:1c:1a:95:83:7d:ea:7d:35:ab:
af:9c:e5:82:4c:fe:cf:a7:7e:d7:bf:d0:80:3d:75:09:5f:d4:
e0:54:01:f8:08:55:3e:b3:3f:c9:48:25:2c:fe:15:16:0e:ca:
41:3a:86:f4:e2:93:4a:4b:14:72:58:8c:5a:6f:e1:40:f1:1d:
e2:7b:c1:55:28:53:e4:eb:b7:53:07:33:de:fc:bc:06:44:ce:
1f:92:e8:c7:da:14:ba:59:7b:40:aa:9e:00:8c:a7:af:36:6e:
54:3d:fd:f7:e7:8b:7c:b4:e8:c8:92:9e:4f:36:91:72:79:c7:
47:43:36:ec:54:b8:39:0f:ed:7c:e8:0e:dd:2a:cc:ec:86:23:
5d:16:bd:6c:c8:79:2c:d6:1b:67:58:ef:86:dc:d3:f5:1b:82:
db:6e:15:b2:0b:bf:e2:98:24:7c:33:96:c0:79:d7:49:b8:5f:
cb:46:88:d1:b3:71:d2:15:25:bc:d0:e2:19:a8:86:4c:73:f0:
1c:01:42:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:06 2026 by rpki-client