Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EADE7100BD311F1B1E02DC3DAE4EC9C.roa
File: 2EADE7100BD311F1B1E02DC3DAE4EC9C.roa (raw, json)
Hash identifier: Y+izsNl7L/CaHVHAUg9anqpjp+3NJOmH81JPW3YRXr8=
Subject key identifier: 64:5C:1F:C0:37:B5:70:01:B0:5E:A3:AA:67:EF:01:A2:5A:54:77:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B9E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EADE7100BD311F1B1E02DC3DAE4EC9C.roa
Signing time: Tue 17 Feb 2026 07:35:08 +0000
ROA not before: Tue 17 Feb 2026 07:35:03 +0000
ROA not after: Mon 09 Mar 2026 07:35:03 +0000
asID: 200373
IP address blocks: 154.82.150.0/24 maxlen: 24
154.82.168.0/22 maxlen: 24
154.86.112.0/24 maxlen: 24
154.86.113.0/24 maxlen: 24
154.86.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113125 (0x1b9e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 17 07:35:03 2026 GMT
Not After : Mar 9 07:35:03 2026 GMT
Subject: CN=69941a2c-03f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3e:ed:e1:40:e5:dd:a8:c7:e5:d8:68:22:d7:
49:ca:b6:e0:ef:45:ee:86:0d:56:ed:14:71:a5:b3:
89:18:a1:c4:18:dc:bb:57:52:8b:c4:c7:7e:8b:61:
41:31:bd:aa:38:fe:c4:05:c1:11:e0:d7:cf:17:40:
89:64:83:e3:a7:38:0f:2c:d8:9b:e7:69:24:07:b8:
16:9e:e5:4f:aa:11:ac:04:78:9a:41:e6:de:2a:87:
b4:74:3a:c0:87:50:e8:9c:7e:4b:49:b1:26:f2:6d:
26:a8:49:6d:ba:6b:0b:e2:03:af:67:d3:ad:a5:98:
83:9d:63:9c:6c:ef:57:85:0f:a7:3b:53:1f:21:7b:
18:f2:2d:fe:50:5d:ae:bb:98:a7:f3:4c:95:de:36:
8b:6f:25:5d:0e:ae:42:5c:82:9a:ad:7b:48:28:77:
84:c9:1f:cd:a2:53:2e:f4:f6:0b:cd:de:bd:4c:bb:
92:71:a6:f4:42:0e:9c:19:70:b8:61:16:f3:21:4d:
a5:69:5e:ec:0f:25:f7:41:e1:67:27:c4:ef:f9:cf:
f3:2c:59:11:7b:e1:52:c6:95:d6:31:72:4a:64:52:
27:61:da:26:f8:f5:06:b3:39:4a:ce:92:94:19:d2:
52:33:1e:b1:d9:b4:79:40:33:b1:65:ec:7a:27:82:
8d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5C:1F:C0:37:B5:70:01:B0:5E:A3:AA:67:EF:01:A2:5A:54:77:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EADE7100BD311F1B1E02DC3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.150.0/24
154.82.168.0/22
154.86.112.0-154.86.114.255
Signature Algorithm: sha256WithRSAEncryption
5d:ff:89:92:b1:52:b7:1c:ba:fa:ab:bf:6b:8a:a7:25:5c:7c:
68:fa:77:09:58:c1:d2:ef:21:81:a1:67:cd:7f:d3:a8:d4:88:
93:4f:a5:c5:5d:ec:c0:29:11:ca:d8:eb:d1:4c:ce:e4:ef:95:
e5:35:d0:4f:24:c9:97:86:77:6b:c9:47:ad:ac:c0:13:a4:14:
8a:dc:37:2d:d4:2f:c4:83:40:51:00:04:6e:0e:ab:3c:12:95:
32:b6:09:47:3f:41:2c:29:ee:74:50:51:ca:b1:9f:78:15:5e:
6c:ac:84:50:ba:d9:2f:4c:bb:01:cd:42:81:f2:7f:85:57:c4:
ee:82:08:c6:42:a2:50:cf:2c:f6:39:93:c3:9a:27:54:87:e7:
e0:7c:a2:7f:39:54:46:ff:ab:91:f2:2a:db:1f:c2:3c:fd:fa:
7d:35:ea:d4:34:d4:18:e6:d4:8b:1e:a9:3e:b2:63:8f:66:25:
ce:76:f7:e3:21:61:60:c9:12:20:b7:73:14:c0:3e:cd:5c:12:
5f:a6:05:5b:14:e2:81:0e:43:40:84:19:58:8a:54:d9:ed:1c:
11:79:ef:b6:4e:0e:9f:a1:cb:68:c4:4f:15:d9:99:61:db:33:
64:30:61:7d:ba:21:82:ee:7e:8f:54:36:6c:6b:b5:dc:e7:36:
c5:4a:dc:ef
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAbnlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjE3MDczNTAzWhcNMjYwMzA5MDczNTAzWjAYMRYw
FAYDVQQDEw02OTk0MWEyYy0wM2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2j7t4UDl3ajH5dhoItdJyrbg70Xuhg1W7RRxpbOJGKHEGNy7V1KLxMd+
i2FBMb2qOP7EBcER4NfPF0CJZIPjpzgPLNib52kkB7gWnuVPqhGsBHiaQebeKoe0
dDrAh1DonH5LSbEm8m0mqEltumsL4gOvZ9OtpZiDnWOcbO9XhQ+nO1MfIXsY8i3+
UF2uu5in80yV3jaLbyVdDq5CXIKarXtIKHeEyR/NolMu9PYLzd69TLuScab0Qg6c
GXC4YRbzIU2laV7sDyX3QeFnJ8Tv+c/zLFkRe+FSxpXWMXJKZFInYdom+PUGszlK
zpKUGdJSMx6x2bR5QDOxZex6J4KNnwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFGRc
H8A3tXABsF6jqmfvAaJaVHeUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yRUFERTcxMDBCRDMxMUYxQjFFMDJEQzNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAmlKWAwQCmlKoMAwDBASa
VnADBACaVnIwDQYJKoZIhvcNAQELBQADggEBAF3/iZKxUrccuvqrv2uKpyVcfGj6
dwlYwdLvIYGhZ81/06jUiJNPpcVd7MApEcrY69FMzuTvleU10E8kyZeGd2vJR62s
wBOkFIrcNy3UL8SDQFEABG4OqzwSlTK2CUc/QSwp7nRQUcqxn3gVXmyshFC62S9M
uwHNQoHyf4VXxO6CCMZColDPLPY5k8OaJ1SH5+B8on85VEb/q5HyKtsfwjz9+n01
6tQ01Bjm1IseqT6yY49mJc529+MhYWDJEiC3cxTAPs1cEl+mBVsU4oEOQ0CEGViK
VNntHBF577ZODp+hy2jETxXZmWHbM2QwYX26IYLufo9UNmxrtdznNsVK3O8=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:29 2026 by rpki-client