Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60ED15F80E5711F1B09E01BBDAE4EC9C.roa
File: 60ED15F80E5711F1B09E01BBDAE4EC9C.roa (raw, json)
Hash identifier: XFhmmgSQmvJHjjbHfxjsKAjcPwgvGMWm27xe0N9lP6o=
Subject key identifier: 40:F2:05:C0:C1:DB:D0:B0:F7:D2:E5:A7:AC:28:39:D9:5B:31:A8:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA6A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60ED15F80E5711F1B09E01BBDAE4EC9C.roa
Signing time: Fri 20 Feb 2026 12:26:28 +0000
ROA not before: Fri 20 Feb 2026 12:26:22 +0000
ROA not after: Fri 27 Mar 2026 12:26:22 +0000
asID: 138915
IP address blocks: 154.203.142.0/24 maxlen: 24
154.203.143.0/24 maxlen: 24
154.203.144.0/23 maxlen: 24
154.203.163.0/24 maxlen: 24
154.203.164.0/24 maxlen: 24
154.203.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113258 (0x1ba6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 12:26:22 2026 GMT
Not After : Mar 27 12:26:22 2026 GMT
Subject: CN=699852f4-9e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:6d:b5:d7:56:f7:79:c6:51:11:1f:e8:99:
08:00:bf:ea:6a:1c:d9:de:75:96:3e:55:e2:d3:e5:
86:ab:09:c4:e4:ef:92:28:99:51:38:81:69:8d:1b:
c3:ab:87:2b:e9:1a:5a:06:ff:5d:66:74:2e:81:9e:
4c:28:0d:f9:73:af:bf:2b:f3:8d:ae:5c:d3:df:0d:
1d:de:e2:58:5c:6e:44:f8:5c:39:5f:bf:ef:e8:6c:
86:f4:7d:1b:5a:fe:ab:5f:89:92:ce:ae:95:d9:9f:
d0:16:68:d8:bb:6a:c9:e1:fc:49:31:d0:6e:43:44:
63:76:56:b3:85:44:34:75:8b:04:b8:20:de:09:3e:
2b:48:65:1c:8a:3e:ed:e8:a9:24:43:72:54:b4:35:
a9:6f:ab:d7:dc:2d:66:aa:1b:6d:d0:53:65:11:7e:
c5:d4:62:52:66:c1:6d:69:32:f9:f2:6a:ea:bd:4f:
9b:9d:81:1c:68:79:34:cb:38:dd:00:dc:88:e8:28:
e0:bc:49:59:82:8d:e0:80:e3:60:35:74:b7:b5:92:
07:a9:d9:fc:7a:a3:a7:a9:67:47:47:11:6d:01:05:
76:7e:02:f3:34:db:e8:5d:d6:31:24:b7:bc:60:44:
19:8f:21:46:40:b7:98:bf:fc:6e:46:31:9c:62:58:
5c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F2:05:C0:C1:DB:D0:B0:F7:D2:E5:A7:AC:28:39:D9:5B:31:A8:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60ED15F80E5711F1B09E01BBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.142.0-154.203.145.255
154.203.163.0-154.203.164.255
154.203.166.0/24
Signature Algorithm: sha256WithRSAEncryption
00:9e:2a:cc:f4:36:2c:b8:aa:a5:33:e3:b7:f6:ef:38:76:98:
5e:32:2b:a5:e1:6e:56:d8:f6:f8:cc:14:33:c7:d7:97:37:5f:
12:f3:f0:8c:7b:13:fa:80:20:50:33:f8:45:d7:37:16:37:9e:
e7:43:77:6b:c3:87:ca:5b:2a:5c:ea:e1:39:20:47:b0:b9:a7:
96:cd:4d:bd:27:c0:b4:3b:dc:25:05:b3:46:f8:ce:7a:f6:c9:
8b:58:67:eb:83:9b:90:e6:f0:fb:66:c1:a1:f5:84:89:71:de:
c6:f8:50:09:28:49:77:9d:aa:05:3a:43:bb:12:de:1d:05:80:
18:f3:2b:ce:9e:36:da:42:bb:b1:bf:ec:da:ff:d9:ce:a4:21:
a0:cb:af:82:a9:9d:78:69:5b:76:26:49:6a:70:5d:22:3e:51:
29:e2:8c:99:28:f1:32:6d:d8:83:ca:88:96:79:bf:47:3d:c4:
77:8f:44:3e:15:33:fb:8f:e6:71:06:a3:f4:24:0a:13:d6:9c:
1a:b5:75:e9:1d:b3:c7:b6:0d:c0:c3:c2:8a:4e:d4:c5:52:8e:
df:5d:31:10:12:24:e4:8b:3b:84:20:68:8f:94:98:6a:93:35:
7b:00:84:d1:bc:dd:78:23:58:3f:c1:77:e7:48:bc:ab:0f:dd:
c3:8a:5d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:41:44 2026 by rpki-client