Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE9795160E9711F18F00B4BCDAE4EC9C.roa
File: CE9795160E9711F18F00B4BCDAE4EC9C.roa (raw, json)
Hash identifier: WIXVZyTAC0KlVu38sDrCjbUTQJ875v4pdBpNOk4mIVQ=
Subject key identifier: C3:F5:F8:4B:71:D5:48:09:1C:43:C2:F0:CA:2F:A4:8D:6E:D9:4F:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BAB6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE9795160E9711F18F00B4BCDAE4EC9C.roa
Signing time: Fri 20 Feb 2026 20:07:39 +0000
ROA not before: Fri 20 Feb 2026 20:07:35 +0000
ROA not after: Thu 04 Jun 2026 20:07:35 +0000
asID: 6453
IP address blocks: 154.210.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113334 (0x1bab6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 20:07:35 2026 GMT
Not After : Jun 4 20:07:35 2026 GMT
Subject: CN=6998bf0b-0d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:54:b6:2c:1d:4e:7b:37:e5:e2:ae:1e:c6:
4c:61:65:24:4e:6b:20:9d:81:0d:82:99:45:05:fb:
5d:bd:a0:34:e9:7b:b5:6d:d8:4a:d0:1f:8c:ed:a9:
dd:f9:ca:95:05:d5:11:dd:aa:fa:2e:1c:06:c1:f3:
b7:45:7e:63:24:45:1a:62:f3:3a:e3:f7:d6:08:b6:
a3:ec:78:cd:da:92:1c:ee:31:07:77:c8:79:e4:20:
6f:89:a3:67:93:bb:d1:d4:59:d8:3f:af:86:c4:9b:
26:88:c7:89:a7:2a:af:10:88:7f:7f:da:97:34:35:
cb:74:78:fa:d1:f1:8d:0a:bb:98:7b:88:cd:d6:b5:
24:b8:9f:e8:1c:4d:8f:66:79:46:9a:24:c2:8e:78:
1e:aa:9e:44:b5:d1:ac:af:25:00:75:59:9b:a2:cc:
90:ed:d2:25:5e:89:d8:95:58:e1:33:25:96:3d:5c:
ca:86:93:9c:13:48:2b:0e:85:ad:87:29:04:34:ac:
51:65:4c:84:9e:0a:37:2d:3e:4c:2e:18:c0:96:7f:
a6:d6:17:b0:8b:b2:b9:09:d5:44:e6:6a:73:6a:dc:
79:4b:79:41:9c:31:0c:4b:2b:48:00:be:62:4a:aa:
26:fd:86:f3:a6:e4:bb:24:aa:8b:14:f3:4d:17:b7:
a6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F5:F8:4B:71:D5:48:09:1C:43:C2:F0:CA:2F:A4:8D:6E:D9:4F:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE9795160E9711F18F00B4BCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.222.0/24
Signature Algorithm: sha256WithRSAEncryption
07:50:04:27:5f:57:fc:7b:69:67:99:1f:6f:1a:6e:ae:af:73:
42:c4:e7:be:23:65:c1:73:79:32:1b:e6:c0:a1:ec:71:d1:db:
ef:13:96:f2:35:3e:69:9c:e3:36:9b:dc:e2:65:b4:21:b5:d0:
f3:6a:9f:73:dc:ac:3d:da:b0:d0:32:f4:0e:68:f5:da:d6:f2:
7c:f4:90:0b:6a:5b:3f:40:1f:38:b2:f3:05:f0:dd:60:0e:02:
59:cf:70:cf:f1:59:99:7b:39:47:95:25:53:21:2d:c1:ef:d7:
d1:76:ac:97:10:da:3a:58:e3:e8:61:56:2b:8e:a9:51:38:01:
74:37:e1:66:83:a9:16:29:8c:36:f2:6b:4b:fa:3e:50:ea:86:
ed:79:e9:3e:3b:1b:45:68:63:81:e2:08:e3:96:42:f5:dc:ef:
1e:1c:9a:de:27:de:32:bf:d0:25:b8:b5:6e:c9:f3:58:1b:d9:
45:b4:5a:b5:4c:1e:0d:b2:6a:35:d4:fd:34:04:47:06:1a:11:
0d:ff:8e:37:e1:e5:da:8b:4f:2f:f4:23:32:1f:f3:1a:88:9a:
ca:7c:d8:2a:23:13:1b:f4:43:af:8b:4c:64:6d:74:bc:6f:02:
1a:f6:08:e3:fe:0e:e8:7c:ce:17:90:ae:85:2b:c2:4b:ee:79:
c1:48:de:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:54 2026 by rpki-client