Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2C6F9CA115F11F19AF29CD9DAE4EC9C.roa
File: A2C6F9CA115F11F19AF29CD9DAE4EC9C.roa (raw, json)
Hash identifier: tn5Z1b0Qe5EMEggfqr+e4wcSl183bA9DjCtuVBF7uns=
Subject key identifier: B6:40:2F:5D:96:8D:57:C5:B5:80:DB:21:C1:AE:DB:3B:3B:B7:B3:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB36
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2C6F9CA115F11F19AF29CD9DAE4EC9C.roa
Signing time: Tue 24 Feb 2026 09:03:08 +0000
ROA not before: Tue 24 Feb 2026 09:03:03 +0000
ROA not after: Tue 31 Mar 2026 09:03:03 +0000
asID: 62240
IP address blocks: 154.194.82.0/24 maxlen: 24
154.195.127.0/24 maxlen: 24
154.195.128.0/24 maxlen: 24
154.195.129.0/24 maxlen: 24
154.195.130.0/24 maxlen: 24
154.195.131.0/24 maxlen: 24
154.195.132.0/24 maxlen: 24
154.195.133.0/24 maxlen: 24
154.195.134.0/24 maxlen: 24
154.195.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113462 (0x1bb36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 09:03:03 2026 GMT
Not After : Mar 31 09:03:03 2026 GMT
Subject: CN=699d694c-e51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:68:12:73:a7:4d:34:45:17:01:a0:85:54:d6:
80:e8:8d:7e:6d:e5:80:da:4a:59:a9:a0:ce:4e:50:
08:6d:ab:62:fe:98:d8:c1:f2:e0:a0:37:f4:e7:33:
ca:c7:7e:31:ef:c7:d0:02:28:e5:34:73:cc:2b:e3:
4b:b4:04:f4:da:d5:ae:6e:70:5e:cb:77:ee:d7:fa:
ad:fb:25:c0:88:32:83:01:7f:21:af:c3:c6:22:47:
65:25:a3:d9:3e:07:d7:08:fe:a6:45:b4:40:86:e1:
27:ca:b1:e9:a7:65:15:81:5b:b7:37:a0:e9:c7:73:
08:78:d8:34:a3:50:dd:bc:2a:1c:fc:07:70:77:d8:
cc:5b:91:99:c7:7c:67:8c:d4:db:62:cf:79:77:8a:
0f:d1:c2:d5:87:3a:ff:67:e4:c9:82:7b:07:d8:2a:
09:d9:7e:d9:44:c3:ac:3e:f7:e2:28:8a:65:2f:cd:
3a:76:ee:8c:be:8c:4d:9a:87:07:2f:f4:45:22:8e:
da:9e:0c:39:af:51:67:b1:ed:ed:13:3b:8f:8d:3a:
3f:c8:df:29:7e:02:fc:07:29:2f:39:75:3f:f9:80:
9f:28:f1:48:79:50:c9:f4:45:b4:6e:c9:78:80:80:
18:68:b5:23:58:68:0e:05:ab:04:32:6b:72:bf:c3:
43:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:40:2F:5D:96:8D:57:C5:B5:80:DB:21:C1:AE:DB:3B:3B:B7:B3:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2C6F9CA115F11F19AF29CD9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.82.0/24
154.195.127.0-154.195.135.255
Signature Algorithm: sha256WithRSAEncryption
0e:bf:a0:3b:31:5f:5d:40:c2:0e:06:78:d1:db:40:5e:f6:8b:
db:af:37:34:c2:3b:82:d7:be:03:6f:fb:a5:41:4a:2c:94:63:
28:8f:32:90:01:35:be:28:fa:53:1b:4b:e0:7a:f1:cd:39:92:
a4:7c:61:0b:4f:0c:5f:a5:02:00:24:ff:7d:92:b7:8d:d7:23:
29:ab:35:09:e4:f7:8d:26:da:27:20:0d:80:13:b1:76:95:1b:
e2:3e:d3:85:6a:95:6a:b4:b4:d9:e7:81:2e:e7:38:93:15:51:
6d:05:47:c1:eb:56:cd:95:40:7a:a2:a1:9d:9d:5c:b7:e4:75:
ad:69:a0:91:2e:f6:e0:fe:96:c3:64:e7:52:5c:0c:c5:09:78:
2a:d8:8a:8a:df:4d:ad:82:f7:be:c1:c7:d0:3a:ed:80:ad:63:
9a:7e:a9:46:2e:49:2c:a1:19:b8:1e:45:05:50:9a:15:c9:6c:
b7:d2:56:06:bd:e8:c4:51:55:35:dc:cb:a4:51:f8:97:59:33:
c9:9c:ed:38:3f:83:99:e8:b8:5e:05:13:65:7d:43:70:b3:66:
cb:fb:8c:21:ef:22:56:4e:13:6f:08:e1:fe:6e:be:69:d1:89:
2b:8d:d8:fa:57:de:78:cf:15:86:23:af:7d:17:40:9b:07:24:
0b:b4:84:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:09:48 2026 by rpki-client