Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42BA9A9C2C0C11F1B2C5CAE1DAE4EC9C.roa
File: 42BA9A9C2C0C11F1B2C5CAE1DAE4EC9C.roa (raw, json)
Hash identifier: F6TU46lHdQ8hS8BadSGKeGz6odjFbYQKlqdhGn4hh6c=
Subject key identifier: 70:14:AD:8C:41:16:08:BD:43:4E:3B:65:20:2B:E6:16:D0:DE:EA:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C1AF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42BA9A9C2C0C11F1B2C5CAE1DAE4EC9C.roa
Signing time: Mon 30 Mar 2026 07:44:20 +0000
ROA not before: Mon 30 Mar 2026 07:44:15 +0000
ROA not after: Sat 25 Apr 2026 07:44:15 +0000
asID: 54801
IP address blocks: 154.198.9.0/24 maxlen: 24
154.198.10.0/24 maxlen: 24
154.200.241.0/24 maxlen: 24
154.200.242.0/24 maxlen: 24
154.200.248.0/23 maxlen: 24
154.201.7.0/24 maxlen: 24
154.201.8.0/22 maxlen: 24
154.201.40.0/23 maxlen: 24
154.213.211.0/24 maxlen: 24
154.213.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115119 (0x1c1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 30 07:44:15 2026 GMT
Not After : Apr 25 07:44:15 2026 GMT
Subject: CN=69ca29d4-39a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e5:08:07:55:d9:0c:ee:61:23:5d:40:38:4e:
9c:ed:93:03:62:a0:ef:2a:a4:26:63:f6:bb:b6:a1:
3b:e0:b3:9c:dc:83:f2:92:8b:10:41:ed:a5:11:06:
2b:c6:49:7f:00:4c:9a:14:e3:f4:c4:02:34:7c:89:
87:45:ba:d2:8e:cc:c7:ab:9c:d5:4d:bd:da:46:f7:
0a:d9:57:cd:75:6e:75:c9:e3:27:94:0f:98:d0:7b:
3e:fb:72:cc:39:93:16:7a:29:38:bf:fd:34:27:e6:
4f:02:c2:12:ce:48:c7:92:4c:97:e6:2d:08:b8:b7:
62:b9:d0:0a:73:36:2d:89:73:53:a2:d2:28:6a:80:
cc:6f:51:9f:9a:7a:d3:c1:55:0d:99:0d:73:14:8e:
5e:46:f6:81:ad:c6:56:2e:a2:bc:ee:76:7c:da:df:
37:da:fe:82:06:5d:34:83:be:ae:dd:35:8e:6f:b3:
a3:2f:1f:9b:1b:cf:c7:e5:2e:96:7e:42:5b:01:74:
0d:9b:04:55:6d:1f:10:5a:b4:fd:78:35:e2:66:7d:
9a:e5:0e:47:b4:d2:44:37:6e:07:ad:9f:ea:14:fb:
10:3b:12:7a:be:9c:a0:5c:36:6e:df:f3:71:56:22:
4a:c1:0e:a6:4f:32:4b:b7:5f:92:44:a3:0a:44:6f:
93:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:14:AD:8C:41:16:08:BD:43:4E:3B:65:20:2B:E6:16:D0:DE:EA:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42BA9A9C2C0C11F1B2C5CAE1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.9.0-154.198.10.255
154.200.241.0-154.200.242.255
154.200.248.0/23
154.201.7.0-154.201.11.255
154.201.40.0/23
154.213.211.0-154.213.212.255
Signature Algorithm: sha256WithRSAEncryption
ca:c2:5c:0e:6b:77:fd:34:0f:e2:9c:bd:e5:d4:1e:d6:89:1a:
57:99:7a:57:24:0a:3c:3e:ef:df:6f:45:15:1e:23:79:e6:12:
6f:8f:c8:e5:e0:55:a8:4b:4e:7a:01:14:65:b4:b0:0e:02:43:
97:da:d2:07:2a:ee:40:5e:27:09:2e:ab:c6:e3:7e:9d:36:be:
26:0f:c4:a3:20:24:8c:6d:4d:b0:40:a0:95:3c:8d:25:80:70:
10:28:2b:28:5f:7f:c3:47:33:da:7f:f7:a0:11:8b:92:95:3a:
b7:d8:87:88:ca:1c:68:ba:d9:ab:33:94:dc:6a:a6:44:f1:0b:
dc:4f:ee:82:41:cc:01:88:2c:28:9d:1f:e4:df:5b:2b:23:ac:
b0:6b:ef:d5:a6:1c:33:8b:02:01:6b:58:a8:40:51:41:ba:18:
5e:13:28:b2:ea:3c:09:d5:d1:fa:aa:45:54:0a:72:94:ae:a5:
6c:68:3a:8c:63:b5:c2:90:d1:2d:1d:c1:89:00:61:f0:e3:25:
d4:52:2a:ce:14:ac:e7:d4:5d:35:d7:ae:ba:6d:55:8c:54:29:
81:b5:9e:e2:ce:14:67:42:cd:36:35:21:3d:6b:0c:af:f1:cf:
74:1a:76:59:61:6a:53:c7:9a:5a:f2:88:9d:6c:06:bf:f9:6e:
6e:4c:d4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:10:55 2026 by rpki-client