Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A95D3320E5A11F19C9F53CDDAE4EC9C.roa
File: 9A95D3320E5A11F19C9F53CDDAE4EC9C.roa (raw, json)
Hash identifier: /i3iDa2ZEY6F172LSJGsRsaTCWWRXOXZEbG63nXKRkI=
Subject key identifier: 45:0D:A9:28:A2:5D:C2:47:96:B0:6B:7D:C9:B2:20:63:62:40:71:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA6E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A95D3320E5A11F19C9F53CDDAE4EC9C.roa
Signing time: Fri 20 Feb 2026 12:49:33 +0000
ROA not before: Fri 20 Feb 2026 12:49:29 +0000
ROA not after: Fri 27 Mar 2026 12:49:29 +0000
asID: 138915
IP address blocks: 154.203.135.0/24 maxlen: 24
154.203.137.0/24 maxlen: 24
154.203.138.0/24 maxlen: 24
154.203.139.0/24 maxlen: 24
154.203.140.0/24 maxlen: 24
154.203.141.0/24 maxlen: 24
154.203.146.0/24 maxlen: 24
154.203.147.0/24 maxlen: 24
154.203.148.0/24 maxlen: 24
154.203.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113262 (0x1ba6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 12:49:29 2026 GMT
Not After : Mar 27 12:49:29 2026 GMT
Subject: CN=6998585d-3194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ca:b6:69:2f:08:c0:e0:07:d6:50:58:27:c0:
9a:e2:0b:a9:18:32:5e:8f:8a:f9:44:d4:70:fb:3a:
08:b1:40:80:1f:e1:bf:45:f8:90:2e:7b:05:08:78:
83:35:c1:32:11:4b:a3:c6:56:fb:af:50:fb:da:c1:
6a:f7:b1:d7:49:56:a1:fd:8f:93:d5:f9:92:a6:58:
52:fb:fe:e4:9f:34:77:70:17:af:48:5a:f7:20:d5:
bb:67:60:d8:d9:20:11:f0:2b:a4:30:fd:32:ba:10:
4a:ea:53:99:ed:6b:1f:84:6b:11:9e:8a:58:70:61:
b7:df:99:18:05:06:95:0a:54:c2:36:45:63:2e:38:
da:d9:15:06:93:30:d6:4c:f1:5a:2c:86:c5:76:61:
d3:e9:e0:8d:75:32:78:bc:2f:eb:f8:ed:fc:ba:3e:
b4:ba:d5:8d:69:2f:c4:48:98:0b:5d:8d:01:b2:b3:
10:b9:ef:ac:9b:36:49:42:7c:7e:5d:ef:cd:5c:a4:
48:ff:be:d9:2d:16:4e:30:55:63:f7:09:eb:25:08:
08:a4:3d:1e:78:7e:bd:b5:55:e1:31:7c:a8:76:f2:
6a:2b:08:f5:35:ac:44:9f:2d:0e:a2:e4:8e:c4:9a:
c6:a8:92:44:46:8d:d6:45:a1:69:2d:ab:3e:9b:92:
40:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0D:A9:28:A2:5D:C2:47:96:B0:6B:7D:C9:B2:20:63:62:40:71:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A95D3320E5A11F19C9F53CDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.135.0/24
154.203.137.0-154.203.141.255
154.203.146.0-154.203.148.255
154.203.169.0/24
Signature Algorithm: sha256WithRSAEncryption
06:7a:3e:b7:a4:08:8d:cf:8a:a6:d9:20:31:e6:d3:34:15:49:
21:7d:36:2e:ce:cf:86:00:28:6b:4b:06:94:7d:f4:b1:21:fb:
4e:30:b3:36:84:5c:4d:41:b2:33:0a:ed:51:3d:ac:6c:64:1a:
46:ff:27:66:37:8f:3a:9e:17:6a:be:ef:d2:d3:5d:5b:cb:12:
db:79:06:7c:dd:69:c0:64:c9:eb:d6:67:7d:57:f2:ce:7f:05:
48:7d:42:2d:20:b1:88:ff:3a:2e:d6:b1:19:9a:de:fa:e3:ee:
e4:f1:a4:d2:15:0a:64:31:dd:3a:2b:c3:42:e2:c7:8c:e3:18:
e2:32:eb:25:15:98:fa:a5:ae:53:2d:93:fe:dd:85:f4:d1:40:
aa:96:35:51:4d:df:34:bf:ef:56:5d:5b:00:14:58:51:30:c7:
d4:33:96:02:3f:b2:64:83:b0:a0:cd:aa:66:df:13:1f:fc:60:
19:3b:0c:e0:5f:08:a5:4b:00:33:9e:b5:bf:a0:c6:89:bf:d2:
05:06:cf:36:0b:b0:6f:e6:59:91:6b:a7:40:bc:52:dc:f6:75:
79:4e:e1:6c:8f:e4:e1:5e:4d:ce:9e:9e:fb:81:50:50:d3:cc:
72:74:b1:67:b1:30:9f:58:90:38:f4:3e:f4:2a:f5:6a:47:66:
58:37:4a:de
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgIDAbpuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjIwMTI0OTI5WhcNMjYwMzI3MTI0OTI5WjAYMRYw
FAYDVQQDEw02OTk4NTg1ZC0zMTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqcq2aS8IwOAH1lBYJ8Ca4gupGDJej4r5RNRw+zoIsUCAH+G/RfiQLnsF
CHiDNcEyEUujxlb7r1D72sFq97HXSVah/Y+T1fmSplhS+/7knzR3cBevSFr3INW7
Z2DY2SAR8CukMP0yuhBK6lOZ7WsfhGsRnopYcGG335kYBQaVClTCNkVjLjja2RUG
kzDWTPFaLIbFdmHT6eCNdTJ4vC/r+O38uj60utWNaS/ESJgLXY0BsrMQue+smzZJ
Qnx+Xe/NXKRI/77ZLRZOMFVj9wnrJQgIpD0eeH69tVXhMXyodvJqKwj1NaxEny0O
ouSOxJrGqJJERo3WRaFpLas+m5JArwIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFEUN
qSiiXcJHlrBrfcmyIGNiQHGJMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85QTk1RDMzMjBFNUExMUYxOUM5RjUzQ0REQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQAmsuHMAwDBACay4kDBAGa
y4wwDAMEAZrLkgMEAJrLlAMEAJrLqTANBgkqhkiG9w0BAQsFAAOCAQEABno+t6QI
jc+KptkgMebTNBVJIX02Ls7PhgAoa0sGlH30sSH7TjCzNoRcTUGyMwrtUT2sbGQa
Rv8nZjePOp4Xar7v0tNdW8sS23kGfN1pwGTJ69ZnfVfyzn8FSH1CLSCxiP86Ltax
GZre+uPu5PGk0hUKZDHdOivDQuLHjOMY4jLrJRWY+qWuUy2T/t2F9NFAqpY1UU3f
NL/vVl1bABRYUTDH1DOWAj+yZIOwoM2qZt8TH/xgGTsM4F8IpUsAM561v6DGib/S
BQbPNguwb+ZZkWunQLxS3PZ1eU7hbI/k4V5Nzp6e+4FQUNPMcnSxZ7Ewn1iQOPQ+
9Cr1akdmWDdK3g==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:34 2026 by rpki-client