Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B3725F00E5C11F19F3ACFD8DAE4EC9C.roa
File: 4B3725F00E5C11F19F3ACFD8DAE4EC9C.roa (raw, json)
Hash identifier: W7op4CzYf1RpKPqUkkpT1Jx+0FUZIHxYMuoo3W3c9vg=
Subject key identifier: 63:69:82:B3:D4:08:EF:3E:75:83:6B:BD:28:E8:B0:26:CB:26:91:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA72
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B3725F00E5C11F19F3ACFD8DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 13:01:39 +0000
ROA not before: Fri 20 Feb 2026 13:01:33 +0000
ROA not after: Fri 27 Mar 2026 13:01:33 +0000
asID: 138915
IP address blocks: 154.206.56.0/23 maxlen: 24
154.206.58.0/23 maxlen: 24
154.206.67.0/24 maxlen: 24
154.206.72.0/23 maxlen: 24
154.206.74.0/23 maxlen: 24
154.206.76.0/23 maxlen: 24
154.206.78.0/24 maxlen: 24
154.206.79.0/24 maxlen: 24
154.206.92.0/23 maxlen: 24
154.206.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113266 (0x1ba72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 13:01:33 2026 GMT
Not After : Mar 27 13:01:33 2026 GMT
Subject: CN=69985b33-61be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:0a:7f:ab:e5:42:57:7f:76:30:23:0e:b4:
dd:9d:dd:b0:82:0a:5a:41:93:08:51:1d:0d:86:1c:
11:31:dd:04:0f:21:3b:d9:76:17:f2:c5:b9:d5:c4:
e9:7a:4d:60:65:58:9a:d1:4e:6d:23:ef:6e:95:0c:
5f:47:d3:da:99:6b:ac:0d:53:4c:0c:74:a1:b9:77:
99:1c:a6:c1:21:3c:3f:b5:66:6a:96:b6:ee:95:cf:
54:a1:84:94:af:0c:64:1b:17:e2:45:fb:fa:42:0b:
b4:1f:94:1c:1c:4b:a1:73:71:4e:0c:07:17:4d:16:
11:cf:43:3c:cb:fd:98:f7:78:1b:8e:12:be:b1:cd:
cc:95:c2:40:27:69:fe:5e:9b:c8:21:ae:8e:61:02:
f5:5e:6a:fc:79:3d:2a:0b:cb:53:52:7c:4c:97:47:
4f:28:14:51:65:82:25:14:38:3e:e4:22:de:cd:fc:
55:0b:51:75:2a:a7:c9:a3:b6:11:99:fa:17:db:b6:
38:2f:aa:f7:63:70:56:46:e6:61:99:2a:40:dc:86:
90:8b:94:22:b9:e9:29:ce:bf:c8:77:89:d0:8d:2b:
d5:b4:c7:5a:eb:8f:18:a1:98:b3:a2:f0:bc:98:76:
f9:1b:b4:dd:92:bc:8a:56:21:cb:4d:02:79:99:45:
ce:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:69:82:B3:D4:08:EF:3E:75:83:6B:BD:28:E8:B0:26:CB:26:91:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B3725F00E5C11F19F3ACFD8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.56.0/22
154.206.67.0/24
154.206.72.0/21
154.206.92.0/22
Signature Algorithm: sha256WithRSAEncryption
46:99:9b:60:a3:a0:0f:25:a1:64:04:a5:1e:4f:82:45:1c:7e:
34:f8:8a:b7:01:08:8f:dd:f3:5a:c9:8e:e7:3f:02:c7:53:4e:
72:1e:70:53:38:ea:44:44:e2:7b:fa:7a:23:6b:9d:da:d8:c3:
e7:63:67:14:89:86:b8:be:5c:4b:13:10:f0:f9:e6:da:77:6a:
35:9d:aa:25:80:09:0b:4b:36:e1:cf:6e:47:ac:9a:a3:90:19:
df:91:8a:02:6c:36:4d:30:eb:cd:53:91:ee:7a:2a:5d:db:aa:
3d:53:f0:6b:09:2c:9e:c9:ac:26:a0:4d:a2:f9:e4:42:90:d9:
dd:55:dd:7d:1e:ed:84:32:6a:7c:01:68:1c:ca:53:d9:96:a0:
1c:c3:11:db:84:dc:95:c3:41:c3:62:27:13:f1:83:59:ca:51:
9f:75:6b:ea:a2:53:22:e2:50:9a:08:ae:50:58:53:e1:52:44:
ee:48:bc:b2:d3:d1:9f:a8:db:d5:60:02:7b:68:4f:af:27:f5:
2e:4f:10:4f:7c:59:0d:e8:35:74:3a:4f:78:17:ee:bf:28:3f:
51:21:9f:4e:80:62:b3:5c:aa:12:5c:40:b4:1b:3a:ce:9d:f2:
09:09:92:7c:66:f6:26:d2:49:c3:4d:fd:bb:c7:22:24:b5:f4:
82:0a:d0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:19:08 2026 by rpki-client