Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EC95E2E122F11F1AF3293D9DAE4EC9C.roa
File: 8EC95E2E122F11F1AF3293D9DAE4EC9C.roa (raw, json)
Hash identifier: n7yOgMcWjZtwKnXIT6/NsOIVSMO9fRgrj2IZOIfcPN4=
Subject key identifier: C1:39:A6:AD:EE:5F:BA:16:E3:83:34:BE:66:40:1F:17:CB:C3:5C:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BBA7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EC95E2E122F11F1AF3293D9DAE4EC9C.roa
Signing time: Wed 25 Feb 2026 09:51:29 +0000
ROA not before: Wed 25 Feb 2026 09:51:25 +0000
ROA not after: Wed 01 Apr 2026 09:51:25 +0000
asID: 214238
IP address blocks: 154.81.193.0/24 maxlen: 24
154.81.194.0/24 maxlen: 24
154.81.196.0/24 maxlen: 24
154.81.197.0/24 maxlen: 24
154.81.198.0/24 maxlen: 24
154.81.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113575 (0x1bba7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 09:51:25 2026 GMT
Not After : Apr 1 09:51:25 2026 GMT
Subject: CN=699ec621-f5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:01:37:f7:af:99:4b:2a:51:17:ca:60:d7:40:
8c:ce:b9:7f:97:9c:12:60:31:e1:f5:c9:26:c5:38:
f7:15:2e:5f:55:85:7f:6f:07:4a:72:94:48:7e:a7:
63:0a:29:1a:e7:45:16:65:be:f3:84:7f:61:7b:49:
05:68:24:cd:f8:c3:f8:42:c5:d5:b3:ee:9b:1c:a5:
f4:91:55:a2:27:2f:38:14:39:5f:ce:17:e7:bd:33:
4c:e6:2a:08:e8:19:03:e8:6e:72:95:35:64:92:1e:
47:a7:2e:b2:87:12:d5:74:08:de:c1:73:cc:2d:41:
e5:10:9e:46:12:93:39:71:10:f7:af:80:b2:13:cc:
5a:34:eb:36:01:04:18:65:85:93:ea:38:0f:7c:8b:
1c:a3:33:5f:c5:60:cd:73:f3:2d:4d:a0:e7:ff:37:
92:80:0f:16:8d:69:c5:25:f8:ef:40:1f:d5:ef:ed:
ea:a2:53:7c:8e:86:12:61:80:6c:7f:32:1b:49:80:
de:c7:bf:4d:88:56:34:ca:1d:be:9e:fa:8f:83:fd:
ab:d9:61:eb:79:51:48:d9:1a:6c:a5:d0:47:56:95:
da:24:1f:48:24:c8:f2:fa:39:d6:26:8a:35:40:9b:
b9:d4:01:3d:1e:22:10:d9:c4:8b:36:63:66:88:0b:
72:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:39:A6:AD:EE:5F:BA:16:E3:83:34:BE:66:40:1F:17:CB:C3:5C:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EC95E2E122F11F1AF3293D9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.193.0-154.81.194.255
154.81.196.0/22
Signature Algorithm: sha256WithRSAEncryption
14:72:e5:f6:fa:29:20:66:2c:a5:73:07:3a:f3:ff:0a:87:a9:
c0:2e:91:a7:ea:92:d3:fc:c8:76:c5:20:31:52:5d:f4:93:f9:
28:16:ba:36:87:b7:94:95:13:30:bd:a3:42:36:23:93:75:f1:
04:36:ca:4a:4a:4b:70:ec:0b:f0:ff:8e:58:77:75:57:e0:7f:
e8:52:8a:69:a8:07:82:8c:09:f2:3e:8e:55:8e:78:47:40:e5:
7d:bb:64:39:45:d9:04:3e:9a:86:35:b6:e1:63:c1:94:be:db:
5a:6e:48:b4:2d:aa:3e:24:2f:0e:64:8d:0d:9d:ec:84:a8:a4:
37:f4:7e:fb:8e:13:1a:5b:95:aa:14:87:05:fa:36:19:51:de:
6f:32:6d:24:ee:a9:b4:5d:18:0c:f0:71:17:fe:e4:19:9e:86:
ca:e5:45:e7:99:ce:20:7c:10:84:f2:99:6c:07:d1:d2:fe:03:
ee:38:3e:39:93:49:c4:e7:b4:99:69:50:54:e4:64:9b:93:4a:
b9:45:11:d5:1b:9a:79:08:92:24:e6:f2:96:b8:b3:04:be:4a:
57:65:a1:28:a3:44:63:2e:36:8a:d4:44:b1:54:d3:19:2f:38:
71:c2:3f:8c:e2:28:29:16:34:3f:b8:bd:3d:e9:6a:78:c7:73:
98:78:4c:58
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAbunMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjI1MDk1MTI1WhcNMjYwNDAxMDk1MTI1WjAYMRYw
FAYDVQQDEw02OTllYzYyMS1mNWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxwE396+ZSypRF8pg10CMzrl/l5wSYDHh9ckmxTj3FS5fVYV/bwdKcpRI
fqdjCika50UWZb7zhH9he0kFaCTN+MP4QsXVs+6bHKX0kVWiJy84FDlfzhfnvTNM
5ioI6BkD6G5ylTVkkh5Hpy6yhxLVdAjewXPMLUHlEJ5GEpM5cRD3r4CyE8xaNOs2
AQQYZYWT6jgPfIscozNfxWDNc/MtTaDn/zeSgA8WjWnFJfjvQB/V7+3qolN8joYS
YYBsfzIbSYDex79NiFY0yh2+nvqPg/2r2WHreVFI2RpspdBHVpXaJB9IJMjy+jnW
Joo1QJu51AE9HiIQ2cSLNmNmiAtyxwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFME5
pq3uX7oW44M0vmZAHxfLw1waMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84RUM5NUUyRTEyMkYxMUYxQUYzMjkzRDlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBACaUcEDBACaUcIDBAKa
UcQwDQYJKoZIhvcNAQELBQADggEBABRy5fb6KSBmLKVzBzrz/wqHqcAukafqktP8
yHbFIDFSXfST+SgWujaHt5SVEzC9o0I2I5N18QQ2ykpKS3DsC/D/jlh3dVfgf+hS
immoB4KMCfI+jlWOeEdA5X27ZDlF2QQ+moY1tuFjwZS+21puSLQtqj4kLw5kjQ2d
7ISopDf0fvuOExpblaoUhwX6NhlR3m8ybSTuqbRdGAzwcRf+5BmehsrlReeZziB8
EITymWwH0dL+A+44PjmTScTntJlpUFTkZJuTSrlFEdUbmnkIkiTm8pa4swS+Sldl
oSijRGMuNorURLFU0xkvOHHCP4ziKCkWND+4vT3panjHc5h4TFg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:01:58 2026 by rpki-client