Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/450C2DDC0EF811F19271399CDAE4EC9C.roa
File: 450C2DDC0EF811F19271399CDAE4EC9C.roa (raw, json)
Hash identifier: tzTQN/2mdG86uHDS33SyQREIBKUxzLBncaRKHW6wOgg=
Subject key identifier: 25:8F:1A:13:71:4A:BF:BF:9E:64:4F:35:C8:15:D4:93:0B:CE:D9:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BAC1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/450C2DDC0EF811F19271399CDAE4EC9C.roa
Signing time: Sat 21 Feb 2026 07:38:10 +0000
ROA not before: Sat 21 Feb 2026 07:38:06 +0000
ROA not after: Fri 27 Mar 2026 07:38:06 +0000
asID: 63139
IP address blocks: 154.94.69.0/24 maxlen: 24
154.94.70.0/24 maxlen: 24
154.94.71.0/24 maxlen: 24
154.94.72.0/24 maxlen: 24
154.94.73.0/24 maxlen: 24
154.94.74.0/24 maxlen: 24
154.94.75.0/24 maxlen: 24
154.94.76.0/24 maxlen: 24
154.94.77.0/24 maxlen: 24
154.94.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113345 (0x1bac1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 21 07:38:06 2026 GMT
Not After : Mar 27 07:38:06 2026 GMT
Subject: CN=699960e2-756e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8e:f3:0a:6f:d0:91:e7:ca:d3:c8:31:ec:9d:
33:0a:5a:75:f4:a4:c1:a4:cc:8e:7a:77:4d:16:36:
74:3b:14:89:75:62:2f:7c:10:d7:45:2e:81:56:49:
a6:fe:d5:47:3c:62:a5:7c:f9:34:c2:80:1c:81:0c:
1e:dc:3a:b4:07:71:2d:af:45:d6:fc:63:05:69:93:
39:c5:35:c5:eb:b1:74:d6:0f:2b:8c:9e:0d:4d:d6:
3f:45:2f:60:ee:74:4e:62:ae:69:d5:d8:19:68:c5:
65:66:7b:02:55:f8:60:97:da:3d:6d:e5:ec:c5:a1:
cd:58:ea:15:23:c1:ed:71:17:28:03:64:81:3a:ba:
5b:12:28:58:bd:93:a7:b2:30:8d:e4:13:71:b7:cc:
0a:3d:1c:3b:13:42:78:dc:42:5a:99:86:3f:24:2e:
05:68:90:e3:a9:27:5a:fa:3d:6a:51:d8:6c:c0:4a:
03:ad:bc:29:39:73:e4:48:95:c9:57:f1:d9:84:07:
e2:13:bc:59:51:0f:ec:6c:c7:9f:47:01:e3:b2:91:
4d:af:10:29:7c:78:e5:63:ad:27:f1:3a:18:c3:d1:
7d:aa:8d:3c:56:92:f4:b7:b0:65:b8:d0:c2:92:bb:
d5:a5:7e:80:5b:4f:0c:85:ae:c4:9f:fd:7c:3a:ba:
36:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8F:1A:13:71:4A:BF:BF:9E:64:4F:35:C8:15:D4:93:0B:CE:D9:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/450C2DDC0EF811F19271399CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.69.0-154.94.78.255
Signature Algorithm: sha256WithRSAEncryption
27:5b:9b:8c:ca:76:e0:80:1e:68:cd:d7:12:62:38:29:dc:08:
41:92:96:f2:70:ee:32:f4:ed:dd:a8:0f:68:6b:6f:fc:71:e2:
3d:fd:82:3d:1e:20:6d:f4:d9:e1:45:70:41:a6:cb:43:7f:cb:
e5:b7:e6:b6:5e:1f:b6:6f:6f:85:d5:e0:3f:fe:ba:dc:0b:08:
bf:87:0b:62:9b:b0:2c:09:21:0c:2a:bc:cc:64:43:39:dd:ac:
82:2e:d9:f1:be:ad:5e:b5:c7:dc:70:55:25:19:38:3e:2f:5a:
4b:70:6c:73:39:41:15:3f:20:a0:ea:d1:55:67:c7:6b:9e:c2:
f5:e9:86:7c:e2:34:47:b1:b2:29:f5:a8:d6:3e:87:72:14:e6:
28:20:e4:39:0c:79:e0:27:b4:0c:6a:69:e5:88:3e:43:4b:bb:
1a:11:6a:b9:0a:af:bf:04:74:2b:19:98:84:a8:ba:ab:d4:6d:
ca:a9:4c:39:28:e8:9c:db:f0:3e:c6:ec:67:e3:a2:dd:94:ed:
69:07:58:5e:a0:d2:d8:c6:c4:42:03:ee:9f:58:cf:20:3c:4b:
1a:45:af:75:f9:d1:3e:52:c1:66:2a:80:f1:d7:c2:26:82:5e:
45:b1:06:04:1f:38:56:0f:0e:3c:e9:6f:a5:c4:ae:ee:90:6c:
9d:75:3e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:15 2026 by rpki-client