Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25B0F902058611F19C8F4189DAE4EC9C.roa
File: 25B0F902058611F19C8F4189DAE4EC9C.roa (raw, json)
Hash identifier: ftZOxNtYimoWFwGWttZaIVyHVUQUD60XgJeu96SsZdw=
Subject key identifier: DF:35:93:8E:80:9D:FB:E3:AD:84:F0:D4:58:87:58:0B:46:D1:60:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B8EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25B0F902058611F19C8F4189DAE4EC9C.roa
Signing time: Mon 09 Feb 2026 07:08:34 +0000
ROA not before: Mon 09 Feb 2026 07:08:30 +0000
ROA not after: Tue 10 Mar 2026 07:08:30 +0000
asID: 137899
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112874 (0x1b8ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 9 07:08:30 2026 GMT
Not After : Mar 10 07:08:30 2026 GMT
Subject: CN=698987f2-a412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0c:83:f3:9f:81:3a:46:cc:f1:72:2e:55:fa:
73:dc:d9:23:11:4f:04:a2:20:02:48:d8:78:a0:e5:
a1:5d:c2:50:f9:a6:ec:90:a1:51:7d:1d:7c:ad:c7:
ed:a2:7e:ac:ad:05:2f:fb:c2:10:15:6f:87:15:f9:
b5:4a:b3:e6:79:a6:7b:ca:21:b7:8e:8e:2c:e4:69:
34:e6:09:25:03:b0:70:d0:a5:19:f5:b4:63:eb:75:
59:59:13:66:74:3c:60:9c:3c:39:40:85:e2:d2:f6:
8e:19:c3:a9:77:d0:e6:96:35:3c:af:28:3a:ac:25:
0e:39:ba:be:50:39:0c:55:2e:40:23:03:31:ab:1e:
4b:95:22:38:76:fa:8b:37:95:3b:01:f9:01:b4:2b:
0a:ef:51:68:fb:0d:a6:f7:cc:ad:98:52:fb:a7:d0:
e3:6a:8a:e5:70:c5:fb:2a:63:9f:05:e8:69:c0:9d:
27:73:7c:ba:fc:0e:19:df:29:14:1d:5d:fb:99:18:
a9:cb:20:20:d5:1b:e6:3e:4c:c0:1b:4e:fb:4f:c2:
08:7c:f1:9d:10:85:52:2c:6b:01:6e:34:7a:b6:2a:
37:70:25:d1:0f:c3:77:b9:be:12:35:32:e9:3f:54:
af:a9:93:78:44:cb:8c:65:e3:c8:02:40:3a:23:98:
04:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:35:93:8E:80:9D:FB:E3:AD:84:F0:D4:58:87:58:0B:46:D1:60:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25B0F902058611F19C8F4189DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
96:19:67:62:b2:1e:2e:5b:04:9e:0b:ec:9a:a1:13:18:02:f0:
1b:93:30:7d:39:11:86:4b:3f:96:2c:5d:b9:0a:f8:76:83:a7:
19:3c:f2:a0:8a:15:4c:a5:f3:b2:24:0e:e2:2d:3d:cf:0d:56:
5f:b5:90:90:30:ee:f0:bf:51:58:ef:7f:25:a5:66:7d:d0:e1:
37:1a:1a:d8:d8:4d:44:a4:4c:3c:fb:07:11:67:7d:b6:e3:c5:
a4:a2:ce:f7:04:4c:6d:6c:57:54:5b:5e:89:b3:13:36:92:ad:
a5:24:bf:30:9a:a4:b6:a3:aa:f1:ce:2c:e9:f2:00:c6:3d:f6:
a9:1a:4e:b6:35:09:36:57:d5:54:91:b1:65:b9:06:84:5e:d9:
ad:33:0c:16:94:de:e0:b5:d7:70:91:3b:a3:54:07:1c:f3:8c:
7b:8f:e6:a2:ab:3f:26:b8:e1:42:a9:77:8b:bc:48:ee:c0:a8:
55:64:19:5b:e0:07:47:5b:b8:ba:66:c8:22:fb:ab:27:b1:92:
25:fa:c6:aa:c4:3d:e2:03:6b:97:e6:00:d8:99:04:a5:07:78:
5f:50:96:d9:87:28:20:fe:1c:21:f6:53:b5:cf:7c:c3:8e:09:
19:7b:ec:92:91:cc:00:52:26:dd:9f:ee:71:28:19:16:98:9d:
cc:f3:3d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:44:00 2026 by rpki-client