Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81765AD40E5511F1AD40F3AEDAE4EC9C.roa
File: 81765AD40E5511F1AD40F3AEDAE4EC9C.roa (raw, json)
Hash identifier: a/v4VP5y49O4ifelnSM7gxHDxa2hFEm2Pnoh6s+SI78=
Subject key identifier: 0A:D9:9F:F1:EB:8B:87:17:AA:98:F3:4C:D9:68:E2:62:CA:AB:22:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA68
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81765AD40E5511F1AD40F3AEDAE4EC9C.roa
Signing time: Fri 20 Feb 2026 12:13:03 +0000
ROA not before: Fri 20 Feb 2026 12:12:58 +0000
ROA not after: Fri 27 Mar 2026 12:12:58 +0000
asID: 138915
IP address blocks: 154.205.140.0/24 maxlen: 24
154.205.145.0/24 maxlen: 24
154.205.152.0/24 maxlen: 24
154.205.153.0/24 maxlen: 24
154.205.154.0/24 maxlen: 24
154.205.155.0/24 maxlen: 24
154.205.156.0/24 maxlen: 24
154.205.157.0/24 maxlen: 24
154.205.158.0/24 maxlen: 24
154.205.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113256 (0x1ba68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 12:12:58 2026 GMT
Not After : Mar 27 12:12:58 2026 GMT
Subject: CN=69984fcf-bc93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b2:86:e2:3f:0d:25:d3:8b:34:43:da:0f:64:
6d:88:ce:e8:f5:f2:4b:bb:87:e2:93:02:91:6c:42:
2b:9e:8b:af:b3:23:e1:7b:77:a9:39:ca:8c:1b:34:
5c:e2:42:8a:7f:4c:50:f7:37:e7:15:0b:92:9b:75:
66:d8:de:72:07:ec:f3:fc:98:2e:58:4b:ef:bd:45:
b5:b2:62:83:39:b8:23:9e:44:80:9e:ba:45:1d:f9:
8c:da:49:17:66:75:97:9a:51:87:6a:ae:74:10:8e:
4b:55:4a:d7:c8:01:4c:c3:4c:c7:e4:5f:dd:d1:95:
dc:ea:d4:3d:cd:60:5e:a9:44:22:2d:3f:f5:9e:42:
3d:35:fb:48:46:d6:fe:a2:68:79:33:17:0f:18:40:
46:78:66:b3:69:d5:4d:5f:c1:d9:af:97:6b:2b:09:
c4:6c:b6:c4:79:9e:be:e0:38:38:3d:6a:5b:03:82:
c8:e7:e5:a5:b4:f7:38:74:67:33:41:76:0d:cf:ed:
20:e6:56:54:17:50:18:54:13:56:ab:e8:e1:12:0c:
a1:5d:9d:34:90:82:0a:3b:4f:91:8e:97:28:50:64:
02:df:f0:99:1a:78:2e:2c:d3:08:d1:09:68:d2:13:
29:a0:d9:1f:f4:4f:6e:aa:f4:27:4f:00:67:f5:e4:
37:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D9:9F:F1:EB:8B:87:17:AA:98:F3:4C:D9:68:E2:62:CA:AB:22:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81765AD40E5511F1AD40F3AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.140.0/24
154.205.145.0/24
154.205.152.0/21
Signature Algorithm: sha256WithRSAEncryption
ba:44:6e:10:3e:f8:d3:42:65:e7:63:bb:b0:49:07:e4:cb:d1:
97:6a:9d:22:6e:1d:be:34:84:1e:d4:c5:c7:2f:9d:2c:27:cd:
d6:f4:77:3f:bf:41:04:a1:e5:1b:af:55:72:81:1b:8c:24:be:
f9:ac:26:ce:a8:a6:6a:69:ac:81:fb:3a:9c:56:85:87:df:71:
03:9d:55:ab:66:58:e5:7f:26:0c:4b:07:55:78:d4:c0:44:e5:
b5:38:25:d0:ef:65:f9:83:13:34:44:6e:bb:84:7e:8b:85:9b:
f6:c5:e6:be:13:26:91:be:0a:87:79:d7:d0:49:35:6e:93:48:
6c:5c:68:81:41:c2:71:8f:2a:b3:32:25:22:9a:77:e5:7b:a7:
b2:ca:d8:70:89:3e:ad:26:11:ed:fd:a8:59:10:b6:11:a1:b6:
7b:76:06:58:a2:56:54:15:76:0f:17:bc:b8:30:2e:79:f3:5a:
1a:5a:5b:a9:11:89:3c:5d:93:35:04:86:ee:92:3e:01:06:24:
3e:9a:21:0d:31:02:ce:44:84:f0:f4:51:91:a0:5f:2d:00:3f:
12:11:b0:d3:7a:ff:c7:13:6a:c6:2f:4c:ae:25:fa:61:72:e8:
0b:a1:57:9a:7c:0b:a3:41:39:68:44:4e:5e:a7:2c:57:3d:e9:
58:70:07:88
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAbpoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjIwMTIxMjU4WhcNMjYwMzI3MTIxMjU4WjAYMRYw
FAYDVQQDEw02OTk4NGZjZi1iYzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAl7KG4j8NJdOLNEPaD2RtiM7o9fJLu4fikwKRbEIrnouvsyPhe3epOcqM
GzRc4kKKf0xQ9zfnFQuSm3Vm2N5yB+zz/JguWEvvvUW1smKDObgjnkSAnrpFHfmM
2kkXZnWXmlGHaq50EI5LVUrXyAFMw0zH5F/d0ZXc6tQ9zWBeqUQiLT/1nkI9NftI
Rtb+omh5MxcPGEBGeGazadVNX8HZr5drKwnEbLbEeZ6+4Dg4PWpbA4LI5+WltPc4
dGczQXYNz+0g5lZUF1AYVBNWq+jhEgyhXZ00kIIKO0+RjpcoUGQC3/CZGnguLNMI
0Qlo0hMpoNkf9E9uqvQnTwBn9eQ3pwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFArZ
n/Hri4cXqpjzTNlo4mLKqyJMMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MTc2NUFENDBFNTUxMUYxQUQ0MEYzQUVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAms2MAwQAms2RAwQDms2Y
MA0GCSqGSIb3DQEBCwUAA4IBAQC6RG4QPvjTQmXnY7uwSQfky9GXap0ibh2+NIQe
1MXHL50sJ83W9Hc/v0EEoeUbr1VygRuMJL75rCbOqKZqaayB+zqcVoWH33EDnVWr
ZljlfyYMSwdVeNTAROW1OCXQ72X5gxM0RG67hH6LhZv2xea+EyaRvgqHedfQSTVu
k0hsXGiBQcJxjyqzMiUimnfle6eyythwiT6tJhHt/ahZELYRobZ7dgZYolZUFXYP
F7y4MC5581oaWlupEYk8XZM1BIbukj4BBiQ+miENMQLORITw9FGRoF8tAD8SEbDT
ev/HE2rGL0yuJfphcugLoVeafAujQTloRE5epyxXPelYcAeI
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:08 2026 by rpki-client