Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B97EDC600AC11F1952381AFDAE4EC9C.roa
File: 4B97EDC600AC11F1952381AFDAE4EC9C.roa (raw, json)
Hash identifier: Op/o6CHWhQfoKjN1mVdryx/9wIte7EszZDQXzHu0SjM=
Subject key identifier: 3E:C0:5C:37:ED:B0:4C:71:5C:32:87:0F:F2:C3:AD:26:62:0A:68:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B852
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B97EDC600AC11F1952381AFDAE4EC9C.roa
Signing time: Tue 03 Feb 2026 02:59:03 +0000
ROA not before: Tue 03 Feb 2026 02:58:57 +0000
ROA not after: Tue 10 Mar 2026 02:58:57 +0000
asID: 14315
IP address blocks: 154.81.48.0/23 maxlen: 24
154.81.62.0/23 maxlen: 24
154.84.152.0/24 maxlen: 24
154.84.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112722 (0x1b852)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 3 02:58:57 2026 GMT
Not After : Mar 10 02:58:57 2026 GMT
Subject: CN=69816477-c05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:7d:2e:b5:e3:ba:7e:e2:90:ef:a7:aa:d0:
a6:ea:50:b6:1b:a3:ae:ea:2f:a1:ea:75:9c:80:f1:
50:dd:4b:9e:7f:bc:42:fb:3f:64:01:f1:f4:5e:a7:
84:ea:4c:61:7a:f1:98:2b:1a:7f:83:74:f4:d6:f5:
83:d3:ce:65:38:76:90:96:5c:df:a9:19:82:26:97:
9d:79:16:72:08:1a:cb:6d:4a:53:ff:e8:e1:29:f0:
db:71:a7:22:78:26:51:6a:97:b1:d7:52:cc:8f:04:
45:94:58:3f:33:94:9f:d9:aa:71:1b:e4:23:66:e0:
38:e7:9f:bb:89:a9:eb:66:64:8d:ef:f8:12:96:04:
7b:a9:db:db:ce:8a:6b:ba:18:58:2f:dd:46:bb:02:
37:85:1c:94:38:b5:d0:a6:f4:ae:04:65:16:9a:b4:
08:40:b2:f4:9c:56:c0:32:31:a4:c5:41:8d:24:28:
1a:7c:34:b1:13:a4:8e:7f:98:51:be:98:bb:ae:65:
b3:d9:93:86:ae:3d:66:8d:e5:ba:2c:ad:4b:f1:97:
c0:4e:30:a6:ac:e6:f6:5f:fa:f6:ab:0a:8c:3a:fc:
e9:5e:5f:81:a1:c3:d2:d6:6c:7e:11:5e:3b:41:88:
12:c6:ed:e8:f2:ba:8f:cc:0c:69:85:44:fb:2b:e5:
7e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C0:5C:37:ED:B0:4C:71:5C:32:87:0F:F2:C3:AD:26:62:0A:68:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B97EDC600AC11F1952381AFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.48.0/23
154.81.62.0/23
154.84.152.0/24
154.84.154.0/24
Signature Algorithm: sha256WithRSAEncryption
51:f6:42:51:45:f5:f7:6b:ae:3e:cd:f6:80:35:43:e1:21:cb:
69:97:38:14:37:cb:ac:87:00:e8:6d:66:fd:f7:61:b7:3d:c2:
37:4f:e0:dc:76:8d:c1:f0:dc:07:28:b7:51:cd:a1:02:d3:2f:
e6:2c:e6:8d:d1:9b:bc:8c:4b:af:d1:89:a2:06:ca:f0:08:79:
9b:84:81:d8:60:33:72:1e:52:d5:5b:2c:67:6c:21:e0:cb:f9:
31:ac:12:3a:8e:94:6b:10:89:3b:6c:e2:81:36:5a:5d:d4:f9:
61:2a:e7:40:08:ff:aa:fe:32:79:48:76:b7:18:ae:c3:04:72:
70:9b:21:31:e5:8d:08:95:7a:a8:61:07:ba:68:5c:37:76:bf:
60:cc:cb:51:25:63:f5:e8:29:75:e0:d3:78:3b:f2:84:f5:77:
b1:18:18:51:c5:a7:09:a0:ea:ac:92:24:8a:dc:27:fa:37:e3:
a0:fb:4f:47:4d:57:12:9d:29:40:9b:33:52:7e:a9:27:db:b7:
ed:ac:4e:28:4f:58:ee:92:b7:08:d4:5e:f8:25:06:a9:af:1b:
6f:a3:08:78:b2:73:a9:44:64:2b:d4:cd:86:54:20:09:95:9e:
5a:77:5e:5c:e9:c7:26:50:c9:02:51:81:41:25:d8:dd:83:1c:
0f:b6:f4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:02 2026 by rpki-client