Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6C4C270040511F19EF9B1CEDAE4EC9C.roa
File: B6C4C270040511F19EF9B1CEDAE4EC9C.roa (raw, json)
Hash identifier: w9CpkCfpTG9JPvkLW+VqY8ZRo0dvXJayN/phlkL1jv0=
Subject key identifier: B4:FA:C8:60:8E:95:85:20:C0:75:B5:96:D4:D9:61:CB:3D:4A:B6:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B8D0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6C4C270040511F19EF9B1CEDAE4EC9C.roa
Signing time: Sat 07 Feb 2026 09:16:42 +0000
ROA not before: Sat 07 Feb 2026 09:16:37 +0000
ROA not after: Mon 16 Mar 2026 09:16:37 +0000
asID: 137899
IP address blocks: 154.222.16.0/20 maxlen: 24
154.222.16.0/21 maxlen: 24
154.222.16.0/22 maxlen: 24
154.222.20.0/22 maxlen: 24
154.222.24.0/21 maxlen: 24
154.222.24.0/22 maxlen: 24
154.222.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112848 (0x1b8d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 7 09:16:37 2026 GMT
Not After : Mar 16 09:16:37 2026 GMT
Subject: CN=698702f9-5e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bf:c9:a5:c0:0e:e0:e2:ed:b6:59:63:a2:ab:
6e:9c:9c:60:f1:00:de:ce:1c:48:b6:b9:22:e0:26:
bb:af:db:9b:6e:db:99:d4:a4:ab:6b:25:33:d7:97:
de:61:35:08:af:4f:8a:37:f2:3e:44:9e:b2:12:02:
20:e2:97:2c:b0:f0:cd:27:d3:07:f7:4c:c2:91:64:
8b:3b:bc:d6:d3:ee:a1:e0:ad:d0:cf:28:ce:5f:b6:
ba:ba:8c:fe:54:28:67:c3:4f:11:f1:ff:35:91:ca:
d0:17:4d:29:a5:ff:13:ed:6b:4e:53:35:92:77:2f:
e2:c0:21:27:d7:b4:e9:83:fd:2c:fc:1a:0b:b6:96:
fb:07:03:90:eb:a6:82:4a:22:a5:32:ee:1a:24:ab:
c2:50:7f:44:d7:82:0d:c6:ef:87:f7:a4:ea:4e:0b:
c2:0f:3f:9e:d6:0a:58:7c:e8:ea:16:6f:18:89:4c:
eb:35:15:c6:4e:f1:a2:b4:f9:83:3e:d1:4e:03:94:
c0:7a:55:44:ba:27:08:b9:7e:1b:35:a1:19:e7:1e:
70:44:65:56:42:0f:eb:f1:31:e2:32:c2:15:10:5a:
24:ea:24:99:02:eb:49:b2:53:cd:28:aa:f1:6a:e4:
02:77:62:32:5a:1f:78:1c:9a:33:64:35:67:a9:b3:
0a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FA:C8:60:8E:95:85:20:C0:75:B5:96:D4:D9:61:CB:3D:4A:B6:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6C4C270040511F19EF9B1CEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
d5:07:50:e5:a1:f8:e2:78:34:a1:29:07:da:05:b0:f4:25:60:
02:44:7b:cf:ac:6c:d0:2e:0e:fa:61:5c:f9:23:91:6d:f5:da:
d3:08:56:e2:32:9b:48:fb:09:70:4e:3b:e8:77:41:4a:da:9b:
92:e2:c6:a5:e5:15:a5:06:86:6a:6c:7c:3c:9f:d6:71:47:33:
bb:c5:ec:a4:da:9f:c9:a5:9c:e5:68:8a:9f:b7:18:22:61:44:
c5:a9:9e:61:15:17:69:bd:fa:92:c8:1c:5e:b7:e7:30:c7:c6:
40:44:ab:1c:ff:8f:c0:dc:ed:9f:39:43:8e:5b:56:ea:a1:6d:
70:ef:05:f6:18:29:90:fa:01:8e:b1:10:c6:a0:9e:84:25:7b:
91:61:65:75:5d:b6:0e:bb:26:03:db:87:88:ff:37:bf:2f:4e:
17:b8:fc:1b:47:67:ec:26:44:ab:50:65:58:2e:61:33:33:28:
9f:18:5f:47:31:04:cd:0c:e7:aa:e1:d5:96:7c:aa:b2:b1:b5:
aa:1e:61:13:aa:51:99:86:05:9d:f3:d5:1a:7d:95:86:02:9f:
ec:a2:4e:39:2e:59:16:79:9c:1c:10:ef:96:0c:e6:8c:83:b0:
f4:9c:7a:75:47:97:a0:d3:13:0c:d2:9e:cd:02:bb:c0:d2:bd:
fe:7b:7c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:56:26 2026 by rpki-client