Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/523D83A40E3311F190C0A4E1DAE4EC9C.roa
File: 523D83A40E3311F190C0A4E1DAE4EC9C.roa (raw, json)
Hash identifier: y5zl0kO00z5LJlQu7gBDgrD65mnw1EQYDRsoyV5WCK4=
Subject key identifier: B8:23:8F:DA:49:F7:3B:C1:46:5F:6B:10:57:DB:43:55:16:FB:F0:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA42
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/523D83A40E3311F190C0A4E1DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 08:08:21 +0000
ROA not before: Fri 20 Feb 2026 08:08:17 +0000
ROA not after: Thu 19 Mar 2026 08:08:17 +0000
asID: 11404
IP address blocks: 154.194.236.0/22 maxlen: 24
154.199.96.0/19 maxlen: 24
154.199.128.0/19 maxlen: 24
154.211.192.0/20 maxlen: 24
154.211.224.0/19 maxlen: 24
154.214.16.0/20 maxlen: 24
154.215.16.0/20 maxlen: 24
154.215.32.0/19 maxlen: 24
154.216.16.0/20 maxlen: 24
154.222.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113218 (0x1ba42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 08:08:17 2026 GMT
Not After : Mar 19 08:08:17 2026 GMT
Subject: CN=69981675-ef8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:dc:3c:c8:3d:11:59:14:6e:43:16:b5:d2:ae:
64:2e:87:c9:b7:4d:f6:92:14:ff:ca:53:60:85:f6:
be:4c:5a:f6:22:5e:01:17:e8:7e:ec:15:e8:0a:a8:
b6:bd:ac:45:1a:52:7b:1f:3a:1e:99:79:b9:43:42:
16:0b:b8:5a:7b:95:6b:2e:b8:cb:c2:16:9f:82:83:
25:f7:29:81:fa:86:71:87:85:a8:69:ba:2c:64:46:
d4:f3:22:9b:67:7d:dc:a8:0c:76:9a:b8:7a:8b:ba:
90:9b:af:b0:8f:cc:75:ad:f6:e8:9e:7f:8f:78:dd:
e2:10:72:fc:44:c1:4d:dd:ff:32:c2:35:8f:53:82:
b2:b9:82:46:d1:f4:53:81:b9:7a:f1:59:32:48:95:
9c:ca:27:9e:6f:38:bf:a5:a6:1f:72:11:4b:eb:c5:
ef:e9:16:37:ff:78:dc:fb:01:c8:47:cb:af:d3:41:
2e:d8:27:12:e1:5b:66:6b:e1:00:87:46:f7:14:76:
f5:c4:9a:1b:e7:5e:fc:97:53:e3:ea:9a:15:52:fb:
fc:51:df:48:5e:21:b6:f4:c8:a8:c2:66:d2:e0:fe:
19:28:04:d4:98:d1:9d:4c:24:27:3d:0d:23:db:e1:
3c:90:ff:00:6e:df:f9:d7:58:8e:ad:6c:29:7e:6a:
6e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:23:8F:DA:49:F7:3B:C1:46:5F:6B:10:57:DB:43:55:16:FB:F0:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/523D83A40E3311F190C0A4E1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.236.0/22
154.199.96.0-154.199.159.255
154.211.192.0/20
154.211.224.0/19
154.214.16.0/20
154.215.16.0-154.215.63.255
154.216.16.0/20
154.222.160.0/19
Signature Algorithm: sha256WithRSAEncryption
13:c7:8e:f0:2e:ad:30:ff:3b:e8:dd:5a:26:7e:33:4a:4c:6c:
9e:cd:40:c3:34:b1:67:75:48:56:ac:e4:9f:4a:da:51:7b:c1:
12:ad:30:e5:02:5f:4a:67:ee:8e:5f:3a:e3:b7:73:2a:da:cb:
9c:5d:56:17:c0:ad:d1:09:94:90:65:d3:71:c7:38:48:b5:04:
b1:89:f6:ed:64:d5:0c:6e:ed:50:4b:7e:d5:0d:f2:80:bc:29:
b2:78:be:fe:d4:31:52:18:c9:90:75:f4:53:a3:68:07:95:ea:
c5:fb:31:50:51:4b:c5:5a:0e:28:4d:f9:a8:ba:5d:f0:86:94:
ef:ae:46:21:f0:40:ec:28:c6:61:af:d3:72:56:19:bd:7d:91:
74:7b:17:8b:2a:3f:08:37:2c:e4:ae:df:63:23:38:52:9b:7d:
c3:47:51:95:44:7a:12:7d:76:32:6a:33:36:ff:f1:62:f9:08:
1c:31:32:9e:39:91:6d:13:6a:b7:95:0c:70:3c:66:45:e1:a4:
4d:f4:03:e0:08:d7:d2:19:26:cb:7e:84:54:7d:23:cb:fc:14:
90:67:4f:96:d9:02:91:f5:75:91:58:04:67:9c:fe:60:d4:b4:
f0:d3:e6:df:8f:f0:7d:b0:d1:9a:b5:9f:0c:fe:e9:a8:fe:66:
0f:8e:cc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:40:25 2026 by rpki-client