Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80F64E542C0811F1A0CF27CEDAE4EC9C.roa
File: 80F64E542C0811F1A0CF27CEDAE4EC9C.roa (raw, json)
Hash identifier: +gmVtE+/BL02zrIrAQXJcBq8nxAxUj7q1LBQbpopXjA=
Subject key identifier: E4:FA:A6:0D:0F:2A:BD:1E:FC:14:14:CD:D8:E5:B7:49:55:C5:A0:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C1A7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80F64E542C0811F1A0CF27CEDAE4EC9C.roa
Signing time: Mon 30 Mar 2026 07:17:26 +0000
ROA not before: Mon 30 Mar 2026 07:17:22 +0000
ROA not after: Sat 25 Apr 2026 07:17:22 +0000
asID: 139613
IP address blocks: 154.201.7.0/24 maxlen: 24
154.201.8.0/22 maxlen: 24
154.201.40.0/23 maxlen: 24
154.213.211.0/24 maxlen: 24
154.213.212.0/24 maxlen: 24
154.222.77.0/24 maxlen: 24
154.222.78.0/24 maxlen: 24
154.222.136.0/23 maxlen: 24
154.222.146.0/23 maxlen: 24
154.223.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:53:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115111 (0x1c1a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 30 07:17:22 2026 GMT
Not After : Apr 25 07:17:22 2026 GMT
Subject: CN=69ca2386-7e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:64:71:d3:4c:b8:71:7f:9a:e5:37:9a:3e:f4:
97:1e:ee:84:d0:61:3d:b2:02:d4:07:ff:21:00:f6:
92:f8:27:17:3b:b5:ab:8d:1f:43:cf:d2:07:2b:37:
5e:9e:40:6f:c0:74:0d:86:94:13:66:0e:5a:ee:2b:
c1:b4:be:b9:c4:59:4d:2c:95:37:d8:bd:8d:76:63:
4e:00:ff:29:d2:e6:9b:08:dc:ce:26:fd:71:ec:49:
a0:07:33:c0:a3:20:f1:24:e2:3c:98:f3:98:a2:19:
62:a7:2f:2b:1b:ef:a9:4f:0f:f9:d1:c0:8d:1a:ea:
9a:f3:9d:f2:3b:5b:b8:f1:bc:dc:56:ea:b0:4e:9b:
7c:4e:b7:df:97:fa:88:3f:7c:e4:da:1c:df:fc:a3:
18:75:a7:22:8e:cb:6a:ea:89:98:53:55:3e:dc:6f:
0a:0d:fa:6c:23:ca:67:07:16:0c:be:71:c9:d1:37:
c3:90:d0:6b:54:29:da:7f:b5:26:47:69:9e:82:44:
3f:e1:c1:b8:fb:a4:93:2f:e2:84:c6:49:58:78:cd:
59:1f:86:3a:e6:d7:37:40:a0:d3:e0:d4:8f:98:2b:
e1:f6:84:dd:7c:5d:d7:0e:90:66:b7:01:3f:99:35:
35:40:b9:db:17:7e:bc:e8:30:a0:2b:ed:b9:6c:a1:
fa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FA:A6:0D:0F:2A:BD:1E:FC:14:14:CD:D8:E5:B7:49:55:C5:A0:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80F64E542C0811F1A0CF27CEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.7.0-154.201.11.255
154.201.40.0/23
154.213.211.0-154.213.212.255
154.222.77.0-154.222.78.255
154.222.136.0/23
154.222.146.0/23
154.223.230.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:58:74:71:ce:03:0b:38:8a:f8:ab:a3:90:4d:19:eb:5e:45:
b0:d2:36:66:ab:45:f2:17:10:67:04:ba:e5:e3:a6:28:a6:f1:
ca:ad:3b:b1:ba:c2:b4:9d:f3:0d:55:94:ac:62:01:39:91:20:
30:b1:7e:61:3c:ce:5d:b0:3d:58:cf:73:06:91:38:0f:e5:72:
f1:55:0a:33:fa:55:49:46:e5:50:d6:f8:4e:61:67:1e:cd:5d:
0b:67:f5:82:76:f2:6e:91:8d:2e:b5:48:fa:dc:54:2c:57:ce:
93:06:4e:9a:5f:e3:35:fe:80:c9:ac:15:ff:63:8a:a1:fc:b3:
b5:5a:00:86:3e:33:33:8c:28:cb:ee:b9:91:c4:d4:e0:b3:01:
9e:82:0d:da:a3:a8:01:7f:85:b2:e3:b9:05:cc:74:bd:b6:30:
38:16:97:97:20:b6:d3:80:f1:82:d7:4d:64:ac:f9:ab:14:ff:
f2:37:7b:b3:d6:0f:5d:6f:ed:f4:97:fe:b7:9e:35:8f:ae:64:
90:ab:ec:7d:59:74:d7:95:89:bb:90:29:67:cf:a4:39:81:24:
78:3d:6c:da:47:91:75:2f:8d:f2:ba:38:67:23:56:29:c5:70:
3e:bf:ab:26:33:21:da:90:e5:af:e6:2b:76:1e:4e:95:79:30:
df:c5:d3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:05:23 2026 by rpki-client