Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CABE38E6FC2C11F09DDEC993DAE4EC9C.roa
File: CABE38E6FC2C11F09DDEC993DAE4EC9C.roa (raw, json)
Hash identifier: fJNYjuJEsdDfFcZfbvlRItB8ocbXGE6rNbEsV2l8Q54=
Subject key identifier: AE:87:A3:A2:FD:91:B6:58:B9:8B:BA:CA:88:A5:A7:97:DC:17:7C:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B709
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CABE38E6FC2C11F09DDEC993DAE4EC9C.roa
Signing time: Wed 28 Jan 2026 09:36:17 +0000
ROA not before: Wed 28 Jan 2026 09:36:11 +0000
ROA not after: Mon 02 Mar 2026 09:36:11 +0000
asID: 9304
IP address blocks: 154.193.35.0/24 maxlen: 24
154.196.179.0/24 maxlen: 24
154.196.180.0/24 maxlen: 24
154.200.26.0/24 maxlen: 24
154.200.43.0/24 maxlen: 24
154.200.51.0/24 maxlen: 24
154.200.52.0/24 maxlen: 24
154.200.140.0/24 maxlen: 24
154.200.142.0/24 maxlen: 24
154.200.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 02 Mar 2026 09:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112393 (0x1b709)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 09:36:11 2026 GMT
Not After : Mar 2 09:36:11 2026 GMT
Subject: CN=6979d890-4055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:2b:16:e6:c8:0a:70:44:61:c1:64:55:d6:
e9:4b:3a:4f:54:23:d5:4c:e1:da:14:d0:d9:a9:c2:
4f:7a:eb:5d:d1:26:4f:d4:52:d4:20:ea:62:4c:7b:
b6:f3:a1:2e:b0:f0:2f:d6:11:3b:d5:37:a1:84:cd:
7c:91:7a:b6:30:99:80:64:a3:53:35:9d:a1:d7:d8:
e0:29:c9:aa:c5:69:54:f2:57:d4:3d:93:7f:c0:14:
cd:65:24:ea:97:ce:b5:a8:80:d2:f2:30:8b:19:6d:
c1:75:c5:a9:03:ca:84:04:81:ba:f1:2e:64:34:c4:
d7:98:61:b8:2a:52:5e:3d:6a:b2:74:44:7a:a6:3e:
bf:50:25:86:44:0a:d7:79:2b:dc:4d:e8:74:10:30:
bd:86:98:2f:3b:c6:ca:bc:59:fa:88:ec:5a:f4:fd:
1b:9a:2e:37:6e:94:0c:65:15:c7:d1:e4:05:9d:80:
51:91:1a:20:04:ba:5d:74:aa:11:cb:90:ef:4c:aa:
77:d5:3a:b7:dd:a4:57:69:b5:06:e6:e0:64:63:04:
1a:e2:41:ae:ce:25:dd:49:9e:a7:9f:15:9a:d4:cc:
50:22:2f:f5:ce:4f:b4:b1:9f:99:1f:a7:cb:0f:cc:
a9:d7:4c:ac:58:a3:aa:fe:dd:68:d5:0f:02:b7:af:
bb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:87:A3:A2:FD:91:B6:58:B9:8B:BA:CA:88:A5:A7:97:DC:17:7C:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CABE38E6FC2C11F09DDEC993DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.35.0/24
154.196.179.0-154.196.180.255
154.200.26.0/24
154.200.43.0/24
154.200.51.0-154.200.52.255
154.200.140.0/24
154.200.142.0/24
154.200.191.0/24
Signature Algorithm: sha256WithRSAEncryption
87:79:22:64:fc:5e:fb:74:9d:64:ce:8a:56:08:f3:7b:7b:6b:
9c:26:61:f5:a6:a5:c1:cf:a7:32:7d:9d:d9:06:0a:59:fe:8f:
9c:c2:1a:1c:93:06:2e:3f:8f:d5:08:d8:09:15:3e:b1:e6:b6:
a9:69:55:c1:9c:9c:0b:89:1c:e9:a9:35:10:4f:fc:76:4d:69:
49:df:ee:ae:3f:52:95:c2:ec:9f:2a:d2:e3:c8:8a:da:f9:3e:
e6:d7:1b:da:30:37:24:8c:00:83:65:02:48:42:15:8f:09:01:
92:55:5e:45:c7:8d:4c:f5:ae:29:0b:60:5f:9f:ab:5a:3e:a1:
b6:28:7f:97:9b:47:4d:e6:e5:93:b0:8b:a0:86:fc:92:a8:c6:
96:10:0c:30:47:9d:ab:84:68:7e:96:12:f7:7f:9a:61:28:c4:
fc:b8:8b:b4:ac:84:58:ae:41:dd:f1:b0:b2:0a:76:76:df:46:
0d:15:5b:8d:9d:aa:95:71:83:ee:bc:dc:4f:f0:1f:ee:4f:f9:
4e:94:cd:d0:35:20:a3:19:6b:c9:11:4c:08:d2:de:db:2f:db:
e4:fe:35:b4:8d:81:d2:24:16:5f:d7:eb:4e:7b:36:99:83:d7:
96:66:9c:ac:8e:f9:ff:4d:3f:08:1b:a5:2e:0f:fe:0f:51:e8:
8d:35:de:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:23 2026 by rpki-client