Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69BC6CE4131911F18F9BABECDAE4EC9C.roa
File: 69BC6CE4131911F18F9BABECDAE4EC9C.roa (raw, json)
Hash identifier: DAI+3l5w327xhV93IV1shnXbjFW3LBwXYMBTzcG8XIw=
Subject key identifier: 1F:D7:BD:14:47:29:7D:74:29:26:6A:AD:87:CA:13:FA:57:5C:00:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC11
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69BC6CE4131911F18F9BABECDAE4EC9C.roa
Signing time: Thu 26 Feb 2026 13:45:30 +0000
ROA not before: Thu 26 Feb 2026 13:45:25 +0000
ROA not after: Thu 09 Apr 2026 13:45:25 +0000
asID: 395793
IP address blocks: 154.194.208.0/22 maxlen: 24
154.194.212.0/23 maxlen: 24
154.200.55.0/24 maxlen: 24
154.200.56.0/22 maxlen: 24
154.200.56.0/24 maxlen: 24
154.200.57.0/24 maxlen: 24
154.200.58.0/24 maxlen: 24
154.200.59.0/24 maxlen: 24
154.200.80.0/21 maxlen: 24
154.223.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113681 (0x1bc11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 26 13:45:25 2026 GMT
Not After : Apr 9 13:45:25 2026 GMT
Subject: CN=69a04e7a-d4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8f:d6:ec:95:e0:e4:52:4d:9d:99:2b:18:8b:
28:c2:54:f4:13:1b:3d:1a:cd:83:49:b4:03:b5:78:
9c:a9:4a:d2:94:60:8c:b2:93:d0:03:1e:31:d0:87:
61:d5:ab:ba:3a:36:df:64:0f:22:eb:c4:b6:d0:dd:
3c:2b:77:e8:ba:f7:45:03:cd:b0:d2:87:2c:50:b0:
7e:44:39:9f:35:54:14:e7:67:89:74:e9:64:29:e7:
17:11:f4:7c:a7:98:d9:cc:e7:ca:0f:8d:34:28:7b:
62:ab:8f:98:41:c2:6c:fe:73:87:e9:2c:ac:54:5e:
97:dd:7f:97:7b:73:ab:c2:d1:e6:89:71:6c:d3:d2:
52:f3:fa:e6:13:43:c6:58:3f:c2:51:44:25:ce:b1:
33:ce:aa:90:e6:d7:a6:b5:89:bf:d8:fa:64:34:da:
b9:47:25:52:77:a4:1e:0e:91:17:98:87:04:37:48:
08:32:08:90:cf:b3:8e:06:24:70:9d:98:75:f5:18:
e4:e8:b6:3b:f8:a3:17:6e:36:88:4c:07:e3:48:71:
06:de:76:f6:e4:db:ba:50:41:da:db:a0:03:f3:04:
c7:d6:5e:72:27:98:4d:c9:0c:89:5f:85:85:5a:79:
d0:e8:38:e8:ed:fc:1f:32:a8:47:53:2d:e5:04:c3:
40:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D7:BD:14:47:29:7D:74:29:26:6A:AD:87:CA:13:FA:57:5C:00:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69BC6CE4131911F18F9BABECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.208.0-154.194.213.255
154.200.55.0-154.200.59.255
154.200.80.0/21
154.223.248.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:f5:6b:7f:03:70:74:6f:e3:35:4f:2e:1c:1c:0c:18:9c:27:
3f:f9:5c:d8:2a:a4:57:96:7c:d8:f8:84:fe:8f:9b:ad:93:54:
77:44:61:7b:0f:68:3d:09:68:cf:32:1e:99:1b:59:3b:74:63:
b4:ee:5a:a3:0a:e4:60:ba:5e:50:d4:97:8e:7c:88:6c:fc:21:
00:29:9a:78:cf:86:05:5e:4b:a2:ef:ee:5c:a6:8f:7d:d3:93:
ba:71:8a:86:f0:f8:cb:97:20:48:7d:67:79:b5:22:b3:6a:55:
64:f6:fe:21:10:d4:2c:d0:17:87:f4:93:ad:cf:b9:7b:90:c4:
85:f1:1a:b9:14:f2:e5:78:c3:d7:0d:a0:b9:3e:c3:9a:84:d2:
13:76:d1:8b:c0:08:5c:66:98:66:00:9d:ea:e6:4e:16:46:72:
71:8d:ce:1f:07:5b:85:53:35:43:03:c3:fd:41:dc:e0:4d:e8:
48:8f:d3:ae:76:f7:6b:15:bd:b6:be:f1:42:9b:94:03:cc:1e:
4b:9c:f3:42:9c:73:96:17:7e:b2:69:20:a2:78:08:a0:8b:d3:
84:4a:bd:75:33:9b:1b:42:96:4a:7b:cb:91:6d:8f:4b:f2:3e:
a2:50:b6:86:8f:77:65:dd:84:7a:70:ee:8c:36:bb:19:4a:eb:
39:d8:96:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:55:32 2026 by rpki-client