Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9406A43AFC2E11F0B3E6309CDAE4EC9C.roa
File: 9406A43AFC2E11F0B3E6309CDAE4EC9C.roa (raw, json)
Hash identifier: uv/v0FKZ/U4+y6qulzCp+BDV6GMW6NWeLGob2z9WAEY=
Subject key identifier: CC:11:66:61:74:4F:C8:2B:87:31:44:5D:F2:BF:71:B5:03:6F:56:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B70D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9406A43AFC2E11F0B3E6309CDAE4EC9C.roa
Signing time: Wed 28 Jan 2026 09:49:03 +0000
ROA not before: Wed 28 Jan 2026 09:48:56 +0000
ROA not after: Mon 02 Mar 2026 09:48:56 +0000
asID: 9304
IP address blocks: 154.194.195.0/24 maxlen: 24
154.196.160.0/24 maxlen: 24
154.199.4.0/24 maxlen: 24
154.200.46.0/24 maxlen: 24
154.200.48.0/24 maxlen: 24
154.200.54.0/24 maxlen: 24
154.200.60.0/24 maxlen: 24
154.200.129.0/24 maxlen: 24
154.200.154.0/24 maxlen: 24
154.211.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 02 Mar 2026 09:48:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112397 (0x1b70d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 09:48:56 2026 GMT
Not After : Mar 2 09:48:56 2026 GMT
Subject: CN=6979db8f-8be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8c:a2:16:c3:56:b6:7e:ee:69:6d:69:36:dc:
e2:12:d3:2b:4a:6c:30:ca:e2:0b:42:b8:d6:d7:26:
e2:c6:d4:f2:16:fe:0d:5d:88:24:bf:03:07:ed:c0:
9d:80:ad:47:c1:3e:11:45:ce:61:46:42:55:03:f9:
e3:1a:cc:c8:23:9e:94:59:7c:19:5e:de:df:c8:c8:
01:28:60:91:4b:b1:89:2f:09:95:e3:af:6f:68:05:
62:5b:24:e5:ff:21:73:8c:1c:99:48:2d:ba:48:ae:
58:6e:3f:17:2f:f7:7c:3a:0d:5b:23:df:aa:74:97:
19:5a:e2:0c:a6:c0:0b:75:b0:48:2f:31:43:da:b1:
27:86:91:0c:0b:5c:2a:78:a4:c6:dc:60:2c:2d:be:
bd:7a:d3:26:a4:ac:08:50:2e:2a:a9:7b:7e:3d:89:
b0:a0:af:4c:51:72:d2:a6:e3:65:3c:00:f5:e3:e1:
c4:e8:17:4d:c7:0a:de:c1:bf:70:ee:2d:d7:03:bb:
56:36:73:52:26:25:ba:88:ff:73:58:2f:5a:4b:18:
d3:1a:2e:b3:09:70:b2:59:d2:01:29:57:df:1e:69:
be:38:b4:a2:cb:6c:87:f3:7d:78:b7:9b:0f:17:6f:
c4:3e:bb:d2:c0:e4:23:d0:e6:59:c8:f3:3c:b8:54:
89:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:11:66:61:74:4F:C8:2B:87:31:44:5D:F2:BF:71:B5:03:6F:56:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9406A43AFC2E11F0B3E6309CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.195.0/24
154.196.160.0/24
154.199.4.0/24
154.200.46.0/24
154.200.48.0/24
154.200.54.0/24
154.200.60.0/24
154.200.129.0/24
154.200.154.0/24
154.211.211.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:3e:8c:32:25:16:02:c8:ef:e8:c9:2b:e7:99:b0:24:64:63:
f0:eb:98:7c:30:ec:dd:7d:8b:34:4f:dd:42:98:3e:c9:c1:8c:
a1:c3:c2:2b:6f:0c:83:7d:92:43:31:00:20:e1:9e:3b:6e:17:
fb:bb:3c:4c:c2:8e:1c:21:3b:41:58:5b:f0:6d:03:f1:36:da:
f1:00:79:2d:5e:f9:15:bd:e8:5b:72:60:da:05:f2:c6:ed:5d:
4c:3d:86:a8:d7:5d:71:51:aa:a7:3e:ae:40:4f:51:04:05:b1:
88:d2:10:cd:19:e5:3f:87:fb:37:02:6f:54:09:7d:da:07:72:
cd:a8:ae:9f:a9:26:dc:5c:b6:3a:5d:0b:3d:53:67:11:e2:b6:
30:45:12:15:92:98:50:93:0f:1c:bb:b3:ea:ba:0c:eb:9c:6d:
9d:28:9c:f3:c2:61:68:7f:6e:e6:4c:de:1c:84:60:0e:5a:44:
0d:27:24:95:3f:ed:9b:44:f5:47:82:c8:4b:76:6f:a1:84:7f:
d8:73:17:36:a1:f8:1a:f2:6b:57:3e:01:1d:af:52:bd:23:11:
1c:e9:61:69:24:bc:d5:1f:4f:1d:2c:51:35:e9:37:66:d4:50:
ca:92:71:3a:06:94:6b:d8:aa:e9:51:58:8d:16:0d:f8:c2:e9:
49:a0:38:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:19 2026 by rpki-client