Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9A4555C12E511F19A435DB7DAE4EC9C.roa
File: B9A4555C12E511F19A435DB7DAE4EC9C.roa (raw, json)
Hash identifier: 34IAwo2TUxH73f3XvlGJn38b6LUk2BD4RSjP+P+G/vI=
Subject key identifier: 3D:E8:EF:21:D6:C7:F2:20:37:A4:5D:54:F7:C3:38:63:0D:78:29:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BBE9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9A4555C12E511F19A435DB7DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 07:35:30 +0000
ROA not before: Thu 26 Feb 2026 07:35:25 +0000
ROA not after: Thu 09 Apr 2026 07:35:25 +0000
asID: 395793
IP address blocks: 154.81.50.0/24 maxlen: 24
154.83.8.0/24 maxlen: 24
154.83.9.0/24 maxlen: 24
154.83.10.0/24 maxlen: 24
154.83.11.0/24 maxlen: 24
154.83.24.0/24 maxlen: 24
154.93.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113641 (0x1bbe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 26 07:35:25 2026 GMT
Not After : Apr 9 07:35:25 2026 GMT
Subject: CN=699ff7c2-258c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:5b:f4:48:ee:8b:16:4f:6c:5e:62:ba:c7:
1d:4a:b4:60:e7:b5:c3:ba:4f:32:13:60:76:4e:4f:
9c:29:ca:76:94:43:38:76:08:b7:98:8d:b0:3e:a6:
e4:51:09:99:37:9b:d0:bd:d1:59:6e:66:d9:04:96:
00:b1:8a:92:67:72:eb:17:f6:9c:aa:46:bf:a4:10:
6f:95:16:ad:6e:95:20:21:c7:0c:3c:2e:cc:11:6d:
b9:f5:72:4a:65:e2:e4:4f:c4:26:f5:b1:54:e0:25:
a9:69:9c:7d:61:68:f6:ef:5b:c2:9d:a8:b6:f4:59:
6e:e1:e1:44:3d:ff:4e:7a:8c:c7:83:72:b7:3d:38:
e8:2e:b4:c8:ec:99:2e:79:9e:eb:30:32:b9:56:07:
14:35:61:92:50:d2:ce:e6:9e:48:4f:4a:be:c8:45:
4c:41:68:5a:fc:de:da:1d:e1:d5:9e:ed:42:40:93:
21:5e:e7:68:b7:19:88:36:6a:ce:fd:99:81:94:49:
a6:a9:08:4a:c4:9e:37:61:c0:32:df:31:6f:da:51:
50:17:7d:e9:0d:38:dd:fa:2d:03:c1:c8:02:6b:98:
c4:88:2f:1e:20:d2:68:3f:e0:3b:91:af:aa:27:6b:
62:d5:29:69:f7:7d:10:4b:fb:f1:0e:53:06:d9:73:
3c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E8:EF:21:D6:C7:F2:20:37:A4:5D:54:F7:C3:38:63:0D:78:29:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9A4555C12E511F19A435DB7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.50.0/24
154.83.8.0/22
154.83.24.0/24
154.93.0.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:f1:56:e8:25:7b:5f:c3:0b:10:97:78:44:24:3c:8e:02:d2:
20:ff:45:be:08:53:47:5e:bd:c8:6d:41:83:a6:31:75:05:8e:
86:74:87:47:54:aa:b0:e9:f2:af:c3:03:e8:c2:0f:1e:97:24:
c6:df:32:49:85:1f:a7:04:04:72:f9:2d:72:0f:4d:69:88:52:
f3:85:4f:33:db:b8:2a:12:88:58:c0:7c:85:29:7c:b2:5a:03:
24:6b:c5:2a:8c:0c:fd:a6:37:de:86:d5:75:48:b3:62:1c:60:
56:55:0e:41:f7:cc:ae:e3:ac:1e:bc:9e:06:ff:f7:d1:da:fa:
65:4b:c3:53:f6:e9:a4:b5:e2:c9:7a:54:cb:49:c7:03:90:c7:
2d:1f:1c:82:1d:7d:8e:7d:e3:be:fb:60:50:70:01:3c:22:5f:
09:5b:bd:48:27:07:dd:26:35:d6:4e:54:18:63:44:2e:8a:ed:
20:35:e0:4f:27:7d:34:c9:20:3f:50:9b:96:4f:9a:8e:5f:23:
44:01:f4:48:5b:5e:e0:6d:b0:6b:bc:a5:43:31:8b:95:28:9a:
c2:e0:9d:c8:eb:55:fd:6e:be:f0:a3:bc:3c:59:e8:4e:ab:9d:
7d:2c:2e:ff:69:6e:0e:87:00:48:35:93:14:ee:49:2f:2e:55:
35:ca:de:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:16 2026 by rpki-client