Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78CDD4D400CC11F1B49DB383DAE4EC9C.roa
File: 78CDD4D400CC11F1B49DB383DAE4EC9C.roa (raw, json)
Hash identifier: pKlAzUXQGXzHrGMvlrdNOoT3Rf5H2ODOqmGUReRY8n0=
Subject key identifier: 90:F5:E8:F3:CA:4E:E7:0B:42:7F:1B:15:7F:60:E6:A9:A5:A3:56:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B85A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78CDD4D400CC11F1B49DB383DAE4EC9C.roa
Signing time: Tue 03 Feb 2026 06:49:23 +0000
ROA not before: Tue 03 Feb 2026 06:49:18 +0000
ROA not after: Sun 08 Mar 2026 06:49:18 +0000
asID: 45194
IP address blocks: 154.84.193.0/24 maxlen: 24
154.84.209.0/24 maxlen: 24
154.84.210.0/24 maxlen: 24
154.84.211.0/24 maxlen: 24
154.84.212.0/24 maxlen: 24
154.84.225.0/24 maxlen: 24
154.84.226.0/24 maxlen: 24
154.84.227.0/24 maxlen: 24
154.84.228.0/24 maxlen: 24
154.84.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112730 (0x1b85a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 3 06:49:18 2026 GMT
Not After : Mar 8 06:49:18 2026 GMT
Subject: CN=69819a73-8218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:f1:bf:4b:b9:fb:72:6a:41:66:ab:b4:bf:
5d:9a:48:da:77:51:53:fb:30:aa:25:05:34:ed:d1:
75:2f:ca:97:f1:6d:7d:50:4f:eb:db:dd:92:e1:15:
89:9b:f2:1f:e4:38:0a:a8:b2:a3:5f:7c:61:5e:0d:
7e:78:ed:ec:57:94:d1:3a:26:f4:9e:e3:89:eb:e7:
44:31:49:e6:4d:14:9a:14:c4:86:4d:ba:51:53:18:
f2:4e:a8:be:f2:b2:c7:d1:3f:62:96:28:2e:7a:d3:
57:5c:3a:d8:fa:66:3a:f9:7d:4c:91:f1:2a:5f:c1:
af:4a:40:da:de:c6:b9:5c:50:da:23:6b:c4:14:aa:
57:af:51:f2:fb:d9:7d:82:60:39:aa:40:af:e1:14:
dc:0e:22:7e:44:5e:26:fd:b6:a4:c6:54:30:93:7d:
3b:4f:66:1f:ae:4a:6d:1b:6f:b3:24:6f:58:09:23:
a4:1f:76:e3:66:24:1f:77:b2:1c:2e:61:39:8f:f0:
41:22:96:1c:8b:5c:68:c2:28:0f:99:2a:be:83:85:
9e:8d:f5:3f:17:bf:4b:8d:4b:23:cb:d8:92:28:70:
d0:c2:22:b1:79:a7:fc:9a:a0:fe:35:d3:bc:5d:fc:
20:41:77:a9:43:b9:31:32:c9:c0:14:97:ab:4c:8d:
d7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F5:E8:F3:CA:4E:E7:0B:42:7F:1B:15:7F:60:E6:A9:A5:A3:56:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78CDD4D400CC11F1B49DB383DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.193.0/24
154.84.209.0-154.84.212.255
154.84.225.0-154.84.229.255
Signature Algorithm: sha256WithRSAEncryption
9d:5a:a1:e3:b1:41:ab:7b:f1:0a:bf:6e:e4:e1:cf:84:df:5e:
d0:a3:41:db:8b:2f:f2:13:84:17:84:c1:2f:d2:95:dd:74:18:
13:d3:a4:d4:54:e6:a8:32:98:c0:5f:f4:83:f8:3e:e1:43:0e:
67:a0:36:8c:a8:27:6e:19:4f:55:fe:9f:cd:bd:54:68:7c:12:
09:1e:87:36:bb:e6:36:87:97:54:58:79:97:8d:4f:bb:8b:e1:
4a:0e:0e:1a:e3:6e:75:c3:d8:76:34:86:fa:d2:48:03:04:6f:
32:e7:f5:9d:6f:38:0e:2d:fd:23:2a:15:66:1e:72:be:a8:05:
25:34:d4:ff:f8:8c:84:33:06:e3:fd:23:ed:a2:8d:7c:4b:25:
16:af:4f:b2:ce:3f:03:a9:de:18:7e:6d:47:03:f4:cc:3a:67:
be:13:3f:4b:39:e4:ac:eb:a4:d4:3f:a0:d4:a0:cf:1a:33:24:
b4:0b:e7:ce:54:f8:59:cb:de:21:9b:8e:ee:fd:32:0f:d5:05:
d5:e6:bf:f7:55:dd:16:f2:b9:35:35:83:b6:56:79:e5:cc:d9:
33:09:39:82:2e:7d:61:ee:dd:61:08:a0:3e:26:05:11:19:be:
8c:22:a8:74:4a:d9:95:db:03:15:c9:ca:4d:76:6e:44:5d:4b:
1f:7a:3c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:01 2026 by rpki-client