Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69046B76148B11F186BF8ACEDAE4EC9C.roa
File: 69046B76148B11F186BF8ACEDAE4EC9C.roa (raw, json)
Hash identifier: IWBnE54r7OnflTHOZ72TiJHDdYZXUJRMnX4JIA6/b2I=
Subject key identifier: F6:45:43:71:EF:C2:C6:F4:85:3A:61:7D:DA:1C:E3:B7:CD:8E:0D:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC5B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69046B76148B11F186BF8ACEDAE4EC9C.roa
Signing time: Sat 28 Feb 2026 09:54:02 +0000
ROA not before: Sat 28 Feb 2026 09:53:58 +0000
ROA not after: Fri 03 Apr 2026 09:53:58 +0000
asID: 17561
IP address blocks: 154.198.8.0/24 maxlen: 24
154.198.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113755 (0x1bc5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 09:53:58 2026 GMT
Not After : Apr 3 09:53:58 2026 GMT
Subject: CN=69a2bb3a-0970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:35:3e:a5:ce:db:80:86:a9:25:24:ed:19:48:
62:f5:87:8f:2d:b1:ed:79:12:cf:2b:bc:23:3a:f1:
7c:3e:9c:f9:80:29:e6:32:61:bd:19:99:4b:27:11:
b6:36:fd:f0:18:94:15:eb:b6:ed:65:27:13:f8:3a:
fb:cc:1f:a7:9e:12:e6:ad:b8:a7:a1:98:6f:1d:d2:
32:54:98:5e:37:ed:3b:55:64:7a:47:24:c0:80:ac:
ea:10:02:a7:c3:26:88:06:dc:7e:e3:3b:a0:67:c2:
68:b8:5a:a3:b2:b8:ca:d9:43:dd:ea:03:c9:30:1a:
d4:49:50:0f:09:ab:39:fb:62:88:e6:79:2c:92:94:
20:80:41:af:d2:39:8c:72:41:a6:f3:c5:6c:de:ea:
ff:5c:18:ad:f3:aa:aa:d3:6c:2d:d3:16:fe:44:25:
71:6f:21:c0:30:0a:a5:64:59:d7:84:79:a0:cf:29:
c8:09:72:af:80:d0:8e:1b:54:6b:14:7b:7f:51:aa:
01:44:43:c7:96:2b:40:ab:9f:25:e0:37:8b:31:1c:
0a:1f:57:fe:f0:32:43:9e:fb:23:f2:b3:a0:80:7f:
3e:70:c4:91:31:1a:d6:ba:f5:78:58:45:6f:77:89:
22:ab:d8:4b:61:58:93:dc:b1:6f:47:d4:2a:65:1d:
b2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:45:43:71:EF:C2:C6:F4:85:3A:61:7D:DA:1C:E3:B7:CD:8E:0D:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69046B76148B11F186BF8ACEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.8.0/24
154.198.188.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:5c:98:a6:26:d8:70:e6:ca:68:7c:37:7d:da:87:a6:54:32:
16:26:c1:6d:dd:b6:b3:75:ea:b1:6c:93:61:b6:d0:ad:17:91:
a9:ef:85:4f:32:e5:87:74:86:82:05:da:ec:01:c7:de:36:54:
01:85:12:38:a7:87:4f:8e:70:12:a4:6b:70:dc:5f:06:8e:96:
27:8d:64:19:8c:2d:30:de:8c:8c:b0:57:39:1d:c5:cc:0d:5e:
b5:f0:3f:c5:fc:5c:39:7c:10:7a:de:2e:e4:65:a1:e3:7e:c7:
4a:57:5a:f4:ab:21:38:61:cb:81:34:48:fc:0d:5c:5d:8d:21:
7e:c1:44:05:ac:f4:bb:fc:2d:6a:f7:1f:98:d1:4c:48:d8:76:
9c:d6:c8:e1:ac:69:29:e7:35:97:58:32:8b:56:6a:d2:18:56:
06:9b:27:41:58:b2:af:20:72:c4:33:5d:bd:79:59:5d:ec:db:
a6:bf:51:ec:33:22:b2:e2:0b:b2:11:aa:22:39:0a:0b:33:9e:
81:44:6c:ca:05:92:c6:79:17:a1:d8:41:5c:ab:f2:93:3d:55:
3c:c0:bb:b8:fc:33:3b:61:d3:62:fd:35:50:fb:7d:21:71:5b:
d2:51:58:25:69:f6:e0:3a:6a:cf:07:fc:45:ad:b4:6b:00:1e:
c5:bb:c0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:21:07 2026 by rpki-client