Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6156069A117611F1A89B43E3DAE4EC9C.roa
File: 6156069A117611F1A89B43E3DAE4EC9C.roa (raw, json)
Hash identifier: hpEBhPyeUWyNah95vS4ywNdRpMIu/QspQfNv96QO5/c=
Subject key identifier: D3:3D:7E:08:52:48:90:97:33:90:A5:59:E4:A1:96:46:CC:B8:C5:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB54
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6156069A117611F1A89B43E3DAE4EC9C.roa
Signing time: Tue 24 Feb 2026 11:45:56 +0000
ROA not before: Tue 24 Feb 2026 11:45:52 +0000
ROA not after: Tue 31 Mar 2026 11:45:52 +0000
asID: 62240
IP address blocks: 154.194.7.0/24 maxlen: 24
154.194.38.0/24 maxlen: 24
154.194.70.0/24 maxlen: 24
154.194.71.0/24 maxlen: 24
154.194.86.0/24 maxlen: 24
154.194.87.0/24 maxlen: 24
154.194.88.0/24 maxlen: 24
154.194.90.0/24 maxlen: 24
154.194.91.0/24 maxlen: 24
154.195.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113492 (0x1bb54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 11:45:52 2026 GMT
Not After : Mar 31 11:45:52 2026 GMT
Subject: CN=699d8f74-ff31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:30:c3:77:56:4c:66:b0:ee:05:1c:a5:de:92:
a2:7c:e0:6d:f6:90:05:62:30:e6:14:ea:2d:e9:b4:
be:b9:ab:1a:3b:79:56:2b:f8:45:3d:6b:1c:7b:64:
d8:ce:6b:62:96:f6:64:b9:a9:c2:c3:6e:67:3b:cb:
c0:67:62:75:e9:84:17:d5:0d:de:cb:45:15:52:ec:
52:90:21:07:e7:d7:67:63:28:39:52:e8:24:d1:6d:
fa:ba:1f:4c:e4:48:3b:11:e2:cd:e9:33:1c:81:fb:
21:05:0b:e0:1a:08:18:7f:d0:60:7c:d2:8e:5c:6d:
58:09:b3:58:fa:b5:0c:e6:ca:cb:a4:93:9e:da:c2:
96:08:57:5e:e9:82:76:bf:1f:da:b3:2b:0d:34:c2:
90:43:85:f1:7a:05:06:b4:3b:68:dd:59:ba:3a:da:
fb:b6:63:3c:71:b5:0c:4a:3f:d9:a2:80:f7:fb:73:
d2:ee:b1:9e:2f:10:df:88:11:01:9d:de:a3:50:57:
04:9d:f3:2c:fd:93:05:55:e2:db:ff:3e:db:4c:54:
d0:25:f8:9b:9d:46:ff:2d:a5:94:80:eb:3a:45:ab:
5b:ca:32:08:df:5e:07:30:ad:27:51:62:19:57:51:
84:ed:29:38:c2:21:8e:66:df:9c:95:3d:a9:76:95:
93:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3D:7E:08:52:48:90:97:33:90:A5:59:E4:A1:96:46:CC:B8:C5:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6156069A117611F1A89B43E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.7.0/24
154.194.38.0/24
154.194.70.0/23
154.194.86.0-154.194.88.255
154.194.90.0/23
154.195.0.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:3d:a1:ac:a0:2b:58:78:2b:cb:2a:09:3f:0f:4b:c6:43:54:
9e:48:18:0a:95:ba:7c:42:ed:62:9b:69:77:36:2e:93:0b:e2:
04:79:c5:d3:51:93:66:60:ab:3d:57:1d:94:5b:be:b1:bd:df:
16:a8:0d:a8:da:5a:10:e3:ad:09:29:60:f5:3c:ad:9d:a6:8f:
78:1e:17:85:3b:e1:1e:50:b7:bb:43:24:b9:33:79:12:75:b8:
25:8b:47:74:ec:84:24:a2:e4:b0:3c:09:0c:23:d9:b6:37:65:
e1:e0:47:56:ec:8f:f8:82:a5:1b:0c:31:a5:5d:49:b7:90:b9:
e0:cf:c6:0c:33:50:37:3b:6d:5c:2d:39:ec:27:b0:f8:5f:7e:
8c:06:09:6a:3d:ba:e4:75:66:1f:02:9b:2e:94:47:46:c0:1a:
00:4e:e2:3d:dd:1a:d2:11:04:c5:fd:2e:7b:36:5d:94:1b:c9:
ff:50:98:25:08:0c:ac:c1:f0:ff:8e:c6:f0:81:01:8e:b4:d8:
05:17:b9:6c:cd:cd:b0:7d:a6:7b:16:96:31:d1:b3:13:52:37:
9e:53:e0:76:80:db:a0:05:79:1e:59:e6:04:40:22:83:98:08:
91:d6:9a:6a:c0:7d:5c:b8:d6:c1:53:55:54:66:4d:c8:db:b4:
9e:f3:db:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:57:30 2026 by rpki-client