Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B0AA21012DE11F1B10C5689DAE4EC9C.roa
File: 4B0AA21012DE11F1B10C5689DAE4EC9C.roa (raw, json)
Hash identifier: zQtAa6nf6KDtmfl8fU2BeGpnh2ctswyVaga3Y10AOA4=
Subject key identifier: C1:57:EA:96:CD:5D:BA:B3:4B:5F:EF:96:BA:3F:F6:05:97:19:ED:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BBDA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B0AA21012DE11F1B10C5689DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 06:42:18 +0000
ROA not before: Thu 26 Feb 2026 06:42:14 +0000
ROA not after: Sun 29 Mar 2026 06:42:14 +0000
asID: 214143
IP address blocks: 154.203.196.0/22 maxlen: 24
154.203.208.0/22 maxlen: 24
154.203.240.0/24 maxlen: 24
154.206.11.0/24 maxlen: 24
154.222.80.0/23 maxlen: 24
154.222.82.0/23 maxlen: 24
154.222.84.0/23 maxlen: 24
154.223.248.0/21 maxlen: 24
154.223.248.0/22 maxlen: 24
154.223.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113626 (0x1bbda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 26 06:42:14 2026 GMT
Not After : Mar 29 06:42:14 2026 GMT
Subject: CN=699feb49-7ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c9:94:c1:1b:c7:2d:64:90:e6:40:5e:78:71:
9a:7c:ad:dc:20:d8:20:fd:ef:5d:74:23:f7:a4:96:
96:40:2c:fb:0c:18:2d:4e:83:b5:aa:29:3f:95:08:
18:17:c2:a2:e7:f4:9f:b2:32:1e:9c:51:e7:a7:43:
1e:6e:76:26:07:b0:23:c8:2d:7a:49:c4:ca:6d:8e:
dd:10:b4:3d:83:7a:c0:65:7e:aa:b5:d2:74:85:61:
1f:e1:31:79:9e:78:11:da:cc:aa:f8:f4:d7:8b:f4:
9f:be:b5:06:3e:68:4b:48:f2:05:ee:fa:cd:36:b1:
4a:3a:fd:c7:5e:f1:6d:36:58:48:ad:16:82:4d:42:
d9:01:46:ac:82:87:2a:bf:04:28:5a:31:39:c5:b1:
e2:55:10:4b:2a:7c:35:0b:b7:b9:6d:ea:7b:f4:35:
99:0e:8a:46:9c:e5:b7:28:14:67:85:c9:af:8a:5a:
9a:4d:1c:87:78:ba:52:84:23:52:51:9f:89:17:bf:
ce:c3:6e:3c:ff:84:32:86:9c:e2:ee:c1:fd:28:bc:
40:e2:99:11:cd:86:cb:2e:f7:f8:9a:6d:85:2d:d2:
45:e7:71:a5:ea:b9:e8:89:a2:85:ed:61:8f:7b:f9:
01:52:81:54:63:d3:3d:24:ba:1c:07:27:d5:4b:4e:
54:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:57:EA:96:CD:5D:BA:B3:4B:5F:EF:96:BA:3F:F6:05:97:19:ED:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B0AA21012DE11F1B10C5689DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.196.0/22
154.203.208.0/22
154.203.240.0/24
154.206.11.0/24
154.222.80.0-154.222.85.255
154.223.248.0/21
Signature Algorithm: sha256WithRSAEncryption
89:e0:75:03:b7:53:c6:62:2f:f5:47:b0:da:e7:c1:a0:fe:0a:
32:9e:b8:00:cb:c8:c9:d3:5a:2e:3c:fd:06:97:d2:64:f0:5c:
4e:ce:4b:c1:19:b3:33:36:6c:7c:7f:9e:11:0b:3a:05:39:6a:
85:25:42:4c:4e:e8:76:6b:fa:20:bd:36:11:c6:a3:2c:66:ce:
b0:0d:d5:61:1d:89:eb:69:cd:0b:84:b9:e1:0c:e3:be:d6:86:
7f:21:1c:8f:a4:20:de:ac:e3:c1:4b:14:a9:b5:b4:13:0e:21:
30:25:f6:2b:58:d1:c5:fc:28:e1:f3:45:ee:5f:f7:41:b0:2c:
26:ff:84:75:07:a2:0f:34:05:c4:4e:04:c1:de:be:42:6b:f7:
5c:52:56:ad:ac:4d:db:2d:6b:0e:ec:fc:f4:2b:d6:38:e2:03:
a3:5e:da:b7:7f:44:e6:c0:4c:5f:dd:9c:7b:4c:57:5b:cc:8f:
30:ff:1e:01:63:21:e7:92:39:98:3e:c4:51:bf:cd:d7:bc:91:
31:f6:d8:94:63:f5:0a:fa:9b:81:dc:c4:87:5b:1b:dd:1e:07:
43:ae:5b:98:ae:e2:27:11:9b:c0:67:de:b0:85:31:f1:8a:70:
bb:b8:45:0e:26:dd:cc:55:68:d2:f5:e6:48:60:44:ba:a7:0e:
fd:1c:8e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:56:23 2026 by rpki-client