Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8ABF940412EA11F1B684C9D3DAE4EC9C.roa
File: 8ABF940412EA11F1B684C9D3DAE4EC9C.roa (raw, json)
Hash identifier: std7T7g6Auon7U4utnY5pfQNwcmQg1v9tZdr+AMvmjw=
Subject key identifier: 25:51:F9:35:79:55:18:EC:25:A2:31:60:0F:ED:2D:CC:B7:65:58:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BBF5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8ABF940412EA11F1B684C9D3DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 08:09:58 +0000
ROA not before: Thu 26 Feb 2026 08:09:53 +0000
ROA not after: Thu 09 Apr 2026 08:09:53 +0000
asID: 2914
IP address blocks: 154.83.11.0/24 maxlen: 24
154.92.199.0/24 maxlen: 24
154.92.206.0/24 maxlen: 24
154.92.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113653 (0x1bbf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 26 08:09:53 2026 GMT
Not After : Apr 9 08:09:53 2026 GMT
Subject: CN=699fffd6-e2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6a:3a:bd:d6:68:7b:64:be:6e:da:e9:45:d0:
eb:31:4b:72:96:5f:0e:b5:04:29:ef:fc:78:4d:66:
94:04:cf:79:73:9d:bb:16:83:59:8d:63:86:5d:b1:
50:5e:fb:0d:ce:fc:8c:b3:a0:17:a7:0b:99:33:fe:
37:2b:cf:67:7f:f2:2d:8a:41:14:65:55:4c:e6:25:
35:ad:95:91:aa:aa:64:21:83:93:1c:c0:d9:39:23:
5a:de:6f:39:33:b7:4e:d5:26:5e:35:02:c9:dc:56:
3b:fc:23:6e:40:04:aa:2c:8c:75:3b:6c:95:eb:a4:
71:5d:1e:94:cc:bb:20:85:e1:4b:37:50:74:db:b6:
c9:88:35:5f:2d:74:30:57:fb:90:ae:3b:06:2f:9c:
ce:af:c8:2f:b2:c7:24:28:d4:58:08:0f:01:9e:e9:
cc:5e:7c:4e:58:e7:32:7b:4a:bf:cb:34:99:23:2e:
09:08:a3:94:7b:5f:65:bb:76:1b:7a:70:53:e9:57:
f7:c9:03:95:f1:7c:04:10:a0:2c:87:65:7f:cb:d9:
18:79:39:b4:25:c5:55:98:99:d3:79:02:71:05:11:
18:5c:4b:24:1e:20:34:23:0c:7d:e6:0f:a3:10:fc:
70:a7:b5:9c:65:bd:13:ae:3a:22:36:7f:28:b5:4a:
60:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:51:F9:35:79:55:18:EC:25:A2:31:60:0F:ED:2D:CC:B7:65:58:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8ABF940412EA11F1B684C9D3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.11.0/24
154.92.199.0/24
154.92.206.0/24
154.92.208.0/24
Signature Algorithm: sha256WithRSAEncryption
72:0f:bd:9c:36:ea:0f:5c:1c:ce:e5:5b:33:07:14:19:c5:e9:
8f:d4:b2:34:33:be:49:b9:4b:b9:e3:40:d3:4c:2f:76:c7:7f:
3d:2f:ce:5f:c4:fc:25:37:00:d9:69:89:30:61:0f:dd:cf:a5:
3d:22:5b:55:f6:15:3c:35:95:d3:b2:81:5a:8b:3e:51:46:c2:
a6:92:55:f2:5f:2c:b4:b1:2c:f4:a8:33:a5:4a:3f:3a:a5:0a:
d5:4b:7e:1c:ab:12:7b:a6:ad:f3:02:23:db:d4:1d:52:d4:d1:
19:8b:5d:47:d6:57:d7:96:5d:e7:80:ac:1d:56:14:d9:a3:aa:
e4:b3:42:52:b4:18:b6:da:b4:f0:88:78:c2:1a:30:67:e8:77:
7e:cd:ca:69:bd:6f:ea:1f:fa:3c:f0:05:d7:63:aa:32:0f:f5:
f2:0f:03:44:bc:d5:59:0e:42:c0:4c:01:d8:3e:99:ce:c7:e4:
26:39:94:2c:00:06:3c:07:6d:b3:97:34:fa:0b:3e:ad:6c:71:
da:c7:df:ba:77:02:c2:57:ee:59:f9:4c:07:eb:2c:22:10:5d:
cb:a4:e1:33:25:f3:66:e1:a0:ff:8b:20:a5:bf:4d:35:17:b0:
24:14:76:a2:a9:92:49:10:4b:7b:34:b5:50:d6:62:d6:d3:aa:
73:c9:e9:7e
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgIDAbv1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjI2MDgwOTUzWhcNMjYwNDA5MDgwOTUzWjAYMRYw
FAYDVQQDEw02OTlmZmZkNi1lMmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz2o6vdZoe2S+btrpRdDrMUtyll8OtQQp7/x4TWaUBM95c527FoNZjWOG
XbFQXvsNzvyMs6AXpwuZM/43K89nf/ItikEUZVVM5iU1rZWRqqpkIYOTHMDZOSNa
3m85M7dO1SZeNQLJ3FY7/CNuQASqLIx1O2yV66RxXR6UzLsgheFLN1B027bJiDVf
LXQwV/uQrjsGL5zOr8gvssckKNRYCA8BnunMXnxOWOcye0q/yzSZIy4JCKOUe19l
u3YbenBT6Vf3yQOV8XwEEKAsh2V/y9kYeTm0JcVVmJnTeQJxBREYXEskHiA0Iwx9
5g+jEPxwp7WcZb0TrjoiNn8otUpguwIDAQABo4ICtzCCArMwHQYDVR0OBBYEFCVR
+TV5VRjsJaIxYA/tLcy3ZViCMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84QUJGOTQwNDEyRUExMUYxQjY4NEM5RDNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAmlMLAwQAmlzHAwQAmlzO
AwQAmlzQMA0GCSqGSIb3DQEBCwUAA4IBAQByD72cNuoPXBzO5VszBxQZxemP1LI0
M75JuUu540DTTC92x389L85fxPwlNwDZaYkwYQ/dz6U9IltV9hU8NZXTsoFaiz5R
RsKmklXyXyy0sSz0qDOlSj86pQrVS34cqxJ7pq3zAiPb1B1S1NEZi11H1lfXll3n
gKwdVhTZo6rks0JStBi22rTwiHjCGjBn6Hd+zcppvW/qH/o88AXXY6oyD/XyDwNE
vNVZDkLATAHYPpnOx+QmOZQsAAY8B22zlzT6Cz6tbHHax9+6dwLCV+5Z+UwH6ywi
EF3LpOEzJfNm4aD/iyClv001F7AkFHaiqZJJEEt7NLVQ1mLW06pzyel+
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:33:53 2026 by rpki-client