Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C2CE12629B011F1B2B9E8E0DAE4EC9C.roa
File: 2C2CE12629B011F1B2B9E8E0DAE4EC9C.roa (raw, json)
Hash identifier: fEiLPMHTxW4MUv6fY0Qek/Cw/FZrhe6XUlgdul5s8Qg=
Subject key identifier: 3A:C3:D5:82:51:E8:DB:85:09:2D:66:86:6A:AA:54:08:96:F1:B1:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C116
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C2CE12629B011F1B2B9E8E0DAE4EC9C.roa
Signing time: Fri 27 Mar 2026 07:40:06 +0000
ROA not before: Fri 27 Mar 2026 07:40:01 +0000
ROA not after: Fri 01 May 2026 07:40:01 +0000
asID: 9304
IP address blocks: 154.92.192.0/24 maxlen: 24
154.92.193.0/24 maxlen: 24
154.92.194.0/24 maxlen: 24
154.92.195.0/24 maxlen: 24
154.92.196.0/24 maxlen: 24
154.92.197.0/24 maxlen: 24
154.92.198.0/24 maxlen: 24
154.92.200.0/24 maxlen: 24
154.92.201.0/24 maxlen: 24
154.92.202.0/24 maxlen: 24
154.92.203.0/24 maxlen: 24
154.92.204.0/24 maxlen: 24
154.92.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114966 (0x1c116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 27 07:40:01 2026 GMT
Not After : May 1 07:40:01 2026 GMT
Subject: CN=69c63456-6033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:38:63:8a:c6:d6:f1:bd:1d:93:82:9d:39:df:
7c:ba:82:0e:10:0a:a4:f2:c2:16:69:18:59:be:9b:
d5:3c:73:a8:cf:a6:d9:a3:9d:b9:45:08:90:33:fc:
f8:9c:1a:06:99:05:d9:67:10:f5:2f:77:c5:08:86:
a8:22:68:da:20:b5:f5:5e:ef:6a:10:26:e1:26:46:
bb:0e:b6:b0:f0:a4:79:8c:74:36:4f:94:58:a1:62:
fa:32:b1:8c:2c:a0:d5:f9:d2:9a:e3:7b:c9:8e:ed:
cb:fd:8a:64:c9:77:66:36:75:5c:a5:b3:03:a9:85:
54:e8:95:ee:f7:9c:b9:7a:66:aa:84:f2:e5:99:e1:
74:dd:b6:c2:7e:cd:0e:57:bc:2f:c9:33:9b:5d:19:
8f:63:96:70:0b:c9:05:9d:5d:20:c2:c1:2c:03:ce:
6e:38:13:b6:7d:ba:c8:c5:f2:21:d8:95:50:e3:86:
eb:ae:47:c3:2c:89:ba:4f:0a:8a:bc:b3:0f:66:98:
79:74:fa:49:7b:e5:51:ec:55:9a:3b:b8:d5:3a:92:
3e:e8:64:c5:99:f2:56:15:a4:89:d9:61:37:3f:d5:
ad:d9:e3:85:31:fa:aa:03:96:b9:0e:83:8f:ca:10:
7f:e2:18:22:b6:93:aa:ad:88:77:8c:00:e0:11:8e:
3d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C3:D5:82:51:E8:DB:85:09:2D:66:86:6A:AA:54:08:96:F1:B1:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C2CE12629B011F1B2B9E8E0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.192.0-154.92.198.255
154.92.200.0-154.92.204.255
154.92.215.0/24
Signature Algorithm: sha256WithRSAEncryption
19:46:91:11:48:ff:69:a5:24:3f:7c:10:b1:dd:e0:71:95:5c:
68:64:00:c5:a7:ca:0c:cf:7d:aa:61:40:bc:68:d9:46:dd:80:
fa:bb:0e:43:8a:c8:eb:07:c7:a4:c0:f7:10:51:df:09:98:79:
7b:8e:ff:8a:72:03:5a:db:75:10:5d:2c:8f:5d:96:d1:5a:53:
a4:63:d5:42:b7:ea:a9:18:73:26:e7:e9:1a:c9:9b:3d:3d:dd:
b3:fa:f0:0f:15:0a:0b:61:c6:65:30:ea:db:aa:78:5a:f2:25:
b4:93:4b:90:b6:f7:32:87:4d:1a:07:9b:16:d3:b2:b9:1f:d6:
8f:30:d4:e9:a0:35:c5:82:f8:43:3f:17:22:68:02:3c:a6:87:
89:8c:37:3c:f9:aa:fa:90:39:ab:bb:79:e6:0d:dd:51:c9:37:
8f:b0:d2:2c:91:9b:a4:a5:fa:5c:4b:82:88:a4:f9:8b:4e:3a:
8c:81:8c:55:df:b9:d2:04:37:ec:88:13:ab:8d:8d:89:42:5e:
44:bc:43:a9:9f:ac:55:d9:0f:b6:67:36:af:f0:c8:b3:eb:e8:
39:4a:4e:2c:3e:36:f0:21:b4:23:d7:27:57:8a:27:81:61:4a:
6a:b2:f0:b1:30:e1:50:3d:50:8b:76:ab:c3:73:bb:68:ae:f9:
18:4d:a3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:01:37 2026 by rpki-client