Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C15A2F000E5911F1A4E679C7DAE4EC9C.roa
File: C15A2F000E5911F1A4E679C7DAE4EC9C.roa (raw, json)
Hash identifier: DFiQyTJ75GdImNWsNzfSsiD902/vFqTR+ii4qGeanvo=
Subject key identifier: C1:02:AF:03:49:CC:15:6B:34:82:F5:5C:B5:9D:30:8E:CC:FD:36:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA6C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C15A2F000E5911F1A4E679C7DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 12:43:28 +0000
ROA not before: Fri 20 Feb 2026 12:43:24 +0000
ROA not after: Fri 27 Mar 2026 12:43:24 +0000
asID: 138915
IP address blocks: 154.205.128.0/24 maxlen: 24
154.205.129.0/24 maxlen: 24
154.205.130.0/24 maxlen: 24
154.205.131.0/24 maxlen: 24
154.205.132.0/24 maxlen: 24
154.205.133.0/24 maxlen: 24
154.205.134.0/24 maxlen: 24
154.205.135.0/24 maxlen: 24
154.205.136.0/23 maxlen: 24
154.205.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113260 (0x1ba6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 12:43:24 2026 GMT
Not After : Mar 27 12:43:24 2026 GMT
Subject: CN=699856f0-1c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1e:a9:dd:34:c4:48:51:1c:5d:43:28:aa:17:
de:a4:e0:ff:5d:62:59:01:b1:51:91:15:8e:eb:fc:
a3:2f:0b:f1:e7:32:a2:3f:45:4e:4a:4b:93:0e:9a:
fe:e4:d5:c1:f2:97:cf:cd:51:74:e2:6f:b6:25:56:
0e:da:0f:83:67:a6:eb:e9:d4:94:93:91:ec:a7:1c:
7f:71:96:f2:19:1c:9b:c9:09:20:fd:a1:be:48:2f:
cd:6e:71:82:a0:cb:4b:53:0d:0b:71:3c:3c:2b:9a:
f2:6b:fb:32:b9:06:c9:02:fb:8e:c7:cc:c4:d2:15:
14:cd:df:3c:ee:be:39:a9:e7:00:3e:b6:8e:be:87:
3c:b0:0e:b0:db:3b:a0:02:ed:e0:13:ae:38:d7:35:
03:71:45:68:60:97:ea:6e:49:38:6e:08:9f:1c:72:
b0:bb:a4:28:b2:43:8f:8f:8c:80:98:de:bf:cc:96:
20:f0:36:cf:47:79:e6:10:15:e0:09:5b:5a:01:6e:
8d:9a:35:93:e1:64:ae:f5:1c:dc:bd:4e:78:4e:4a:
ff:cd:32:ee:3d:9b:fa:af:11:6e:f3:06:f8:a8:44:
76:df:23:d2:a1:70:70:62:75:93:d8:b9:bd:be:2a:
51:76:80:36:4a:61:93:80:35:4c:d5:eb:24:99:63:
1f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:02:AF:03:49:CC:15:6B:34:82:F5:5C:B5:9D:30:8E:CC:FD:36:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C15A2F000E5911F1A4E679C7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.128.0-154.205.138.255
Signature Algorithm: sha256WithRSAEncryption
8a:ad:e2:d9:fd:40:54:09:42:4d:fc:3e:bd:f2:63:1b:e1:65:
6e:99:8d:c5:35:bb:b5:9b:07:bd:be:d0:fc:19:bf:3a:d0:30:
bc:f7:0f:95:e4:84:d1:70:e0:58:19:95:d7:a4:89:88:a8:d6:
a8:38:a9:22:b4:ea:1c:0f:b4:8a:a2:b4:01:18:d7:05:b8:51:
a6:c8:b7:46:f3:f8:23:c8:a8:e2:1b:dd:cd:81:61:15:bc:6c:
75:45:ca:ea:59:b6:78:54:78:20:08:d0:c6:c1:92:a6:e5:6d:
71:4b:03:ce:15:d8:48:47:09:51:7f:56:fa:ba:7e:18:95:14:
87:2f:f2:9b:42:4b:1a:a2:40:f3:5f:3e:75:30:b8:e2:1d:1a:
47:4a:89:ab:03:2c:76:f5:48:59:1c:71:ee:1d:1f:51:76:7d:
85:b3:a2:30:27:db:d3:6a:a3:45:c2:03:66:fe:8e:4a:a0:ab:
b8:db:7b:47:24:65:e5:08:8d:8e:56:4d:f0:c5:86:2d:81:f5:
98:3b:4e:a2:6e:2d:7c:94:3b:58:bd:f3:00:08:6e:97:dc:2f:
4f:75:89:7e:b4:70:ef:32:c8:74:80:8e:71:ee:d8:c3:2b:01:
68:dd:d4:20:0a:c9:09:5a:d2:76:dc:0e:5f:b2:14:97:c9:8a:
9e:15:df:92
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAbpsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjIwMTI0MzI0WhcNMjYwMzI3MTI0MzI0WjAYMRYw
FAYDVQQDEw02OTk4NTZmMC0xYzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwB6p3TTESFEcXUMoqhfepOD/XWJZAbFRkRWO6/yjLwvx5zKiP0VOSkuT
Dpr+5NXB8pfPzVF04m+2JVYO2g+DZ6br6dSUk5Hspxx/cZbyGRybyQkg/aG+SC/N
bnGCoMtLUw0LcTw8K5rya/syuQbJAvuOx8zE0hUUzd887r45qecAPraOvoc8sA6w
2zugAu3gE6441zUDcUVoYJfqbkk4bgifHHKwu6QoskOPj4yAmN6/zJYg8DbPR3nm
EBXgCVtaAW6NmjWT4WSu9RzcvU54Tkr/zTLuPZv6rxFu8wb4qER23yPSoXBwYnWT
2Lm9vipRdoA2SmGTgDVM1eskmWMfCQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFMEC
rwNJzBVrNIL1XLWdMI7M/TZzMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMTVBMkYwMDBFNTkxMUYxQTRFNjc5QzdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAeazYADBACazYowDQYJ
KoZIhvcNAQELBQADggEBAIqt4tn9QFQJQk38Pr3yYxvhZW6ZjcU1u7WbB72+0PwZ
vzrQMLz3D5XkhNFw4FgZldekiYio1qg4qSK06hwPtIqitAEY1wW4UabIt0bz+CPI
qOIb3c2BYRW8bHVFyupZtnhUeCAI0MbBkqblbXFLA84V2EhHCVF/Vvq6fhiVFIcv
8ptCSxqiQPNfPnUwuOIdGkdKiasDLHb1SFkcce4dH1F2fYWzojAn29Nqo0XCA2b+
jkqgq7jbe0ckZeUIjY5WTfDFhi2B9Zg7TqJuLXyUO1i98wAIbpfcL091iX60cO8y
yHSAjnHu2MMrAWjd1CAKyQla0nbcDl+yFJfJip4V35I=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:33:52 2026 by rpki-client