Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/312583520CAC11F1836334F4DAE4EC9C.roa
File: 312583520CAC11F1836334F4DAE4EC9C.roa (raw, json)
Hash identifier: B44xBFIZLJQswem4U/FEbrZLb3IVQjPGUCcgT1bJG40=
Subject key identifier: 00:AA:C9:EF:AD:C8:6F:EF:BE:2B:2D:CC:98:95:89:BF:8E:E3:C9:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA24
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/312583520CAC11F1836334F4DAE4EC9C.roa
Signing time: Wed 18 Feb 2026 09:28:36 +0000
ROA not before: Wed 18 Feb 2026 09:28:26 +0000
ROA not after: Tue 05 May 2026 09:28:26 +0000
asID: 150750
IP address blocks: 154.208.50.0/24 maxlen: 24
154.208.51.0/24 maxlen: 24
154.208.55.0/24 maxlen: 24
154.208.57.0/24 maxlen: 24
154.208.58.0/24 maxlen: 24
154.208.59.0/24 maxlen: 24
154.208.60.0/24 maxlen: 24
154.208.61.0/24 maxlen: 24
154.208.62.0/24 maxlen: 24
154.208.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113188 (0x1ba24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 18 09:28:26 2026 GMT
Not After : May 5 09:28:26 2026 GMT
Subject: CN=69958644-f555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:34:1b:71:c2:d1:08:36:e6:ec:35:e8:22:31:
e6:d4:bf:ff:84:44:18:6b:27:88:1a:74:fa:aa:37:
14:78:50:d4:6e:06:42:9d:46:36:e6:7a:eb:e2:a3:
99:10:80:c8:12:ec:9b:1b:82:ea:51:dd:45:44:5e:
b9:1a:6a:05:6f:75:2a:36:a3:21:e9:59:0d:02:11:
2d:3d:67:24:c0:72:70:95:6b:28:ab:5f:24:52:99:
48:7b:ef:b8:01:f0:ed:1a:4d:6b:c1:d0:bb:08:2c:
79:98:29:e4:0e:37:52:0b:47:43:e5:35:1a:52:7e:
e3:f7:43:86:01:09:4c:14:d1:0f:d8:25:f7:99:32:
b9:47:e1:db:af:a6:e9:03:77:6b:3e:85:8e:e7:d1:
28:b9:35:31:1a:3a:ce:d9:72:06:84:a2:0d:59:ac:
62:aa:e3:f8:8f:27:25:8d:84:e0:71:e4:a2:41:1e:
d5:da:e7:75:54:a2:52:31:f2:39:df:a0:17:73:0b:
57:60:c1:9c:85:7b:a6:d8:c3:c6:f4:52:12:18:60:
11:ee:15:85:4b:c4:85:af:79:fb:23:40:68:69:62:
ba:81:a5:19:81:74:5a:09:25:64:f5:71:53:d0:c4:
e3:5e:59:10:97:91:ca:9c:aa:53:24:b5:ea:bd:b6:
55:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AA:C9:EF:AD:C8:6F:EF:BE:2B:2D:CC:98:95:89:BF:8E:E3:C9:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/312583520CAC11F1836334F4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.50.0/23
154.208.55.0/24
154.208.57.0-154.208.63.255
Signature Algorithm: sha256WithRSAEncryption
a4:90:1b:3c:80:49:71:c5:53:ce:ad:45:f3:32:6b:21:ac:d8:
78:ab:6b:d4:05:66:f9:1e:6d:8f:30:20:02:4e:ef:d9:67:f1:
4a:97:0a:95:99:0e:93:4c:bb:bf:2a:7b:20:0f:f0:db:a6:e6:
ed:f7:bc:9e:11:7d:bb:5d:25:2d:b4:8e:da:b9:1d:f3:8d:1c:
e1:bf:a6:49:32:08:3f:ba:06:28:34:4d:ae:ef:32:b1:19:8a:
88:0c:e5:10:23:0f:59:c4:de:43:9f:fc:5f:11:be:60:7b:d8:
85:b7:41:49:ee:fc:14:c2:d4:8a:f7:83:1b:10:97:32:99:ed:
91:2d:8e:9f:e4:37:6f:1c:da:09:71:59:5b:da:c1:70:54:f8:
fa:63:77:6f:1f:db:92:a5:d1:fa:43:94:55:3d:eb:1d:7f:84:
a7:9f:41:25:12:60:40:34:db:25:b0:de:7e:f5:53:c6:27:01:
53:57:93:44:ce:53:e3:e6:fb:34:c0:53:17:25:04:49:c0:36:
36:66:1c:41:69:c3:b3:97:a4:93:52:78:b9:e8:cc:99:c4:ec:
72:a2:ac:63:01:ed:26:b5:0a:d3:92:e1:86:c3:c4:b9:ac:30:
d7:7c:e8:81:24:da:2d:d6:cd:8a:0b:e8:6c:52:6b:d7:de:57:
6f:74:03:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:23 2026 by rpki-client