Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5DD2CED0155F11F19BEAA6E3DAE4EC9C.roa
File: 5DD2CED0155F11F19BEAA6E3DAE4EC9C.roa (raw, json)
Hash identifier: hR0zHkmWWQBlx5LH+OMlM7Hh6esGIw4o8hR75UeeqfA=
Subject key identifier: 2E:2D:80:2B:5A:A4:70:4F:8F:48:0D:74:48:56:06:1F:20:03:4D:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC88
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5DD2CED0155F11F19BEAA6E3DAE4EC9C.roa
Signing time: Sun 01 Mar 2026 11:11:17 +0000
ROA not before: Sun 01 Mar 2026 11:11:12 +0000
ROA not after: Sun 05 Apr 2026 11:11:12 +0000
asID: 202656
IP address blocks: 154.219.214.0/24 maxlen: 24
154.219.215.0/24 maxlen: 24
154.219.216.0/24 maxlen: 24
154.220.1.0/24 maxlen: 24
154.221.1.0/24 maxlen: 24
154.221.53.0/24 maxlen: 24
154.221.54.0/24 maxlen: 24
154.221.55.0/24 maxlen: 24
154.221.62.0/24 maxlen: 24
154.221.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113800 (0x1bc88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 11:11:12 2026 GMT
Not After : Apr 5 11:11:12 2026 GMT
Subject: CN=69a41ed4-0c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:41:56:98:f0:af:7c:e1:ff:06:4d:a4:0a:69:
ad:b0:3c:e0:99:a8:eb:dc:cf:62:b3:db:b2:86:81:
49:13:17:67:b2:18:45:fb:5d:6d:45:39:6c:a3:7a:
41:9e:a0:a7:b9:a5:eb:a4:c0:fd:70:0c:c4:7b:c0:
ca:1e:a7:b4:b6:5e:9d:4e:37:85:7e:e6:af:b4:0d:
a0:b7:ed:82:a8:a1:66:1e:fa:48:78:09:48:e6:5f:
7b:a2:d0:39:71:85:f4:53:fa:16:7c:09:4b:04:02:
40:d5:4d:65:79:c9:8b:25:7a:d6:b8:2d:35:0e:8b:
49:3e:46:a6:8c:71:73:f6:eb:03:8c:48:9e:3e:9e:
05:79:1f:07:b0:3d:f8:ec:36:d1:95:b0:14:59:18:
b5:3e:43:ec:0d:f4:01:98:68:8d:92:ae:b0:0b:41:
5e:2e:79:42:f9:2a:d2:d9:88:83:9c:1a:e3:86:79:
6a:28:38:9a:88:35:e9:bc:d8:9b:51:a6:d7:c0:70:
a1:e6:b7:a7:c0:84:e1:8a:a9:2b:8f:89:a4:a5:de:
03:54:19:e9:cd:a6:59:22:35:a0:c6:8b:63:3e:43:
17:68:6e:8c:94:ac:69:71:92:66:79:27:6e:c5:88:
fd:4e:7b:f2:9a:e9:db:90:64:a9:79:55:89:2f:1d:
0b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2D:80:2B:5A:A4:70:4F:8F:48:0D:74:48:56:06:1F:20:03:4D:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5DD2CED0155F11F19BEAA6E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.214.0-154.219.216.255
154.220.1.0/24
154.221.1.0/24
154.221.53.0-154.221.55.255
154.221.62.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:07:46:fd:93:3d:f8:94:46:d2:9e:84:6c:08:76:d3:b5:62:
a6:7f:fb:d0:ca:7e:14:20:af:6a:0c:2e:42:2d:18:92:f7:d6:
c9:10:4a:99:28:d3:73:8e:03:e7:8a:67:af:ac:e4:bc:1a:0b:
aa:b5:7d:4f:76:a7:98:fb:1d:d5:28:44:cf:d6:03:75:68:c7:
51:e0:da:25:b6:94:ab:76:39:5b:e2:c8:dd:99:c7:f8:af:e5:
f7:8f:59:03:64:9c:cc:58:14:a9:87:d3:c0:46:f5:5f:60:68:
3e:04:7d:3a:ae:c5:7a:df:8a:2c:f9:4d:a0:1d:86:86:e0:c1:
00:2f:8b:90:75:fa:8b:82:3b:d2:26:e9:ea:93:d6:fb:38:40:
61:10:ee:3b:d3:41:71:54:d6:3a:02:4c:ef:e3:f5:85:33:61:
f9:68:3b:62:43:4d:fe:05:82:2b:54:8a:d3:04:c2:69:42:e8:
fc:2e:a4:46:2c:b9:bc:8f:c0:b6:1f:02:ec:d2:e1:60:11:4f:
76:41:4d:e0:0a:20:f4:15:1f:6f:ae:b5:7c:03:be:9a:ce:3a:
5c:7f:f9:f6:18:79:96:64:a8:af:2a:95:79:52:55:de:0d:d1:
2b:31:f0:87:da:ea:87:51:05:08:5e:76:a8:68:e1:df:b1:7a:
4a:39:ef:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:28 2026 by rpki-client