Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E2DB85A154611F19ACC1DCCDAE4EC9C.roa
File: 4E2DB85A154611F19ACC1DCCDAE4EC9C.roa (raw, json)
Hash identifier: 0sOcvf+y4rSsLeuT+Qg3P3u2OvVkhCrAkv99LMcBs40=
Subject key identifier: 2E:84:13:07:DC:4F:AA:AD:F0:6E:97:B6:FC:C6:5E:A5:04:3D:7C:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC64
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E2DB85A154611F19ACC1DCCDAE4EC9C.roa
Signing time: Sun 01 Mar 2026 08:11:53 +0000
ROA not before: Sun 01 Mar 2026 08:11:49 +0000
ROA not after: Thu 01 Mar 2029 08:11:49 +0000
asID: 17561
IP address blocks: 154.208.160.0/24 maxlen: 24
154.208.161.0/24 maxlen: 24
154.208.162.0/24 maxlen: 24
154.208.163.0/24 maxlen: 24
154.208.164.0/24 maxlen: 24
154.208.165.0/24 maxlen: 24
154.208.166.0/24 maxlen: 24
154.208.167.0/24 maxlen: 24
154.208.168.0/24 maxlen: 24
154.208.169.0/24 maxlen: 24
154.208.170.0/24 maxlen: 24
154.208.171.0/24 maxlen: 24
154.208.172.0/24 maxlen: 24
154.208.173.0/24 maxlen: 24
154.208.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113764 (0x1bc64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 08:11:49 2026 GMT
Not After : Mar 1 08:11:49 2029 GMT
Subject: CN=69a3f4c9-9c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:49:89:90:e2:23:37:8a:f7:6f:41:d4:0c:26:
de:c9:54:76:74:51:ce:e9:dc:b1:9c:06:7c:b1:72:
0a:12:e9:47:13:1f:0d:16:50:8d:07:74:f5:f1:9a:
f9:3d:f4:b0:1c:18:85:b4:7e:cf:f7:fb:43:bd:52:
91:19:cb:a7:eb:cf:bc:79:55:36:f2:5c:04:55:eb:
03:36:3a:06:ec:05:76:9d:e7:e5:df:44:53:ab:74:
4f:a8:36:0d:38:bb:b0:05:dc:0f:cd:6c:0e:4a:25:
22:da:3b:73:ce:ae:c1:76:b5:ae:1f:35:95:c0:65:
db:72:e8:cc:3d:fd:a4:66:74:4f:11:48:83:42:54:
af:09:40:55:04:b3:18:b1:e0:cd:fa:ec:8f:f1:8d:
5c:4d:b0:71:8a:68:8f:85:a6:3d:2c:69:86:37:19:
81:41:8f:26:e1:77:21:d4:91:05:27:4e:94:4b:09:
5c:45:15:fa:20:dd:1c:4f:53:26:01:34:9e:4e:78:
b1:93:95:7f:ef:b2:aa:84:c5:a2:d1:01:f0:46:35:
76:25:f7:1e:ff:c1:51:d0:f3:e5:d7:9c:0a:d0:9d:
c3:6e:38:e7:a1:b2:17:bd:17:34:47:55:0c:bc:b3:
27:1f:93:0d:c5:38:a1:14:15:8c:9e:9f:dd:f1:9b:
4f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:84:13:07:DC:4F:AA:AD:F0:6E:97:B6:FC:C6:5E:A5:04:3D:7C:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E2DB85A154611F19ACC1DCCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.160.0-154.208.174.255
Signature Algorithm: sha256WithRSAEncryption
2e:c0:53:c0:dd:b0:73:2a:ea:96:03:95:88:00:ef:80:8e:fc:
67:cf:9e:4e:e6:c5:29:8e:5f:6e:f6:61:85:ed:6a:f6:b1:4d:
70:ee:ae:89:5a:1c:75:4d:f9:77:a5:ed:06:a0:4e:68:31:f0:
c2:cc:6e:d6:d2:b7:2b:a1:08:f2:21:7b:2f:65:71:fb:70:32:
12:9a:b0:c0:01:ed:31:76:56:f4:67:8a:31:eb:95:86:c7:f3:
53:f4:0b:75:02:1b:73:d5:e7:2c:ea:ff:80:55:fb:39:40:a5:
2f:5c:d2:1d:7f:d8:25:28:58:01:c3:cd:bf:a8:db:93:24:57:
0a:17:9b:30:80:b9:6c:85:27:fe:56:87:eb:97:69:f5:b2:15:
f7:cf:af:ac:b3:96:80:78:ba:42:f4:82:b7:0a:58:ce:db:78:
ff:03:83:2e:7d:c7:e7:69:13:5f:d8:a1:37:0a:1e:e4:9d:73:
03:2d:b7:a5:01:b0:94:fc:f3:2e:97:ec:c9:bf:6b:91:bd:67:
da:4d:22:84:10:46:a2:cb:31:c3:3d:78:18:55:37:19:14:1f:
7f:d2:00:fa:1e:54:0b:83:35:c4:4e:d5:07:b6:bd:b0:a4:68:
60:8a:f0:46:e6:0d:95:fc:68:b4:fa:77:d0:87:9f:33:e8:eb:
23:d1:50:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:46 2026 by rpki-client