Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57F1FD4C123F11F1A9BA2EB9DAE4EC9C.roa
File: 57F1FD4C123F11F1A9BA2EB9DAE4EC9C.roa (raw, json)
Hash identifier: W3xgEjWDcxsAziI0WLXGNSCpiHESc9QbDQqKsqVagz4=
Subject key identifier: 84:58:AF:2D:B7:F9:3E:69:81:77:80:C6:B3:63:E8:3A:5A:31:F9:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BBB9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57F1FD4C123F11F1A9BA2EB9DAE4EC9C.roa
Signing time: Wed 25 Feb 2026 11:44:29 +0000
ROA not before: Wed 25 Feb 2026 11:44:25 +0000
ROA not after: Wed 04 Mar 2026 11:44:25 +0000
asID: 137443
IP address blocks: 154.223.168.0/22 maxlen: 24
154.223.176.0/22 maxlen: 24
154.223.180.0/22 maxlen: 24
154.223.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113593 (0x1bbb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 11:44:25 2026 GMT
Not After : Mar 4 11:44:25 2026 GMT
Subject: CN=699ee09d-f314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b5:a1:91:6e:3f:36:fe:93:df:df:a3:0e:47:
e8:9b:60:5a:20:0a:90:83:9e:b6:71:f9:1f:b2:17:
62:8e:32:7d:b9:5c:6a:df:44:88:a0:f7:b8:e8:b6:
fb:c9:dc:de:8d:4a:03:55:23:49:09:91:9e:59:6d:
14:e4:f0:60:db:87:25:c9:7e:3a:bb:9d:8c:4b:fa:
26:fc:0f:b8:a4:ba:d6:de:9a:a1:b7:5d:6e:22:3f:
5a:99:df:18:c2:a4:34:27:3f:a3:59:54:84:a2:4e:
99:92:70:29:e6:3c:3c:82:6a:62:5a:b9:e7:a4:84:
cb:e1:6c:c5:32:b4:bb:96:2a:e0:d8:a0:a6:07:55:
ea:cd:13:eb:b0:d2:fa:94:c2:9d:c5:6b:e3:67:12:
90:42:ff:e4:d0:ef:4a:5f:0c:33:aa:fb:5d:88:e3:
d5:86:38:48:96:48:55:2e:f8:b9:f5:72:1d:2c:b7:
15:63:32:33:91:be:4b:10:20:ce:8b:13:d6:3b:ec:
b0:63:85:b9:30:10:c1:1e:3a:87:a9:80:cc:8c:9c:
ca:a4:20:50:30:2a:04:c7:2a:2e:a2:d9:d9:65:86:
c7:d8:e7:f3:ba:70:2c:6b:e4:f5:2e:7b:8d:1f:34:
64:f3:98:6f:74:87:1a:5f:b8:c9:4c:f3:cf:6e:2a:
84:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:58:AF:2D:B7:F9:3E:69:81:77:80:C6:B3:63:E8:3A:5A:31:F9:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57F1FD4C123F11F1A9BA2EB9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.168.0/22
154.223.176.0/21
154.223.188.0/22
Signature Algorithm: sha256WithRSAEncryption
01:95:6e:bc:62:4e:c2:59:90:3d:a8:e8:1e:79:f8:bb:05:f6:
a3:cf:67:6d:f0:37:de:49:cc:71:62:0e:c4:85:a1:18:5d:bf:
b5:64:8e:ac:e5:ad:7e:72:6f:db:3e:b1:3b:3f:0b:4d:66:38:
26:a5:eb:cf:92:e9:22:78:8c:cf:c0:66:23:18:54:d6:33:8a:
be:b1:a2:5c:ff:b3:17:a0:2b:ae:a8:0f:1d:c8:ca:ac:a8:c6:
fa:de:4b:01:bc:15:20:33:b9:80:60:24:05:b2:f4:23:0e:a4:
6d:31:e7:e7:38:e7:be:61:62:92:01:01:24:f2:d8:da:dc:4d:
34:07:8f:38:af:71:7d:c1:89:3d:4f:6f:e0:c6:d8:64:dc:9f:
7e:c8:a2:8e:41:06:d9:95:26:2c:8b:42:e9:e3:d0:b2:0e:28:
5c:7a:65:f7:3a:4f:0e:a0:6c:2f:6c:6c:67:0e:a4:44:83:c1:
96:49:c3:5a:ac:07:41:4e:2b:99:bd:db:28:e6:36:f2:0c:e1:
7f:fa:85:55:ea:6d:0f:0b:18:46:f7:e1:30:73:98:b2:a6:26:
31:b7:97:7e:ea:31:f7:31:d8:17:f7:4d:0e:10:54:1a:e4:61:
0d:19:3d:e2:d7:70:72:ec:98:d0:a3:d5:b1:ce:a7:cc:b2:d1:
d6:cc:c4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:10:01 2026 by rpki-client