Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CA3551A122911F18FE5E2B4DAE4EC9C.roa
File: 8CA3551A122911F18FE5E2B4DAE4EC9C.roa (raw, json)
Hash identifier: fJkYPiRYbf6xjcvdoqhZK1MzzuQCPqOGdb4M3yLd5k8=
Subject key identifier: 18:E2:06:09:1B:46:D5:04:F7:1A:02:E7:08:E5:F2:50:5C:BE:2C:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB9D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CA3551A122911F18FE5E2B4DAE4EC9C.roa
Signing time: Wed 25 Feb 2026 09:08:29 +0000
ROA not before: Wed 25 Feb 2026 09:08:25 +0000
ROA not after: Wed 01 Apr 2026 09:08:25 +0000
asID: 44559
IP address blocks: 154.203.224.0/24 maxlen: 24
154.203.230.0/24 maxlen: 24
154.203.231.0/24 maxlen: 24
154.205.234.0/24 maxlen: 24
154.205.235.0/24 maxlen: 24
154.205.236.0/24 maxlen: 24
154.205.237.0/24 maxlen: 24
154.205.238.0/24 maxlen: 24
154.205.239.0/24 maxlen: 24
154.205.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113565 (0x1bb9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 09:08:25 2026 GMT
Not After : Apr 1 09:08:25 2026 GMT
Subject: CN=699ebc0d-b9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fa:59:c1:aa:2d:ca:43:de:98:5b:f8:25:8d:
8f:f7:db:45:1b:6b:6c:10:8e:69:51:53:31:7f:03:
13:49:4c:48:61:0c:fa:c2:f2:a3:fb:d4:ae:49:8b:
54:58:b4:71:10:75:8d:85:30:e3:3a:6d:60:3b:71:
49:e9:2a:65:6d:01:3b:25:8e:fc:87:42:14:ef:6e:
93:c3:37:3c:d3:b1:ee:22:8c:73:70:8b:10:78:64:
6e:aa:09:88:85:d9:1e:d5:12:20:47:5b:53:d4:da:
40:e6:ce:51:f7:77:d2:4f:01:72:4d:64:06:1e:57:
40:5d:1f:94:54:03:9c:39:d4:b9:cc:60:39:39:d0:
ff:3e:26:ca:92:4a:9b:a0:6e:0c:bc:98:8a:63:a4:
be:86:a2:cd:eb:fd:2e:f7:ea:34:f5:be:21:43:6b:
90:7e:37:a4:de:14:0e:63:a9:f6:a9:33:72:c4:b2:
ae:ce:78:ad:ac:85:0c:2a:1c:f2:43:ac:e6:32:93:
ce:53:21:18:f1:01:fc:1a:ed:cc:59:e9:27:df:00:
b8:de:f6:f7:50:39:a7:04:9a:e8:41:ee:43:47:aa:
35:3a:d2:4d:7c:65:8e:c2:31:60:0c:de:59:71:44:
00:4a:eb:a4:c1:63:f3:fe:5d:21:bf:e9:43:ee:49:
24:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E2:06:09:1B:46:D5:04:F7:1A:02:E7:08:E5:F2:50:5C:BE:2C:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CA3551A122911F18FE5E2B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.224.0/24
154.203.230.0/23
154.205.234.0-154.205.240.255
Signature Algorithm: sha256WithRSAEncryption
44:98:24:8d:a2:b5:07:38:74:f8:fa:36:cc:28:81:dc:4d:f7:
3c:c6:d0:0a:f5:ec:a3:9d:b0:76:bf:de:27:8b:d7:39:ed:68:
27:5f:b8:a6:8b:9c:da:1e:8b:42:58:42:c2:66:12:2d:88:41:
3a:05:43:eb:05:3a:98:52:ef:9d:de:0f:e9:03:be:59:09:39:
21:70:ce:09:e1:08:28:92:8a:42:00:f8:27:dc:db:ce:d5:bf:
ad:7b:62:e9:a7:07:7c:be:0f:98:18:d3:f1:0f:4c:d4:e7:b9:
54:c9:8a:c3:2d:15:b1:f1:54:37:0a:a3:02:48:3c:f8:41:aa:
13:d2:ac:1a:6e:a4:ae:af:5d:98:61:da:66:ae:b6:b6:72:b0:
7f:b2:ef:77:3d:e3:33:4a:56:fc:08:ca:d1:f9:26:fd:6c:99:
8d:1d:a8:8b:64:2f:ca:c3:f0:66:46:db:16:11:76:a0:ef:70:
ca:d0:52:01:e6:41:1e:07:f6:fa:70:85:84:4f:87:ef:5b:c0:
96:c2:8d:2d:19:c6:74:f5:fb:b3:cb:c4:1c:fb:4c:79:5c:9e:
f1:b7:8b:2c:15:6d:c7:24:c0:51:e1:c0:c1:e2:7f:67:69:8e:
62:a8:aa:df:fe:27:72:4a:3b:1f:61:ec:dd:2f:c9:a5:28:54:
cd:df:ce:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:19:24 2026 by rpki-client