Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF657866FE8811F0AD16B392DAE4EC9C.roa
File: BF657866FE8811F0AD16B392DAE4EC9C.roa (raw, json)
Hash identifier: LKm0FqNi5594a7X2Q7E6Ep33ZH/tOzTbYkzVvBib7gk=
Subject key identifier: 7A:F1:5E:CD:10:06:F9:B0:06:B9:7D:CA:8A:7F:D7:72:ED:A3:73:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B7DC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF657866FE8811F0AD16B392DAE4EC9C.roa
Signing time: Sat 31 Jan 2026 09:39:33 +0000
ROA not before: Sat 31 Jan 2026 09:39:28 +0000
ROA not after: Sun 08 Mar 2026 09:39:28 +0000
asID: 48031
IP address blocks: 154.213.6.0/24 maxlen: 24
154.213.7.0/24 maxlen: 24
154.222.248.0/24 maxlen: 24
154.222.249.0/24 maxlen: 24
154.222.250.0/24 maxlen: 24
154.222.251.0/24 maxlen: 24
154.222.253.0/24 maxlen: 24
154.222.254.0/24 maxlen: 24
154.222.255.0/24 maxlen: 24
154.223.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112604 (0x1b7dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 09:39:28 2026 GMT
Not After : Mar 8 09:39:28 2026 GMT
Subject: CN=697dcdd5-528a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f5:ec:93:67:c2:74:8d:a3:b7:25:05:1d:82:
00:58:2f:b1:4b:36:57:4a:95:69:16:e4:64:64:01:
c5:bb:0e:4f:7e:01:28:df:0f:6e:a7:7e:8c:b4:58:
13:1f:83:08:e3:2b:24:80:1d:b5:9f:d1:96:23:d6:
f6:e0:43:90:7b:6e:2d:39:9b:59:cf:f4:8d:72:bc:
bd:bf:42:e3:5a:88:1f:8a:91:7b:d9:78:2d:17:52:
24:c3:3e:fe:02:ed:69:1e:ab:32:00:01:95:bc:86:
e1:3d:9c:eb:e4:94:2c:92:e9:df:71:3b:d5:c6:5a:
1a:c3:0b:8c:5c:af:71:a6:db:d4:97:b5:3e:1a:15:
58:a0:14:d8:88:65:07:7b:11:33:ae:9f:db:e2:d0:
24:89:93:d4:3c:3b:9b:1e:80:a0:94:1a:d5:13:59:
00:db:b8:15:c0:33:8d:3f:84:06:d6:d1:00:19:e1:
6f:81:76:92:ca:a1:60:c5:37:71:81:86:58:87:6f:
ae:16:e2:36:cb:0d:e8:e6:b9:ea:d5:e7:e1:ab:dc:
dc:c3:ed:b1:93:59:db:86:12:0a:a0:82:dd:66:0f:
61:7e:46:ce:69:00:2a:2e:6e:36:73:e7:3f:ba:09:
6b:d1:3a:8f:14:31:1d:4a:fc:6a:6f:51:cc:d5:cf:
f1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F1:5E:CD:10:06:F9:B0:06:B9:7D:CA:8A:7F:D7:72:ED:A3:73:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF657866FE8811F0AD16B392DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.6.0/23
154.222.248.0/22
154.222.253.0-154.222.255.255
154.223.80.0/24
Signature Algorithm: sha256WithRSAEncryption
06:65:67:19:ce:a4:35:40:4b:86:4a:d8:2a:8c:4e:fa:ce:4c:
0b:d4:d2:38:0b:5e:00:29:73:7b:b1:c1:17:64:10:fb:3b:71:
e9:c9:f6:dd:da:26:28:f2:96:ac:ce:b5:65:b5:82:58:c3:84:
76:b9:66:63:0c:c7:b4:07:b0:bd:f5:03:19:fc:80:cf:87:af:
51:ae:c7:55:25:8e:d9:54:83:75:16:8b:60:ca:79:94:72:69:
9e:86:60:c9:68:f7:80:00:95:d2:82:af:62:77:87:f5:3b:4b:
70:b0:74:05:d6:0b:c5:79:09:77:b7:69:05:b7:59:99:d2:fa:
29:86:75:d8:c4:98:a7:d6:1d:04:cf:43:ff:eb:f4:65:72:e6:
da:4d:3a:29:3f:20:2e:db:76:5e:fe:cb:da:7c:7b:03:41:d4:
14:e4:e5:80:32:f1:bb:9e:d9:a4:7f:94:48:60:ff:07:6f:70:
96:10:23:83:62:21:c0:e4:de:5c:1e:0e:cb:ad:e8:e4:f4:0d:
ab:f7:3f:ed:bb:d2:b4:4b:aa:75:3a:d7:64:d6:50:fa:d1:95:
3e:3b:da:57:be:18:f4:49:82:dd:8c:f3:14:a1:bd:50:bb:d3:
81:4f:c9:4e:0d:47:d0:46:e1:97:a2:98:26:36:21:6a:8f:e9:
99:b1:84:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:50 2026 by rpki-client