Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66288AAE065D11F18D8B31B2DAE4EC9C.roa
File: 66288AAE065D11F18D8B31B2DAE4EC9C.roa (raw, json)
Hash identifier: dreeWY3GYuAxtqx3Qqqy18iW5UAGted/1VaUuuVdOP4=
Subject key identifier: 6F:24:64:CE:16:83:1A:77:D8:83:3D:F1:73:DA:C9:2C:6C:81:76:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B901
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66288AAE065D11F18D8B31B2DAE4EC9C.roa
Signing time: Tue 10 Feb 2026 08:49:24 +0000
ROA not before: Tue 10 Feb 2026 08:49:17 +0000
ROA not after: Tue 17 Mar 2026 08:49:17 +0000
asID: 153671
IP address blocks: 154.81.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112897 (0x1b901)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 10 08:49:17 2026 GMT
Not After : Mar 17 08:49:17 2026 GMT
Subject: CN=698af114-735b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1f:49:fa:73:c5:d2:a2:7e:df:cb:98:c1:50:
4a:26:8b:35:0e:70:a9:8a:be:e0:05:69:6c:cc:98:
cf:84:01:c6:b9:58:4d:c6:a6:b5:d7:e0:4c:9a:23:
96:3c:51:d6:3a:24:a0:ca:93:90:f7:99:70:99:f9:
8a:98:b0:1c:42:a9:e3:31:5d:d8:07:48:9c:e8:25:
52:b8:68:50:ce:36:e1:8a:c8:ae:fc:44:f6:98:46:
0b:f5:50:7d:56:74:61:9c:2b:c9:49:23:9a:47:c1:
48:a0:a0:cd:52:4f:a5:86:64:74:a8:1c:ce:5c:49:
91:bf:74:a3:25:0c:70:17:ba:ab:1a:99:88:c3:6f:
13:12:9d:3d:cf:2a:f8:3c:89:92:bd:44:21:e8:a3:
44:f4:46:7b:67:63:d8:1f:33:13:7f:93:07:bf:47:
08:e7:a0:62:58:0f:2e:00:e2:d7:51:95:86:1e:0c:
d5:c0:95:0f:cb:6e:79:99:39:e1:3a:5e:cb:51:59:
86:6b:ef:93:d1:df:db:22:2a:bf:2a:8e:a7:b9:68:
56:80:ae:9c:d7:2f:a9:da:3f:9c:a3:df:68:82:fb:
ac:bc:f3:a8:0b:4c:15:3f:aa:1b:2b:7c:f5:02:fd:
52:fe:fe:04:c3:47:3b:a6:e2:10:27:06:62:7c:65:
b6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:24:64:CE:16:83:1A:77:D8:83:3D:F1:73:DA:C9:2C:6C:81:76:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66288AAE065D11F18D8B31B2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.152.0/22
Signature Algorithm: sha256WithRSAEncryption
58:fa:48:b6:e8:fe:a1:6c:15:01:07:76:14:8c:08:fb:97:ff:
ed:96:3f:66:66:d5:21:72:78:99:c1:6a:72:5f:36:15:78:0b:
e6:59:44:3e:4a:7d:4f:8f:4f:ba:0b:2c:52:74:a0:b8:73:d6:
3f:f8:aa:88:9c:40:d2:32:64:14:cc:b6:97:ca:37:86:26:92:
ad:70:b6:fa:30:3b:57:c5:5b:cc:73:4d:1e:4f:16:1b:db:1d:
d4:6e:b6:8e:d2:9a:80:79:60:5b:51:2d:3f:54:4a:2a:69:98:
d7:b9:a5:cd:08:68:bb:89:bb:c8:5c:56:1d:27:7f:b0:39:92:
27:02:d5:e4:ed:b1:69:e4:ad:9a:f3:f9:d4:b5:55:52:62:cb:
8c:ef:c3:07:25:33:c9:9d:ef:0a:b5:31:dd:d4:c9:8d:d4:a1:
f9:50:b6:f1:62:ac:29:ee:41:84:7b:2a:cf:34:5b:5e:37:62:
14:64:92:67:56:ca:40:af:f0:f1:f8:58:d1:4d:05:d6:a7:c2:
0e:a1:df:bf:85:9b:8b:c9:e8:91:a3:43:75:db:95:59:aa:7c:
23:6d:ee:17:02:77:f2:f0:fe:25:f4:0d:e3:bf:20:75:3f:d0:
28:50:10:5e:2c:58:22:9c:6b:f2:74:5a:36:d6:f0:59:5c:bd:
b8:0f:02:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:23:35 2026 by rpki-client