Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5918D6208E011F18589FC9DDAE4EC9C.roa
File: C5918D6208E011F18589FC9DDAE4EC9C.roa (raw, json)
Hash identifier: UVlbly3uw/m9fsatUD0TmO5jKI+LhASea7epLhXVm44=
Subject key identifier: 20:90:4C:78:17:D3:0C:78:96:E4:D2:A5:4F:71:1A:AA:F1:1B:0B:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B94C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5918D6208E011F18589FC9DDAE4EC9C.roa
Signing time: Fri 13 Feb 2026 13:34:51 +0000
ROA not before: Fri 13 Feb 2026 13:34:45 +0000
ROA not after: Fri 20 Mar 2026 13:34:45 +0000
asID: 20326
IP address blocks: 154.198.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112972 (0x1b94c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 13 13:34:45 2026 GMT
Not After : Mar 20 13:34:45 2026 GMT
Subject: CN=698f287b-cbd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:81:a3:9c:ce:4e:4e:0f:af:65:06:c2:1f:d9:
13:91:02:9d:a0:aa:2e:fb:ec:ca:67:ad:a2:57:7d:
e2:80:de:60:a4:88:4b:cd:e6:47:86:34:29:ab:ba:
5a:e2:ad:8a:bb:fa:d6:cc:ed:e2:17:9d:37:ee:d3:
7b:01:6b:b1:74:b3:4e:1a:93:34:0b:f7:50:dc:8c:
35:d1:43:e5:62:33:be:64:e5:2b:94:72:b7:a1:4b:
5d:15:37:1c:c6:2a:3b:aa:0b:70:39:b6:97:80:96:
a4:0a:07:2e:5b:fa:0a:98:c1:7e:70:9b:df:b4:ce:
29:02:c1:f9:82:ee:7c:79:12:bc:4b:f5:f7:7f:35:
55:1f:7a:33:8c:2f:57:ca:db:ce:83:b7:3a:91:54:
10:9d:b4:f7:16:37:f1:2e:78:dd:a9:c8:aa:f2:ab:
34:67:39:82:81:6a:6a:61:69:05:98:69:90:92:fc:
b6:3a:3e:67:fb:ea:24:85:46:c7:d4:40:c9:b4:60:
8c:dd:f7:50:43:30:2d:23:33:f2:8e:00:78:b6:e9:
aa:9b:86:7d:22:c6:36:3c:21:bd:cd:70:3d:e3:bf:
a0:6b:2f:fe:18:11:af:3d:e3:15:1d:ac:94:0e:24:
49:02:fc:0e:56:3b:98:04:53:f3:c5:43:5c:25:f8:
cb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:90:4C:78:17:D3:0C:78:96:E4:D2:A5:4F:71:1A:AA:F1:1B:0B:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5918D6208E011F18589FC9DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.176.0/21
Signature Algorithm: sha256WithRSAEncryption
11:0e:4e:6b:6f:9b:bb:a3:7c:6e:a6:d5:03:8d:8f:4b:8e:4c:
4d:98:8c:82:a9:fa:ee:68:0b:f0:10:e3:6a:88:6b:13:2b:d0:
07:ce:19:05:9e:60:1a:02:9a:08:7e:67:bd:16:b4:b4:3a:69:
3f:9c:f0:25:53:bd:a4:27:e7:0f:30:bd:01:fd:3d:cc:7b:1a:
63:f7:3e:3a:f6:dd:4f:7f:3d:2b:60:1e:64:be:79:9c:22:1d:
4e:67:60:a9:34:1d:87:2e:e0:a8:f8:94:f2:49:07:4d:dd:5e:
bc:10:5b:86:9c:45:3c:19:38:38:9c:04:d3:17:7a:97:ce:33:
98:72:2a:7a:ad:6f:89:4c:88:48:77:7f:58:73:13:fe:d3:be:
ac:e3:12:2b:ce:c4:26:96:b9:f6:13:3a:3a:8a:ab:a5:a5:aa:
3c:55:ce:d6:ae:c1:df:da:fc:b4:62:37:34:ba:b9:d8:eb:1c:
0d:0d:79:fd:11:2b:32:2a:c3:9b:6e:1c:5b:18:fe:71:5c:4d:
fe:f8:20:dc:3b:76:de:5e:a1:b1:40:5a:6a:91:f7:72:1a:35:
ed:a3:72:8a:df:29:f6:e7:4d:d8:f0:5e:93:00:b9:bb:02:d4:
07:a7:69:e7:b7:93:ed:ae:a1:58:3b:51:53:ca:a3:ab:74:43:
2e:cf:e9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:25:07 2026 by rpki-client