Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/292A207A0E9311F18711B9A1DAE4EC9C.roa
File: 292A207A0E9311F18711B9A1DAE4EC9C.roa (raw, json)
Hash identifier: rZl/MeQ0Y2DhYwA/RmSpkL7vn6FKLqcelBVQt6yWH7g=
Subject key identifier: FD:8B:26:D2:9B:A5:FB:E4:B9:6B:54:8D:0D:C8:8E:9F:A5:DD:47:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BAAA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/292A207A0E9311F18711B9A1DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 19:34:24 +0000
ROA not before: Fri 20 Feb 2026 19:34:20 +0000
ROA not after: Thu 04 Jun 2026 19:34:20 +0000
asID: 18229
IP address blocks: 154.210.175.0/24 maxlen: 24
154.210.176.0/24 maxlen: 24
154.210.177.0/24 maxlen: 24
154.210.178.0/24 maxlen: 24
154.210.179.0/24 maxlen: 24
154.210.180.0/24 maxlen: 24
154.210.181.0/24 maxlen: 24
154.210.182.0/24 maxlen: 24
154.210.183.0/24 maxlen: 24
154.210.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113322 (0x1baaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 19:34:20 2026 GMT
Not After : Jun 4 19:34:20 2026 GMT
Subject: CN=6998b740-7f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:e0:c0:83:ed:42:1e:72:49:9c:a2:05:a3:
76:f5:a2:f9:50:99:e7:fe:45:b9:24:da:3d:3f:9f:
cd:6f:bb:cb:20:df:22:d8:80:9d:3d:c2:be:1b:58:
c8:d2:08:93:e8:5e:56:5f:35:a0:25:2e:b5:b0:8e:
66:db:ad:4b:87:2a:bb:4a:f2:f4:9f:bc:40:42:80:
d5:e9:81:94:4d:0e:27:23:7c:01:09:ea:97:ce:42:
bf:4c:bb:02:16:41:2a:f7:2c:22:39:89:fb:11:96:
3b:15:00:7c:8e:eb:19:5f:d3:80:b4:43:ec:00:f5:
5b:2d:70:21:62:bf:62:ba:c7:5c:bb:2c:93:f7:72:
55:79:42:1a:d3:e6:a0:cb:d5:34:ab:ef:95:bd:c7:
c5:5c:8d:05:35:b6:5a:4f:98:6f:b4:56:cc:cc:2c:
2b:5b:a7:d3:4e:29:71:65:cd:32:51:74:4d:6c:0a:
68:92:0f:97:c0:4b:8e:25:17:06:c7:33:aa:9f:5d:
64:7f:56:13:ab:8a:3d:a2:07:da:35:35:95:42:53:
0b:34:4b:ef:70:e7:dc:d0:75:18:0e:03:5e:9b:33:
45:e4:28:0c:ee:3c:9c:15:7e:69:bb:e4:74:1a:91:
c1:9a:b1:72:d1:35:57:e5:1a:41:ab:20:4c:96:26:
b5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8B:26:D2:9B:A5:FB:E4:B9:6B:54:8D:0D:C8:8E:9F:A5:DD:47:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/292A207A0E9311F18711B9A1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.175.0-154.210.184.255
Signature Algorithm: sha256WithRSAEncryption
70:5a:59:54:28:14:80:07:69:66:10:54:2c:f1:c9:a5:b2:b2:
fe:7e:1e:e6:30:6f:f9:f9:31:f8:f8:7c:8e:99:c4:6a:8d:24:
c6:3f:ad:af:99:f4:ed:ac:76:6a:51:aa:bb:8a:d4:f4:32:a1:
7f:cd:79:37:20:92:d7:89:ab:46:80:ce:e1:b9:75:94:84:00:
1a:52:79:7c:9d:a0:8b:e0:90:51:bf:b1:fa:cb:41:95:48:9b:
8d:86:f6:07:64:d1:c8:7c:d6:0e:e9:e4:bd:bb:51:e9:03:ee:
fb:49:fc:62:ea:b2:1c:fe:3c:dc:f9:8b:ca:61:34:58:88:19:
13:fa:e1:5e:37:db:30:36:de:69:96:43:56:d5:fd:a9:b3:a0:
c8:b4:d7:26:6d:45:f7:b5:6a:68:62:15:13:95:0c:95:4c:44:
37:53:be:ad:ef:97:7c:78:5d:a5:a3:56:2b:ec:b1:2b:38:27:
59:0a:bc:42:e5:64:7a:72:ec:9d:1d:7f:92:91:0d:1e:36:72:
67:f4:29:b9:67:ce:ac:f9:45:19:2a:97:4f:69:e1:5d:5c:14:
e6:c4:ad:fa:6b:2f:2e:0b:1e:16:22:b0:9a:9c:03:87:17:d6:
ce:ed:8f:a6:73:03:58:48:1e:98:00:36:bc:a7:21:a0:b5:34:
72:90:b9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:34:46 2026 by rpki-client