Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2720E2AAFE8A11F0A6ACE39ADAE4EC9C.roa
File: 2720E2AAFE8A11F0A6ACE39ADAE4EC9C.roa (raw, json)
Hash identifier: 7ZEXPuJ8r5Wu7e28FP8cXi2+PooihnPOlBPhVdf+EDY=
Subject key identifier: 9A:88:10:1D:40:B6:3E:D3:52:C6:F4:28:E5:CE:E8:A9:ED:BD:7F:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B7E0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2720E2AAFE8A11F0A6ACE39ADAE4EC9C.roa
Signing time: Sat 31 Jan 2026 09:49:36 +0000
ROA not before: Sat 31 Jan 2026 09:49:31 +0000
ROA not after: Sun 08 Mar 2026 09:49:31 +0000
asID: 147176
IP address blocks: 154.197.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112608 (0x1b7e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 09:49:31 2026 GMT
Not After : Mar 8 09:49:31 2026 GMT
Subject: CN=697dd030-e57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:39:16:11:f7:f4:7b:32:9b:18:93:4a:1b:
09:51:2a:24:20:c3:0b:ea:94:fc:24:bf:aa:4a:d7:
3e:0a:e4:1e:ae:35:8e:c8:dd:02:bf:ab:f2:01:63:
e4:9f:3f:a9:69:4e:47:c7:79:8b:2d:53:9c:07:a2:
5a:f2:f2:03:4f:ea:22:3a:ba:4c:b3:07:3a:42:03:
bd:7c:9e:b7:ef:18:b9:33:cd:88:ef:c3:a3:7b:95:
68:f4:fc:3c:f1:b9:8c:d6:f0:05:b9:c5:c8:2c:5e:
f7:24:51:35:82:0c:77:f8:87:0f:9e:d6:b3:e3:f5:
d8:c7:5f:d8:6b:e0:e6:c4:84:8f:b5:b2:ed:45:9c:
b1:5b:13:2b:4b:6f:d6:b7:5f:93:16:0b:32:f9:03:
74:8f:bc:2b:d7:57:c1:8a:d7:02:50:eb:e4:36:af:
a7:0d:91:65:a4:7a:64:cd:10:cd:65:ef:23:ba:d9:
10:41:df:d1:f0:f4:0e:f8:df:91:cc:b8:cf:d0:3c:
7a:f1:27:1c:ba:6f:87:e1:8f:1a:91:33:37:80:52:
96:f4:ab:e5:cd:3b:68:49:84:8b:ab:9e:8a:2e:04:
de:ba:d3:31:d4:98:52:61:83:d9:c5:3c:a8:f2:a9:
d5:63:95:9a:5f:7f:39:c6:d1:7f:75:79:03:d4:26:
f5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:88:10:1D:40:B6:3E:D3:52:C6:F4:28:E5:CE:E8:A9:ED:BD:7F:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2720E2AAFE8A11F0A6ACE39ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.116.0/24
Signature Algorithm: sha256WithRSAEncryption
32:8e:20:37:45:52:eb:b0:b3:a4:87:4a:ec:99:b3:92:b1:fd:
f3:a3:23:91:4d:b7:f8:7b:77:73:f8:f7:4d:d8:3d:c9:b8:2b:
14:d2:13:99:53:85:26:fe:85:f0:5c:e8:19:1d:ff:9d:fd:4f:
5b:67:03:32:c4:40:42:92:d8:a3:2c:13:ea:ff:b7:09:6e:a1:
52:ab:77:44:6c:16:c1:fa:38:bd:74:33:d4:a6:38:bf:61:bd:
e0:c6:d8:30:9f:aa:c0:dd:6f:82:64:a8:db:99:39:c8:dc:fe:
75:4a:1a:a9:01:52:b7:6f:7a:25:75:47:80:be:12:fc:eb:02:
f2:68:8f:10:4c:5d:45:1c:e3:ba:7b:b6:ea:8c:0d:32:6b:6a:
64:f6:35:5c:58:ef:7f:b9:61:7a:b5:76:20:ba:b3:c0:c3:65:
48:6b:e1:fd:54:24:45:9e:b9:79:2c:5d:e6:d9:e5:16:49:7b:
0d:92:65:01:12:ff:93:23:6c:91:7e:77:4f:68:a6:95:be:62:
a8:a1:44:32:d4:ac:fa:2c:a5:10:cc:cd:52:08:e3:b2:f3:a3:
14:d0:b1:43:69:6e:63:ce:b4:7c:36:ba:15:9a:a7:79:44:cf:
c2:2c:87:7a:97:8e:36:36:30:29:d2:54:04:6d:b8:63:f9:a3:
ae:95:ba:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:17 2026 by rpki-client