Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9212DCE019811F18FA3ECE8DAE4EC9C.roa
File: C9212DCE019811F18FA3ECE8DAE4EC9C.roa (raw, json)
Hash identifier: r7UBQP+rO8Ll9fv29R/UGxd56v7uttGEcIpE/LsjK6o=
Subject key identifier: 7F:9D:E6:FD:CA:C3:DB:59:42:3B:58:7B:C4:07:07:CE:59:DD:8F:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B86D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9212DCE019811F18FA3ECE8DAE4EC9C.roa
Signing time: Wed 04 Feb 2026 07:11:55 +0000
ROA not before: Wed 04 Feb 2026 07:11:50 +0000
ROA not after: Thu 12 Mar 2026 07:11:50 +0000
asID: 138915
IP address blocks: 154.90.32.0/23 maxlen: 24
154.90.34.0/23 maxlen: 24
154.90.36.0/23 maxlen: 24
154.90.38.0/23 maxlen: 24
154.90.40.0/23 maxlen: 24
154.90.42.0/23 maxlen: 24
154.90.48.0/23 maxlen: 24
154.90.52.0/23 maxlen: 24
154.90.54.0/23 maxlen: 24
154.90.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112749 (0x1b86d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 4 07:11:50 2026 GMT
Not After : Mar 12 07:11:50 2026 GMT
Subject: CN=6982f13b-716d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5c:a4:c7:db:e2:3d:c1:36:10:6a:9c:30:99:
84:1d:af:ae:86:71:ac:c8:52:72:e2:f1:26:98:a5:
f1:18:48:7f:61:92:7b:00:73:af:d1:9f:91:26:f6:
6d:c9:ed:8d:35:52:52:bc:72:b9:c3:1f:d0:4b:ab:
90:c5:69:48:af:bc:14:44:28:84:de:00:c9:9f:39:
ba:ea:dc:88:ae:d3:db:8f:74:43:de:7e:27:3c:7f:
61:68:fb:a6:be:a2:c8:fc:50:ca:40:d7:b5:82:db:
aa:6e:aa:f7:a6:4d:a2:c1:b4:ab:a1:9a:4f:65:a4:
7c:02:cb:cb:fe:eb:0f:8e:2a:51:da:d2:7e:c5:ce:
c7:1f:22:7f:36:d4:be:44:54:2a:e4:d9:09:3c:71:
e7:ea:9a:d2:be:65:16:ea:bf:dd:3f:80:8f:3c:1b:
15:e7:f4:a9:fa:37:ac:ea:04:ff:1a:5b:cd:57:d7:
f5:8b:e9:4a:ca:79:3c:14:20:50:88:bb:a7:90:11:
66:02:00:eb:6c:e0:47:39:56:d5:01:8b:db:fd:c0:
60:8f:f3:ec:c4:73:12:a6:b2:b5:ed:bb:2a:84:71:
c8:f4:aa:3a:15:44:9c:37:59:fb:fc:4f:b0:43:6f:
b6:7a:4d:9b:15:86:87:5e:8d:d5:4c:e4:0f:86:c9:
27:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9D:E6:FD:CA:C3:DB:59:42:3B:58:7B:C4:07:07:CE:59:DD:8F:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9212DCE019811F18FA3ECE8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.32.0-154.90.43.255
154.90.48.0/23
154.90.52.0-154.90.57.255
Signature Algorithm: sha256WithRSAEncryption
7f:74:ed:7f:fd:21:eb:af:82:56:69:65:96:24:39:43:4b:10:
af:6b:66:ce:1b:a3:63:b3:1e:8c:cc:e7:8c:f5:72:b9:19:95:
84:a6:e7:35:a7:7a:4a:df:84:1a:41:82:17:c6:be:6b:e9:dc:
9e:56:92:8b:70:81:2a:95:3d:71:13:a3:b8:03:e3:54:80:d1:
d0:24:15:be:6d:00:34:77:a4:92:b9:2f:d4:4e:43:6b:f6:4d:
30:5a:47:4d:a4:70:54:5b:80:d3:20:27:61:19:8b:c6:6a:0f:
4f:4d:6d:ba:a8:cf:c5:7b:25:01:e5:39:9f:b2:ab:b0:5f:e1:
ba:63:67:2f:cb:3d:7d:80:b0:39:9e:6c:ba:c2:09:e8:f3:e2:
6e:1c:42:1d:09:c4:f5:2c:65:ad:da:e8:d5:c0:25:0e:5f:3f:
e9:a7:61:a3:12:4e:65:e0:a7:55:d8:6b:23:da:bd:0e:41:f1:
d2:78:51:dc:5d:b2:9e:96:ff:d2:db:cc:73:a3:c7:e7:d6:b4:
f9:51:d2:5f:e2:d5:68:39:0c:9a:e9:51:fb:68:f3:07:27:47:
c4:01:72:42:8f:36:65:cd:f7:78:e1:8a:76:e0:b2:30:3a:e5:
46:ed:b2:05:4c:fe:21:2f:af:0b:66:2c:4b:63:10:44:d3:6c:
90:49:28:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:39 2026 by rpki-client