Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC91979E0E3411F19F1AEBE9DAE4EC9C.roa
File: BC91979E0E3411F19F1AEBE9DAE4EC9C.roa (raw, json)
Hash identifier: FAc6DCXYsYvWXwFEBtHXfxF4u2hiKSGVXLW4aRa0EiM=
Subject key identifier: F8:54:AF:E0:AC:6F:42:76:D6:59:AE:24:37:C3:8A:2E:FE:D0:7E:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA46
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC91979E0E3411F19F1AEBE9DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 08:18:29 +0000
ROA not before: Fri 20 Feb 2026 08:18:25 +0000
ROA not after: Thu 19 Mar 2026 08:18:25 +0000
asID: 11404
IP address blocks: 154.83.160.0/20 maxlen: 24
154.89.240.0/20 maxlen: 24
154.90.80.0/20 maxlen: 24
154.90.96.0/19 maxlen: 24
154.92.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113222 (0x1ba46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 08:18:25 2026 GMT
Not After : Mar 19 08:18:25 2026 GMT
Subject: CN=699818d5-ed41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ac:83:48:04:8c:e4:b7:80:c0:67:65:86:58:
ec:ca:cf:76:90:1b:04:09:29:c1:03:e6:6b:fd:fd:
bd:e3:5c:28:f6:22:bb:16:e9:12:10:94:25:72:54:
47:6d:4d:87:dd:21:f5:f2:32:3b:d3:b4:87:2e:ce:
53:e1:d1:eb:e2:68:19:09:dc:d9:4f:76:c6:bb:b4:
91:de:f5:68:5a:2f:cc:88:77:1f:61:47:a0:37:7a:
e9:87:0c:3a:c0:fb:8f:bc:89:ad:84:db:1d:08:64:
cb:70:ed:69:c3:fa:5f:4a:28:a8:b3:d9:5a:88:44:
9b:ea:06:90:9b:e5:0f:b6:63:fc:92:62:53:5a:76:
1d:66:ce:5f:8d:24:b0:96:dd:0e:2e:60:6b:4f:71:
66:e9:eb:75:43:91:7f:74:74:74:37:7f:0d:0b:6f:
49:34:36:79:71:0d:e9:8c:6f:47:fb:2b:91:ad:1a:
92:4d:84:06:cf:9c:b1:b5:05:d8:87:b4:b9:30:6a:
07:c6:63:f0:e5:25:99:41:7c:fb:5f:f8:b6:8a:08:
67:dd:33:e9:2e:50:75:15:e9:b3:ad:21:e0:3f:e0:
b0:15:bb:23:e6:08:32:08:5b:13:4c:b0:cd:dc:9c:
3e:2f:30:c0:cf:a5:8d:6b:7f:a2:8a:53:88:c2:df:
37:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:54:AF:E0:AC:6F:42:76:D6:59:AE:24:37:C3:8A:2E:FE:D0:7E:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC91979E0E3411F19F1AEBE9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.160.0/20
154.89.240.0/20
154.90.80.0-154.90.127.255
154.92.144.0/20
Signature Algorithm: sha256WithRSAEncryption
cf:6b:b4:c1:dd:37:05:0e:ff:44:b3:ef:31:bb:e3:8a:5b:1a:
2d:57:94:7b:10:31:6e:b4:f0:98:8a:33:7f:2d:b7:af:1b:bf:
39:87:02:16:b7:6d:cd:5c:be:bd:26:75:73:e4:12:6f:8a:8b:
35:7a:ea:93:e2:b5:c7:29:6a:0e:44:3d:03:00:a3:e5:72:4f:
61:c8:2c:8b:c8:8e:89:29:5f:9a:4a:9e:2a:e3:26:2e:05:a2:
60:c0:74:42:e2:d7:8c:fc:89:02:e0:9e:42:c5:c7:96:40:92:
f0:b8:81:70:7d:2d:69:2e:18:96:2a:f7:42:10:5f:1b:37:09:
e1:f8:20:16:37:33:5b:72:49:11:5a:4c:f1:55:91:5f:7b:45:
45:b2:70:0d:de:d8:bf:aa:08:bd:1e:ac:51:00:1f:d9:66:92:
ca:72:4c:43:be:34:a0:fe:b9:bb:98:4a:7b:e9:e7:04:b2:65:
f4:c4:83:a9:7f:a5:25:ef:00:a1:5f:6d:8b:cb:98:cb:a3:63:
c8:88:af:ce:39:2e:9d:77:ab:0b:d9:0b:b0:91:71:42:71:0c:
25:f0:a2:1e:53:6c:93:6b:a4:72:b9:d1:ee:89:f3:a2:2f:55:
77:d2:63:74:2b:12:07:ec:62:e4:be:52:5d:13:3f:1e:65:82:
a4:1e:01:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:57 2026 by rpki-client