Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E776E52040711F19857F1D6DAE4EC9C.roa
File: 2E776E52040711F19857F1D6DAE4EC9C.roa (raw, json)
Hash identifier: qtbfroZWtOw7r+2U7Ae865UiFIZZaMwGQ4clPqt7T8M=
Subject key identifier: A7:60:E5:7E:BF:3E:C2:DC:7C:E3:5D:F1:58:BA:F9:D1:9C:A7:80:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B8D4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E776E52040711F19857F1D6DAE4EC9C.roa
Signing time: Sat 07 Feb 2026 09:27:12 +0000
ROA not before: Sat 07 Feb 2026 09:27:07 +0000
ROA not after: Mon 16 Mar 2026 09:27:07 +0000
asID: 401696
IP address blocks: 154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112852 (0x1b8d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 7 09:27:07 2026 GMT
Not After : Mar 16 09:27:07 2026 GMT
Subject: CN=69870570-447e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b2:52:78:91:3f:18:3e:b3:8b:4b:b9:4d:de:
bc:28:27:dc:d3:c2:f9:fa:f6:ef:09:d1:1a:5a:0f:
ca:76:b1:aa:74:ec:eb:e3:54:15:f3:79:7f:46:43:
2f:9e:76:f3:b2:7f:b1:7a:cf:45:08:11:db:b6:b2:
05:9c:3d:64:63:df:5a:02:76:3e:0f:af:55:36:e2:
4f:80:15:95:d6:46:9d:cb:61:e2:9e:07:73:f3:01:
e1:de:f3:28:b1:bd:44:1f:74:81:fd:f9:24:99:0e:
de:9d:5b:1d:50:54:87:a1:1e:2c:db:73:64:3f:d0:
cf:2e:73:49:ed:3e:16:9d:ff:c0:41:42:9f:7b:66:
56:b4:ca:7a:0d:6e:89:8e:da:52:9d:bb:cb:9a:71:
93:32:b7:ca:e4:dc:13:58:9f:a8:3f:14:9b:1c:82:
06:df:b0:9e:a6:ff:11:a9:c8:0e:0a:22:db:00:04:
79:22:dc:c1:d0:2b:ac:fa:6e:91:4f:72:3e:42:0e:
fa:49:b5:a8:b0:1b:66:ca:84:cf:63:d2:a8:27:19:
96:d1:88:b7:76:4b:a4:c9:f6:af:2a:86:ad:d1:02:
73:3f:ca:9e:95:a0:a0:e4:c0:de:31:4e:54:09:0a:
14:54:1b:db:04:c4:d1:68:dc:9a:ed:b2:cf:25:28:
4d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:60:E5:7E:BF:3E:C2:DC:7C:E3:5D:F1:58:BA:F9:D1:9C:A7:80:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E776E52040711F19857F1D6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
02:eb:22:9c:22:4d:4d:4b:77:f6:84:67:2c:07:2f:d8:1a:26:
25:84:1f:5e:a9:7e:2c:34:55:5f:2a:e9:04:de:54:34:fc:42:
6e:a4:f1:22:e8:a0:88:2f:cf:e6:06:63:7d:9d:18:98:1d:71:
0b:af:76:23:18:f0:f9:e9:2f:4d:09:4c:ad:af:fb:22:ae:4e:
59:cb:32:82:43:2a:2b:8d:52:9c:ec:c8:4f:be:ae:b8:a4:41:
70:66:47:11:87:8d:34:6b:9a:47:a2:db:13:0c:c6:c8:fa:d7:
5e:b7:8d:7e:2a:f2:1d:9e:ed:d5:e2:6f:f2:16:4a:5d:60:88:
06:cd:a3:2b:1d:fe:c9:95:91:eb:0a:51:3d:3b:c8:e6:6c:6c:
41:c8:7a:15:b2:17:60:d7:2d:23:7b:9a:3b:2e:9c:f2:07:da:
5d:71:d2:08:3c:e8:83:ae:2a:98:9c:18:dd:75:a6:e3:f9:c2:
cb:b2:c1:4d:56:32:38:46:4a:2a:f4:fd:3f:f3:05:c4:ce:8b:
52:4e:43:a4:eb:cb:2f:a2:46:7b:a1:66:1e:b5:c2:86:2d:ea:
7e:25:58:ac:41:b2:4b:9a:cf:b2:db:23:ba:fa:50:ce:95:7f:
03:85:cd:4b:2e:06:58:de:7a:b9:5c:57:65:a9:54:c2:da:b1:
a3:6d:ba:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:41:56 2026 by rpki-client