Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB341F64155311F19A61019DDAE4EC9C.roa
File: AB341F64155311F19A61019DDAE4EC9C.roa (raw, json)
Hash identifier: TdMBMPdKmpX0zGjqMjcxs5bz6PYFwhABolTa3oP3Aj8=
Subject key identifier: 77:32:A7:A1:82:A6:0F:5C:3E:D3:A7:8C:B9:CD:E6:A7:F0:98:ED:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC70
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB341F64155311F19A61019DDAE4EC9C.roa
Signing time: Sun 01 Mar 2026 09:47:32 +0000
ROA not before: Sun 01 Mar 2026 09:47:28 +0000
ROA not after: Sun 05 Apr 2026 09:47:28 +0000
asID: 44559
IP address blocks: 154.209.144.0/24 maxlen: 24
154.209.145.0/24 maxlen: 24
154.209.152.0/24 maxlen: 24
154.209.153.0/24 maxlen: 24
154.209.154.0/24 maxlen: 24
154.209.155.0/24 maxlen: 24
154.209.157.0/24 maxlen: 24
154.209.158.0/24 maxlen: 24
154.209.195.0/24 maxlen: 24
154.209.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113776 (0x1bc70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 09:47:28 2026 GMT
Not After : Apr 5 09:47:28 2026 GMT
Subject: CN=69a40b34-15c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2f:2e:ae:1b:ab:53:46:b5:44:56:e9:75:e3:
e4:c2:b8:46:56:bf:48:58:fe:58:5b:a9:dc:f6:5a:
67:1f:35:38:78:c4:ce:c5:c4:54:7d:17:af:d9:d1:
7f:16:93:84:f8:51:7a:80:f8:56:f9:26:11:5c:e3:
f5:f2:20:c3:90:e5:07:b2:c2:e8:7e:d5:28:fd:e5:
98:e9:2a:d6:0a:6d:dc:a0:bb:af:d1:a2:7e:0b:b0:
6b:4b:5a:f7:e1:56:d7:49:6b:a2:75:6f:62:bd:8f:
49:8a:63:3a:02:05:e9:6b:c0:02:ce:1a:ea:5a:38:
2d:2d:20:fa:c8:89:b0:62:c9:b4:e9:9a:05:b8:ec:
4c:28:ce:bf:92:e1:dc:38:0f:98:ea:04:fd:0f:f2:
60:5a:df:45:b6:5c:0a:33:2b:d0:85:55:48:64:6f:
04:76:8a:1f:71:8e:82:6a:4b:02:aa:28:30:d6:c2:
71:ec:94:58:03:4a:b5:63:ab:05:b0:2e:bc:37:e5:
09:cd:27:c0:1a:f1:5a:ae:4b:11:b0:5a:29:83:8c:
3a:22:51:fa:55:2a:2b:49:5e:27:c0:4e:33:49:17:
d3:23:33:78:e9:0c:c3:0f:bd:56:cf:f3:c3:ea:b7:
d2:30:25:86:e4:40:66:01:81:f1:6d:31:44:db:f9:
a1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:32:A7:A1:82:A6:0F:5C:3E:D3:A7:8C:B9:CD:E6:A7:F0:98:ED:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB341F64155311F19A61019DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.144.0/23
154.209.152.0/22
154.209.157.0-154.209.158.255
154.209.195.0-154.209.196.255
Signature Algorithm: sha256WithRSAEncryption
06:7b:c3:42:04:19:a1:e8:1f:23:8f:e8:4d:35:ec:12:fa:fe:
6e:29:a4:7b:6b:e2:9d:0c:69:2b:49:18:ba:05:4b:02:f2:0c:
c8:66:a6:82:64:4a:b1:8f:32:bb:c2:d6:ae:b2:21:d6:1b:2d:
ee:4a:2b:ef:8c:4f:22:d6:c4:c7:43:8f:a0:d3:13:b5:02:07:
5c:6e:93:7a:5c:ee:18:0c:19:7c:9d:14:b3:19:0a:be:e7:66:
bd:c6:2a:cc:40:02:ac:d2:c3:ff:27:46:db:68:54:2d:09:0d:
fb:69:87:08:90:31:ca:7a:62:8a:42:02:38:0c:a5:5f:d9:79:
1b:1c:02:56:52:27:d9:f2:0b:67:73:eb:05:30:a4:8f:26:3e:
05:d4:4e:11:78:14:4c:19:8b:64:91:12:94:f2:93:fe:4f:e5:
a5:b4:c3:b5:f9:6e:fd:6d:e1:b8:89:7c:ba:99:2d:d7:c0:7d:
02:2c:d1:fe:af:55:33:a1:18:fa:13:81:c8:f8:bc:77:3c:d0:
9d:91:8c:34:86:f8:c7:d1:93:29:d6:54:8a:8a:25:17:5e:43:
c3:08:f5:57:b4:62:c9:7c:b2:ae:96:c5:97:41:16:26:13:6e:
cb:1d:e6:5d:9a:ea:e7:4d:5c:ca:a9:77:d0:c1:49:ed:c6:fd:
37:54:78:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:52:16 2026 by rpki-client