Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BE9264CFDB011F08FD508E0DAE4EC9C.roa
File: 2BE9264CFDB011F08FD508E0DAE4EC9C.roa (raw, json)
Hash identifier: q0dXNsSSVjJvzlifxFTloYxtRrOts3SZJ/+Vr+xyxDs=
Subject key identifier: 45:E0:E2:4A:4B:45:25:7B:1E:F8:B0:76:5E:08:5F:E2:F8:94:BF:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B767
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BE9264CFDB011F08FD508E0DAE4EC9C.roa
Signing time: Fri 30 Jan 2026 07:49:14 +0000
ROA not before: Fri 30 Jan 2026 07:49:10 +0000
ROA not after: Sun 08 Mar 2026 07:49:10 +0000
asID: 14315
IP address blocks: 154.196.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112487 (0x1b767)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 30 07:49:10 2026 GMT
Not After : Mar 8 07:49:10 2026 GMT
Subject: CN=697c627a-8590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:34:a3:49:6a:4e:bd:e7:11:0b:65:ed:65:3d:
4f:fa:fd:42:71:7f:94:8c:94:bf:03:63:f1:b8:10:
a4:99:f7:cf:ed:0c:e9:b5:8c:7e:e3:5f:c2:2f:56:
aa:a5:95:39:48:3c:0a:60:e9:b9:d4:e4:d8:54:e4:
a2:da:1d:c2:83:ee:7e:69:22:83:2c:bd:94:c6:d5:
9a:2c:0c:39:b4:9b:0e:bd:b9:5d:1d:29:b1:fe:a5:
49:03:52:11:2e:c0:f0:ce:5b:bb:24:cd:03:99:04:
2c:05:b6:58:ba:3c:10:47:10:82:81:ce:68:98:e8:
11:8e:fc:7d:2d:ca:d1:69:80:11:ac:4e:f0:ea:87:
33:2e:b2:bd:de:31:c5:84:75:fc:66:1e:1d:3f:e0:
b6:96:6f:8f:6b:3b:5d:43:82:0d:af:ba:89:7f:59:
ef:04:59:ea:da:86:b9:71:07:1e:30:2e:6e:6d:56:
cd:8a:82:ec:2d:61:78:a6:25:14:71:24:49:d7:32:
44:3b:4c:c7:f7:aa:28:97:fe:dd:8b:fa:f0:94:66:
16:dc:c1:9c:6a:b6:96:14:05:95:c2:65:f1:8f:39:
1f:42:98:1c:7b:dc:3e:0e:70:89:72:63:5d:8c:f0:
ca:f3:73:77:7d:12:92:39:c4:8b:60:d0:d5:18:17:
9f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E0:E2:4A:4B:45:25:7B:1E:F8:B0:76:5E:08:5F:E2:F8:94:BF:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BE9264CFDB011F08FD508E0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.8.0/22
Signature Algorithm: sha256WithRSAEncryption
17:fc:63:e3:68:3a:49:86:c2:8f:a3:48:1e:21:4a:b8:eb:e1:
23:cf:34:52:a4:b1:ce:78:85:3c:4f:25:b1:7f:0e:e5:aa:b1:
3c:bc:19:15:8b:7d:37:c1:b1:8c:8f:d7:1a:82:bb:32:50:99:
d1:93:3c:c4:ee:82:6d:69:d3:6a:e3:fd:f5:2a:6f:02:25:95:
b1:bf:57:b7:cb:09:3f:c9:cb:37:a0:61:af:fb:58:36:62:0d:
3e:dc:53:fd:e9:22:44:97:a3:23:80:44:04:38:25:96:05:21:
52:a8:04:06:a5:03:c5:23:70:10:4a:e2:57:e6:51:ea:ab:f2:
6d:e1:13:b7:d7:cc:76:18:c8:0c:3e:14:5b:0a:8c:38:30:ae:
f1:89:6a:9b:b9:d1:79:44:7b:51:55:04:e7:92:da:cb:5c:49:
3e:64:d0:24:04:6c:b2:cc:68:1f:f1:22:03:cc:0e:e7:cb:24:
bb:ef:bb:d7:c6:31:ba:82:a5:e2:25:1c:e7:2c:01:8e:23:ad:
17:53:ff:60:d0:e6:43:2c:68:02:67:57:e9:6d:c8:04:a1:df:
3b:cd:1b:65:9a:2a:9a:8d:88:99:f1:27:b9:be:b4:7b:79:95:
dd:93:cf:00:39:36:b4:7a:21:e3:b3:7e:a3:4e:9a:f6:30:e4:
c0:8f:d0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:13 2026 by rpki-client