Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/328DE4CC131A11F1BC4AD9F0DAE4EC9C.roa
File: 328DE4CC131A11F1BC4AD9F0DAE4EC9C.roa (raw, json)
Hash identifier: fDszICovd505AdiV+7QvxLnv3Mn0/n49En3poMJf9kM=
Subject key identifier: 29:18:F9:42:51:60:DA:2D:FC:B8:2C:E0:69:C2:FB:F6:9F:5B:F5:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC13
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/328DE4CC131A11F1BC4AD9F0DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 13:51:06 +0000
ROA not before: Thu 26 Feb 2026 13:51:02 +0000
ROA not after: Thu 09 Apr 2026 13:51:02 +0000
asID: 395793
IP address blocks: 154.196.208.0/24 maxlen: 24
154.196.209.0/24 maxlen: 24
154.196.210.0/24 maxlen: 24
154.196.211.0/24 maxlen: 24
154.196.212.0/24 maxlen: 24
154.200.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113683 (0x1bc13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 26 13:51:02 2026 GMT
Not After : Apr 9 13:51:02 2026 GMT
Subject: CN=69a04fca-8cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:33:f3:10:c6:7a:d3:a6:d6:08:47:d4:29:f6:
43:57:a8:97:75:1d:c3:f3:88:2d:ac:2c:c3:13:f4:
17:0d:78:e0:78:2f:51:74:74:68:8f:82:c3:d8:80:
6a:b1:f5:ad:14:8e:ff:3c:eb:6e:ff:61:c7:bc:eb:
87:33:79:f8:9d:40:98:1f:1f:43:88:09:14:eb:0c:
4e:e8:59:00:68:25:16:18:dc:25:04:cd:3e:cf:80:
8a:d7:30:fe:48:09:ac:8c:68:3c:db:a7:95:2e:54:
5a:0f:f2:5f:8c:93:a7:01:7a:ef:62:62:3a:60:0a:
da:c3:20:06:38:2d:47:4a:bd:ce:55:0e:c2:90:c5:
f3:61:b5:60:c6:d7:1f:30:04:4d:5d:71:a1:7f:c6:
dc:06:56:e7:ec:5a:f5:65:10:ce:a4:75:4c:ae:63:
4a:ae:30:68:3c:73:8a:7c:b9:7d:b0:47:00:46:6f:
f3:4f:ab:9f:61:6b:44:5f:04:65:3d:d8:1a:5a:dc:
e2:36:97:7c:19:75:ba:28:85:2b:4c:e1:f4:53:b5:
bc:6f:24:a5:a6:7d:a5:cf:8a:1c:6a:2e:e5:d2:ba:
96:e5:ab:54:f2:f5:c2:c0:c5:09:a1:f5:65:94:f8:
12:66:46:ab:da:4e:ac:45:b2:8e:1e:71:ef:6f:a7:
ae:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:18:F9:42:51:60:DA:2D:FC:B8:2C:E0:69:C2:FB:F6:9F:5B:F5:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/328DE4CC131A11F1BC4AD9F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.208.0-154.196.212.255
154.200.63.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:16:47:7c:e7:42:aa:fd:b5:25:27:c5:5c:9d:ee:74:56:43:
ec:52:a9:5a:c7:e2:eb:9f:f1:c4:fe:47:f1:d3:1b:5a:86:3d:
bc:22:8c:23:d1:00:04:4f:23:f1:e4:5b:46:f6:e9:97:bb:b3:
fe:1a:15:eb:04:7d:34:a7:1a:8b:57:6d:2a:b3:0c:2a:e7:8f:
d0:6e:05:2c:93:36:7c:db:ed:05:42:3f:c2:b3:1b:ae:99:17:
3a:97:e9:11:7c:95:8e:ef:08:76:fa:08:4e:f0:ca:df:b3:0e:
e5:e7:8b:1e:93:69:dc:e1:dc:a5:0b:64:c5:99:d1:df:38:af:
13:ff:f9:2e:f6:9b:a0:1f:91:ff:13:1c:fc:04:71:45:42:12:
75:54:df:3e:f4:27:b1:03:cd:f9:8e:09:a0:68:a5:90:c0:fa:
7e:72:25:82:79:c4:30:ea:f5:94:72:f2:17:5c:65:f8:43:02:
89:4e:b4:67:bf:b7:54:4d:89:d2:7f:07:a9:34:fb:da:b2:c4:
17:1c:6a:3e:28:2c:25:4c:32:b6:8e:66:9d:a1:3f:71:31:43:
65:4f:4f:4c:09:f6:1b:47:6b:b7:69:a8:42:85:5d:e6:27:5f:
3c:da:d0:87:a8:78:56:69:7c:7c:fd:81:bd:94:c3:01:08:00:
43:ff:30:73
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAbwTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjI2MTM1MTAyWhcNMjYwNDA5MTM1MTAyWjAYMRYw
FAYDVQQDEw02OWEwNGZjYS04Y2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvTPzEMZ606bWCEfUKfZDV6iXdR3D84gtrCzDE/QXDXjgeC9RdHRoj4LD
2IBqsfWtFI7/POtu/2HHvOuHM3n4nUCYHx9DiAkU6wxO6FkAaCUWGNwlBM0+z4CK
1zD+SAmsjGg826eVLlRaD/JfjJOnAXrvYmI6YArawyAGOC1HSr3OVQ7CkMXzYbVg
xtcfMARNXXGhf8bcBlbn7Fr1ZRDOpHVMrmNKrjBoPHOKfLl9sEcARm/zT6ufYWtE
XwRlPdgaWtziNpd8GXW6KIUrTOH0U7W8bySlpn2lz4ocai7l0rqW5atU8vXCwMUJ
ofVllPgSZkar2k6sRbKOHnHvb6euFwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFCkY
+UJRYNot/Lgs4GnC+/afW/WjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zMjhERTRDQzEzMUExMUYxQkM0QUQ5RjBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBASaxNADBACaxNQDBACa
yD8wDQYJKoZIhvcNAQELBQADggEBAI8WR3znQqr9tSUnxVyd7nRWQ+xSqVrH4uuf
8cT+R/HTG1qGPbwijCPRAARPI/HkW0b26Ze7s/4aFesEfTSnGotXbSqzDCrnj9Bu
BSyTNnzb7QVCP8KzG66ZFzqX6RF8lY7vCHb6CE7wyt+zDuXnix6Tadzh3KULZMWZ
0d84rxP/+S72m6Afkf8THPwEcUVCEnVU3z70J7EDzfmOCaBopZDA+n5yJYJ5xDDq
9ZRy8hdcZfhDAolOtGe/t1RNidJ/B6k0+9qyxBccaj4oLCVMMraOZp2hP3ExQ2VP
T0wJ9htHa7dpqEKFXeYnXzza0IeoeFZpfHz9gb2UwwEIAEP/MHM=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:32 2026 by rpki-client