Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B601B800119511F1BE6D99A1DAE4EC9C.roa
File: B601B800119511F1BE6D99A1DAE4EC9C.roa (raw, json)
Hash identifier: INIkr/KrtCP4Aq1srJ0UdpkH7k1ZScDwdabeKUYagBw=
Subject key identifier: BF:C1:2D:88:A9:DB:E2:6C:E3:7A:22:B6:86:EE:30:BF:36:DD:4B:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB7C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B601B800119511F1BE6D99A1DAE4EC9C.roa
Signing time: Tue 24 Feb 2026 15:30:13 +0000
ROA not before: Tue 24 Feb 2026 15:30:08 +0000
ROA not after: Thu 05 Mar 2026 15:30:08 +0000
asID: 136907
IP address blocks: 154.220.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113532 (0x1bb7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 15:30:08 2026 GMT
Not After : Mar 5 15:30:08 2026 GMT
Subject: CN=699dc405-62a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:73:14:20:cd:33:99:1f:56:e1:16:8d:1f:4a:
b2:3e:ba:0f:04:3a:28:1c:db:2c:2a:9a:65:a5:fe:
59:82:88:ac:81:72:3d:a4:f3:5f:4a:7c:be:67:4d:
cb:8c:e1:38:75:d5:d8:77:a7:c1:c7:49:d9:82:76:
08:b9:8c:b4:b0:d5:31:16:15:12:ec:54:7b:7a:f5:
11:7b:a2:d0:a3:c0:c8:66:2e:1c:62:73:d2:9a:d5:
c7:65:80:eb:02:80:72:72:2a:9c:35:f9:0a:09:f3:
42:30:e9:eb:fb:3c:10:a2:a1:71:17:02:b7:f6:0b:
2d:a3:bf:ad:dd:72:f2:c5:4a:61:bb:2b:e1:8f:ca:
b4:07:b7:0c:b4:c7:30:0b:17:45:fd:b3:ba:b6:c9:
7e:b7:2c:60:36:85:9a:12:49:2b:d8:6b:86:7a:de:
6b:34:13:8b:97:a3:06:8d:5c:3e:8d:33:39:ef:61:
f3:cb:17:d1:60:62:aa:d7:20:5e:ef:80:b3:40:3a:
82:c6:bb:4f:e9:64:86:2a:b2:6f:ee:6d:b0:8d:4e:
bf:4a:30:81:e4:9d:4d:fa:2e:38:38:8a:7b:3a:b7:
b4:d5:9a:43:cc:0d:d3:2d:9f:92:d8:96:d7:69:8d:
d7:da:bb:09:bb:d7:63:88:1a:15:0d:d5:18:c7:50:
ed:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C1:2D:88:A9:DB:E2:6C:E3:7A:22:B6:86:EE:30:BF:36:DD:4B:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B601B800119511F1BE6D99A1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.192.0/19
Signature Algorithm: sha256WithRSAEncryption
9f:09:ac:3d:f0:c1:fa:88:6e:ec:ec:f2:1e:bf:13:ed:14:3a:
13:77:49:e2:08:a4:4f:5b:d2:d1:d2:3b:3b:b7:8b:fc:b7:ad:
2e:d3:ca:cb:37:fc:16:85:9d:ab:9d:21:40:98:ca:66:2c:c8:
1f:33:ed:3e:9d:af:f9:ef:68:fa:02:aa:b1:41:11:69:c9:42:
9e:c7:70:3e:7e:7f:c5:9c:37:05:b8:0e:3f:de:ca:50:f8:d9:
d4:6d:b7:bf:5b:28:2c:56:e1:68:cf:89:af:23:11:31:64:ec:
99:f0:10:04:20:50:04:7e:ce:c7:a0:02:e1:f6:38:dd:f2:0a:
0a:08:bd:20:05:63:ac:dc:a3:de:8a:ed:71:ca:96:7a:f6:63:
41:86:34:11:6f:68:26:11:38:55:ed:42:28:1c:38:04:d1:ef:
28:a9:f1:a0:77:dc:10:7a:30:6f:9b:c8:7f:2a:d6:93:48:d2:
21:f0:cb:0e:c4:70:62:a6:5e:2f:93:5b:4f:04:61:53:8e:71:
d8:6d:b9:2a:91:e9:8e:ec:91:ec:13:10:14:fb:13:46:11:2e:
91:5c:31:d8:b4:18:74:2c:19:b8:ab:5a:bd:6f:06:b8:5a:db:
02:a5:68:fd:56:00:ad:8a:cd:4f:7e:b5:ef:9f:6d:c5:13:95:
dc:56:d8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:54:05 2026 by rpki-client