Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B56A03940F9611F1AFFF80E3DAE4EC9C.roa
File: B56A03940F9611F1AFFF80E3DAE4EC9C.roa (raw, json)
Hash identifier: C5FCd9N+VYjLbMRhg9prHMmPna/cVnJxT0kTIMaFz7w=
Subject key identifier: CF:32:6F:F2:C3:64:BC:CA:86:34:4B:32:B0:A1:D1:9E:DA:65:A5:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BAFA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B56A03940F9611F1AFFF80E3DAE4EC9C.roa
Signing time: Sun 22 Feb 2026 02:32:19 +0000
ROA not before: Sun 22 Feb 2026 02:32:14 +0000
ROA not after: Sat 28 Mar 2026 02:32:14 +0000
asID: 17561
IP address blocks: 154.82.156.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113402 (0x1bafa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 22 02:32:14 2026 GMT
Not After : Mar 28 02:32:14 2026 GMT
Subject: CN=699a6ab3-aee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:14:58:1d:fc:7f:ab:11:52:e5:84:63:5f:5e:
81:77:0f:c6:c2:96:68:49:70:89:23:dd:e5:4f:8e:
a3:cf:6b:89:53:76:7e:b0:c1:28:2a:a4:a4:d8:4c:
da:19:5c:8f:a5:6a:a7:92:bd:90:4b:a9:76:49:78:
60:f6:79:27:35:78:77:23:4f:44:cd:f8:4a:a8:aa:
dd:40:6b:da:d5:76:f5:54:2a:e6:10:a0:c5:01:5a:
d3:ad:7a:b5:96:08:fa:75:1a:62:a7:20:f4:ee:a0:
13:90:a8:86:76:a8:12:10:a4:11:f8:9d:69:83:b7:
1b:97:17:ce:38:76:ad:f6:b7:71:04:01:fb:cf:77:
5f:4c:7b:08:51:fb:97:4d:60:e7:04:6f:9f:d3:78:
30:7c:33:11:4f:f5:c2:c2:2f:32:2d:3b:b8:b9:7d:
57:56:c7:50:5e:62:cf:91:24:f6:7a:fa:2c:c0:ff:
f7:8f:68:59:b1:c7:18:06:30:f3:23:57:f9:aa:7e:
f8:17:c1:69:05:06:2f:8c:d8:9a:0b:60:29:30:d8:
7c:16:11:a2:e8:42:2e:29:9a:8a:4a:ea:30:bc:f3:
13:17:33:1a:2c:1e:02:df:1c:74:65:db:48:89:89:
80:34:cd:90:9a:d3:0c:62:8e:48:02:82:02:51:84:
47:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:32:6F:F2:C3:64:BC:CA:86:34:4B:32:B0:A1:D1:9E:DA:65:A5:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B56A03940F9611F1AFFF80E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.156.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:e6:33:94:51:d1:9c:ee:20:c8:18:e7:b9:c7:f2:1c:43:9f:
7e:c3:a8:43:ad:7a:37:47:2f:b6:9b:ac:83:d3:57:f4:b5:ee:
e6:49:d0:1f:2a:3e:cc:68:71:5d:98:f5:eb:bf:08:37:33:2e:
ef:f1:6b:4e:7a:62:bc:c2:0d:41:e0:ea:28:04:6c:2e:9b:0a:
89:0e:0f:58:85:71:fd:db:a8:e2:7e:5e:b0:93:ea:18:ae:03:
ac:be:0d:77:aa:35:91:97:34:ea:9d:9b:4b:d4:de:33:4c:b3:
b7:ef:34:21:c1:0c:0f:07:b0:75:fa:91:e9:a3:6e:e8:9e:13:
46:ac:e3:f2:69:1e:50:c8:2a:1d:dd:94:b5:6c:20:69:71:c6:
e8:e4:86:df:e2:68:8e:7b:70:96:39:b1:1e:80:c3:fa:21:4b:
dd:af:55:5d:02:b9:fd:90:54:2f:8b:b1:24:df:3d:a0:9e:46:
71:0d:b4:16:e9:71:25:2e:72:14:3d:99:bf:59:46:4e:1c:83:
76:9b:e8:95:97:94:e9:58:c3:7a:67:1a:37:e9:29:6e:d5:3c:
9c:75:9e:6a:fd:37:a6:2c:97:30:aa:c6:b1:5f:d4:26:ea:3b:
09:c3:fc:73:cd:6b:6d:0b:e3:ab:7a:d9:09:b8:31:8d:ec:f2:
27:d6:96:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:25:41 2026 by rpki-client