Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3B1510413CA11F1A1D498B3DAE4EC9C.roa
File: C3B1510413CA11F1A1D498B3DAE4EC9C.roa (raw, json)
Hash identifier: 38PVJNZw/gBJ+lMARq8ppVIIHIl24UHaK73h9CKQ4Os=
Subject key identifier: 1F:44:2A:A3:2A:C9:6D:85:49:6E:50:0A:80:51:6D:90:50:D0:2C:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC48
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3B1510413CA11F1A1D498B3DAE4EC9C.roa
Signing time: Fri 27 Feb 2026 10:55:01 +0000
ROA not before: Fri 27 Feb 2026 10:54:56 +0000
ROA not after: Sun 08 Mar 2026 10:54:56 +0000
asID: 6079
IP address blocks: 154.194.45.0/24 maxlen: 24
154.194.57.0/24 maxlen: 24
154.194.60.0/24 maxlen: 24
154.194.61.0/24 maxlen: 24
154.194.194.0/24 maxlen: 24
154.194.204.0/24 maxlen: 24
154.194.205.0/24 maxlen: 24
154.194.224.0/24 maxlen: 24
154.194.228.0/24 maxlen: 24
154.194.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113736 (0x1bc48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 10:54:56 2026 GMT
Not After : Mar 8 10:54:56 2026 GMT
Subject: CN=69a17805-22c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cd:31:39:9b:80:d1:43:31:a2:c8:74:29:96:
1b:2c:ab:7c:57:41:d1:00:39:85:fe:72:9d:8e:95:
49:8a:6c:46:15:2b:d5:59:05:83:14:1c:e8:e8:d1:
c3:0c:bd:82:02:d2:4b:fd:d4:45:ea:da:b7:16:b6:
22:2e:66:1a:af:02:b4:12:68:e6:f7:b3:d4:9a:86:
60:c5:75:f0:0d:06:29:ac:0c:1f:52:18:0a:40:b4:
b7:56:38:66:72:cf:10:4e:8d:45:a0:e4:6c:57:f9:
fd:3b:cc:c8:c1:41:dc:70:e1:b8:e8:c8:be:05:31:
62:e0:7a:3c:22:2d:6e:10:b2:1a:99:90:1c:01:8b:
9a:10:20:34:d0:76:85:5f:29:e5:25:fa:cf:5d:11:
c3:51:dd:9f:79:0f:d7:7e:24:2d:03:c5:29:55:89:
cf:e1:8c:04:fa:db:c6:1b:31:2a:40:61:14:32:2e:
95:22:39:11:04:26:26:c2:b3:b1:ff:be:99:9e:0e:
91:15:a5:e6:86:29:18:13:42:08:eb:21:eb:08:6e:
68:a7:93:d3:93:e2:d3:1d:1c:d8:55:ad:89:e0:20:
8d:09:56:29:6b:cf:e2:9a:79:a6:b4:ab:67:57:96:
26:b8:53:ab:3c:0b:96:18:3d:e0:82:5a:b4:83:d3:
2e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:44:2A:A3:2A:C9:6D:85:49:6E:50:0A:80:51:6D:90:50:D0:2C:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3B1510413CA11F1A1D498B3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.45.0/24
154.194.57.0/24
154.194.60.0/23
154.194.194.0/24
154.194.204.0/23
154.194.224.0/24
154.194.228.0/24
154.194.231.0/24
Signature Algorithm: sha256WithRSAEncryption
06:61:1c:fa:13:4a:17:8e:b9:9e:49:3d:fa:a5:05:f4:8e:7d:
3a:0c:c9:9e:11:81:4a:a0:2b:e3:35:9d:f1:88:39:3d:eb:30:
2d:b1:ca:94:af:e1:9f:c2:d1:ac:46:1b:5f:72:75:02:e8:34:
92:ea:7e:d9:03:86:48:dd:f7:6c:ed:f7:c7:de:0f:6a:ef:9e:
33:d9:66:85:34:79:2f:75:bf:ca:58:6f:58:1c:2a:e7:48:97:
f7:0d:b3:db:76:4b:2e:78:59:0a:c9:af:b3:f9:85:25:1e:fb:
79:0c:64:f1:85:17:31:31:83:2b:40:4d:d8:52:66:10:04:fc:
50:75:07:64:cb:d8:8a:83:55:29:dc:92:30:1c:29:b4:1c:08:
96:02:ae:83:f8:81:d3:be:59:ae:5c:9b:96:46:e2:ce:f9:fa:
87:80:d0:c5:47:92:3d:2c:f2:ad:8f:9b:61:07:1f:f4:5b:a0:
e0:62:a9:20:dd:42:83:13:ee:0a:7b:7c:1d:79:dc:48:4d:d4:
02:92:59:f9:ad:e4:0d:f2:94:8e:d4:42:2c:dd:cd:06:a3:22:
a8:74:d3:56:d9:98:99:c9:5e:22:2e:4a:77:82:c6:37:eb:2d:
29:aa:60:fe:28:27:7b:6c:dc:ea:93:a7:d7:21:5b:ce:b1:d9:
22:38:00:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:02:38 2026 by rpki-client