Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D53D808108611F1980B02AADAE4EC9C.roa
File: 8D53D808108611F1980B02AADAE4EC9C.roa (raw, json)
Hash identifier: P9bEIZhVSSwaaUcWiea4tpl6dR7w2GpQdUwmdhSTS+I=
Subject key identifier: 7D:FD:4D:A0:D6:9E:40:D3:38:B3:76:8C:22:E4:3F:40:C5:E7:37:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB11
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D53D808108611F1980B02AADAE4EC9C.roa
Signing time: Mon 23 Feb 2026 07:09:11 +0000
ROA not before: Mon 23 Feb 2026 07:09:07 +0000
ROA not after: Tue 03 Mar 2026 07:09:07 +0000
asID: 139880
IP address blocks: 154.206.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 07:09:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113425 (0x1bb11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 23 07:09:07 2026 GMT
Not After : Mar 3 07:09:07 2026 GMT
Subject: CN=699bfd17-2ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:e8:58:61:9f:1a:83:d6:bb:5c:c7:53:6b:
60:b9:ab:30:f8:ea:74:13:d9:a8:d5:60:1c:a9:2d:
93:3e:ad:44:fd:4d:41:77:42:74:2b:e6:dd:5a:2c:
70:e9:28:28:d3:52:2b:4c:88:40:4f:78:f8:24:d7:
d2:1a:45:9a:18:41:83:3c:bc:be:dc:16:5d:e4:05:
f0:80:cf:09:58:5d:e1:f9:1a:cf:67:ef:67:e3:01:
f5:d3:fa:04:50:82:5f:0d:c2:c4:48:7d:94:e0:03:
22:16:98:5f:62:bb:cd:57:42:62:3c:c7:28:28:2c:
fd:f5:b0:e5:a9:e4:a2:04:0b:cc:ff:3a:7b:33:4d:
9a:ef:47:c6:85:c6:d7:c5:ae:9a:eb:b8:9b:db:a0:
6f:7b:c9:19:ed:23:b9:0c:4c:95:2c:9c:72:15:6f:
49:6b:8f:03:92:b0:c2:8d:48:a5:6c:33:76:28:36:
af:ee:ff:02:4d:2e:41:cd:5b:33:81:fb:e1:5b:ba:
33:fd:24:ce:4d:86:09:be:5b:e3:7c:d5:e9:47:f0:
a8:8d:f9:5f:cd:8f:37:f7:c3:c0:ed:6b:ba:99:60:
c8:e2:cb:f0:c6:64:85:7f:2d:4b:76:b6:83:ae:09:
aa:31:2a:70:b1:bb:06:9a:26:b3:85:bc:18:c2:3a:
71:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FD:4D:A0:D6:9E:40:D3:38:B3:76:8C:22:E4:3F:40:C5:E7:37:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D53D808108611F1980B02AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.128.0/18
Signature Algorithm: sha256WithRSAEncryption
36:f0:2c:17:97:13:00:58:46:f6:ed:4b:47:05:51:13:df:9a:
04:8c:4c:54:da:29:51:ce:7d:f1:23:67:d6:53:8b:e2:90:f3:
58:80:db:73:b1:c6:38:77:03:18:f8:2e:45:37:ae:f9:55:71:
8c:64:38:a8:58:e5:01:65:53:a8:9d:6f:f8:db:78:e4:5e:07:
62:59:d1:51:ed:29:1d:54:f2:85:bc:c8:c0:04:cd:44:d6:3c:
19:42:fc:00:c9:0d:f4:ae:65:b8:89:56:ce:45:3b:97:14:7a:
0e:38:75:57:42:84:4f:0e:20:6f:50:ce:fe:c4:f6:f4:b8:35:
4d:eb:61:75:df:1b:c8:df:88:09:2c:90:ee:fa:6b:94:df:9b:
22:d4:5d:d7:31:07:6f:94:7c:d9:44:9c:c8:c2:dd:57:5b:63:
ef:92:63:c7:20:90:2d:94:e1:9d:55:14:fe:57:a4:79:21:f0:
22:15:8b:c6:f4:90:8b:59:4b:a8:07:fc:15:1a:1a:7d:be:e8:
08:86:78:8a:95:29:ba:a7:f3:17:f7:99:91:fa:ce:d1:93:63:
cc:0c:ce:60:8f:41:5f:43:b4:39:fd:7b:47:60:df:0f:6a:49:
19:64:f0:c0:bc:dd:69:e6:81:f9:33:96:2b:df:80:a1:22:d3:
03:c2:1d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:41:38 2026 by rpki-client