Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E2805140E6F11F1B75EA9C9DAE4EC9C.roa
File: 4E2805140E6F11F1B75EA9C9DAE4EC9C.roa (raw, json)
Hash identifier: 79Bkc6phBklSMXh4cPYCcOMx8plkjj/droqpHFLJC4U=
Subject key identifier: 66:C6:F9:09:45:83:F6:F5:5F:C4:13:55:5E:4F:EA:6C:02:48:6D:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA9A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E2805140E6F11F1B75EA9C9DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 15:17:44 +0000
ROA not before: Fri 20 Feb 2026 15:17:40 +0000
ROA not after: Thu 04 Jun 2026 15:17:40 +0000
asID: 18229
IP address blocks: 154.210.165.0/24 maxlen: 24
154.210.166.0/24 maxlen: 24
154.210.167.0/24 maxlen: 24
154.210.168.0/24 maxlen: 24
154.210.169.0/24 maxlen: 24
154.210.170.0/24 maxlen: 24
154.210.171.0/24 maxlen: 24
154.210.172.0/24 maxlen: 24
154.210.173.0/24 maxlen: 24
154.210.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113306 (0x1ba9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 15:17:40 2026 GMT
Not After : Jun 4 15:17:40 2026 GMT
Subject: CN=69987b18-d70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:46:57:fb:66:d2:45:49:d2:14:fc:fd:ae:87:
12:d8:c8:41:4f:90:6a:1e:79:8c:8f:16:5e:db:13:
6c:74:bb:3b:72:79:fd:9c:c5:01:0c:1a:11:f5:b0:
fa:1d:1a:13:65:e9:c1:ef:a1:a5:1b:02:58:8a:c7:
5a:a7:df:e6:a9:e1:c9:e8:df:c4:99:a8:83:cc:be:
71:70:b4:b0:ee:ba:52:24:1d:8b:bb:93:00:3a:12:
6d:a1:29:60:4b:1b:d8:89:42:00:4f:c7:ca:dd:25:
12:dd:04:77:ad:1c:4e:7d:f4:62:cb:9d:90:8c:2a:
74:9b:9f:4d:ce:14:0d:12:09:a3:99:d1:38:d0:c6:
4f:48:8a:18:7c:0d:86:58:fa:f2:71:c5:cc:aa:81:
ed:7f:11:33:11:4c:fd:00:c0:fe:60:b5:ae:59:16:
20:61:68:ba:c5:21:e4:c2:c0:67:44:5d:c9:1f:4c:
5f:cd:f7:ed:4b:f6:31:fb:6b:d5:2a:99:0b:8d:d1:
ac:a8:63:fe:bb:e5:a1:32:6e:0d:73:cf:2f:d6:fe:
c9:0b:94:2d:e6:f0:54:2a:42:61:0d:28:4b:44:e3:
ba:b1:ca:90:92:98:3f:0a:54:6a:c3:3d:1e:25:bb:
2d:ca:32:f1:a9:97:0c:5c:1a:7f:68:91:c2:bd:df:
fc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C6:F9:09:45:83:F6:F5:5F:C4:13:55:5E:4F:EA:6C:02:48:6D:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E2805140E6F11F1B75EA9C9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.165.0-154.210.174.255
Signature Algorithm: sha256WithRSAEncryption
c4:c4:11:80:d1:d7:33:78:77:bc:23:6d:e0:55:16:00:ab:e0:
8a:37:5d:88:91:ed:a3:3e:ff:72:24:6e:f4:05:1e:74:2e:7a:
86:24:61:1a:a1:8e:2a:d9:0f:93:a0:c1:32:a8:32:f7:60:d8:
18:a3:ee:66:91:cd:5a:53:81:af:91:32:44:fb:4e:2e:10:99:
ec:26:fe:46:8f:7f:9a:b8:8a:fd:9d:0e:19:76:a3:24:70:28:
c7:84:bb:7f:df:7f:56:53:23:0c:ca:67:ef:35:df:1a:c2:41:
46:0f:0e:d4:e5:7a:87:26:e2:d3:66:a1:55:22:35:0c:c5:14:
6d:27:aa:b3:39:e5:e0:ce:d2:75:49:fe:95:a5:f6:09:26:e5:
df:0b:a8:00:80:a8:b6:43:d6:ac:60:d2:d3:2b:d6:62:86:e4:
ed:53:89:ff:66:75:48:6a:93:3a:a9:c2:0c:2f:4f:b1:bc:65:
14:3e:26:4c:1c:a6:24:4a:78:4b:b5:59:6b:a0:46:fe:a5:fe:
cf:11:a6:55:8c:c4:d6:ec:03:7a:a4:ed:95:26:72:3e:b6:69:
0f:84:8d:4b:95:c8:31:40:6d:a5:5f:b9:71:8b:ca:b6:6c:cd:
80:52:48:f6:e4:62:16:2f:ad:0b:47:67:92:4d:a3:d7:b0:af:
81:9b:45:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:37 2026 by rpki-client