Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/608B810013C811F193EBAAA2DAE4EC9C.roa
File: 608B810013C811F193EBAAA2DAE4EC9C.roa (raw, json)
Hash identifier: XgnR2ykZa3Q04JYCaW5CmItu2J+g4FZle83Gw10afDY=
Subject key identifier: 42:16:23:14:50:AD:52:FC:C4:12:08:1E:87:EC:E0:B6:E3:7D:6B:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC42
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/608B810013C811F193EBAAA2DAE4EC9C.roa
Signing time: Fri 27 Feb 2026 10:37:56 +0000
ROA not before: Fri 27 Feb 2026 10:37:52 +0000
ROA not after: Sun 08 Mar 2026 10:37:52 +0000
asID: 6079
IP address blocks: 154.83.195.0/24 maxlen: 24
154.88.41.0/24 maxlen: 24
154.88.53.0/24 maxlen: 24
154.88.54.0/24 maxlen: 24
154.88.56.0/24 maxlen: 24
154.88.57.0/24 maxlen: 24
154.88.58.0/24 maxlen: 24
154.90.174.0/24 maxlen: 24
154.90.175.0/24 maxlen: 24
154.90.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113730 (0x1bc42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 10:37:52 2026 GMT
Not After : Mar 8 10:37:52 2026 GMT
Subject: CN=69a17404-1b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9e:75:29:da:70:42:77:8b:15:02:0f:e9:24:
b2:00:7a:31:1d:e3:29:7c:1c:44:5f:41:41:66:40:
db:8e:0a:d6:0d:f1:16:e0:7e:99:2c:f0:72:9b:d7:
8e:47:4e:3f:c0:21:0a:df:77:f2:35:0f:fc:67:27:
2e:aa:44:d6:b5:ff:70:40:8c:8b:c8:78:40:5f:6f:
26:bb:6d:82:e1:b9:bf:c6:ca:bb:eb:66:65:71:29:
b5:80:05:46:9b:46:b6:dc:46:58:c6:07:c9:57:37:
87:b0:5a:7c:7a:d5:a1:f9:ab:47:f4:a6:a0:bf:7e:
9b:1d:b8:d9:1a:46:a2:ff:dd:77:85:e1:34:e0:33:
5e:6b:4e:6d:5a:76:86:3b:3b:b1:0d:df:a5:cd:05:
14:8b:8c:20:2d:5f:e2:3a:01:cf:12:68:66:77:10:
02:77:72:34:b7:16:48:10:d1:60:09:d3:86:2b:4e:
ac:2b:78:83:2f:60:60:93:91:55:e2:d9:f6:6f:24:
be:ee:09:bc:72:5a:ad:d0:c4:08:a0:87:bd:3b:28:
eb:b9:ab:fa:82:da:50:58:5b:43:51:0f:ee:ec:21:
0e:0d:1e:cd:56:7a:13:b4:94:da:ff:5a:80:99:b4:
a7:2d:a6:cd:81:77:c3:34:f6:37:36:27:4b:94:df:
5e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:16:23:14:50:AD:52:FC:C4:12:08:1E:87:EC:E0:B6:E3:7D:6B:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/608B810013C811F193EBAAA2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.195.0/24
154.88.41.0/24
154.88.53.0-154.88.54.255
154.88.56.0-154.88.58.255
154.90.174.0/23
154.90.188.0/24
Signature Algorithm: sha256WithRSAEncryption
50:19:71:35:4b:3a:dd:97:23:9a:78:d9:ff:c0:2d:7b:76:62:
c0:b8:2b:ed:28:76:c7:21:80:fd:9d:17:2e:3f:f9:dd:31:b4:
e7:90:27:08:2c:b9:30:21:2c:a7:fe:4e:2c:ab:ae:6f:a6:4b:
fb:b1:78:35:e0:bc:35:46:4b:65:7b:4e:80:d9:99:f6:e2:49:
f0:97:27:dc:4b:a5:33:e7:07:a4:a9:78:36:96:55:d6:f0:50:
bc:ee:1c:6b:b7:53:24:08:eb:f5:ed:49:36:e9:e6:77:a0:ce:
c4:0e:8a:c7:15:e9:b3:27:3e:d1:b9:31:15:eb:65:ad:81:5d:
e6:83:d6:ff:01:a3:70:e7:27:82:8e:94:fe:9f:69:44:b3:11:
09:b0:23:e8:ec:b6:f0:08:4d:8d:4f:6a:e6:83:12:f8:11:67:
8b:ef:24:8b:6f:10:40:04:12:5a:79:13:21:db:6a:21:00:0c:
39:31:03:95:7b:ec:f6:19:cd:2e:a4:78:c4:67:a1:58:07:7f:
1b:a5:a2:ca:54:0a:55:1b:0a:84:7e:e8:a1:bf:b6:8d:c6:c6:
47:00:3e:aa:64:89:0e:62:6e:9c:4e:82:ce:91:5c:54:ff:5e:
ab:b2:29:4f:1a:bc:c6:4e:c2:0e:d6:24:87:7d:ff:01:10:8f:
06:3c:a6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:15 2026 by rpki-client