Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF6B10DC155C11F196606AD3DAE4EC9C.roa
File: CF6B10DC155C11F196606AD3DAE4EC9C.roa (raw, json)
Hash identifier: TniEyNiYRT0zbNXixoaed/p7u9sui4cDGNzJvmiMG1I=
Subject key identifier: 43:44:4F:EB:2E:AB:AF:A1:BD:77:2F:4E:2F:A7:11:FF:DE:85:A1:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC82
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF6B10DC155C11F196606AD3DAE4EC9C.roa
Signing time: Sun 01 Mar 2026 10:52:59 +0000
ROA not before: Sun 01 Mar 2026 10:52:54 +0000
ROA not after: Sun 05 Apr 2026 10:52:54 +0000
asID: 202656
IP address blocks: 154.218.28.0/24 maxlen: 24
154.218.29.0/24 maxlen: 24
154.219.196.0/24 maxlen: 24
154.219.198.0/24 maxlen: 24
154.219.199.0/24 maxlen: 24
154.221.56.0/24 maxlen: 24
154.221.57.0/24 maxlen: 24
154.221.58.0/24 maxlen: 24
154.221.59.0/24 maxlen: 24
154.221.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113794 (0x1bc82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 10:52:54 2026 GMT
Not After : Apr 5 10:52:54 2026 GMT
Subject: CN=69a41a8b-67d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b7:ce:3b:83:75:a5:8d:ba:99:c8:7b:34:0b:
2a:35:22:60:84:bf:89:2d:e1:1e:d8:7e:8d:6b:c1:
7b:a4:8a:7a:f1:b8:31:74:dc:67:c5:27:8d:d1:6d:
63:5f:11:59:64:1c:f0:65:b2:e8:5f:a0:15:d9:06:
e2:11:90:10:1e:2d:32:54:03:56:6c:67:e9:b9:cf:
69:27:03:6d:d1:84:92:6f:c4:21:08:0e:87:f9:90:
49:ef:fd:7f:48:06:92:65:b1:db:8b:e8:3d:c4:5a:
2a:d2:18:51:a5:b6:9e:64:68:6f:d5:c6:c4:ba:ba:
39:31:c7:35:09:0a:c7:69:55:aa:d9:95:ce:99:1a:
ed:cf:b9:79:55:b2:f1:f2:be:6a:76:7d:fc:74:eb:
99:a5:cf:ae:fe:c4:7a:e3:32:59:d9:ee:ce:e7:d6:
7a:96:8c:4b:6f:78:6a:f1:92:5e:0a:e4:eb:ff:35:
6b:08:ca:f3:b5:c0:45:ae:81:81:db:9f:93:dd:3f:
78:d1:44:d0:e5:11:ec:e2:bb:a1:7a:de:b7:1d:89:
e7:22:f3:5a:e3:84:da:16:ad:8e:c3:46:0b:6e:f5:
3d:49:0c:aa:21:55:ff:93:e2:18:26:2b:26:0f:45:
7e:0b:32:b4:c5:fc:18:26:7c:ab:44:28:7b:5f:bf:
c8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:44:4F:EB:2E:AB:AF:A1:BD:77:2F:4E:2F:A7:11:FF:DE:85:A1:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF6B10DC155C11F196606AD3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.28.0/23
154.219.196.0/24
154.219.198.0/23
154.221.56.0/22
154.221.61.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:f6:d5:52:d7:c1:f6:20:d9:f7:b0:69:65:35:11:b3:8a:27:
f0:3d:ef:65:dc:4b:fd:cf:36:ff:f2:9b:4c:69:31:d1:81:aa:
91:91:d1:76:06:71:e0:e3:eb:75:02:a0:7c:f8:5e:68:a3:e5:
02:23:f1:fa:05:37:cd:2c:83:a5:75:f7:bb:20:4e:e5:21:a9:
1d:df:ef:c5:92:88:c3:b6:5a:ce:b5:03:51:44:e1:8d:54:7e:
c3:02:d4:3f:fb:42:af:f8:c5:cd:fb:7e:f5:16:3a:41:ef:7f:
73:c0:71:4b:bb:0a:98:2a:47:3e:a8:d1:77:eb:f6:91:5a:cb:
1f:45:bf:af:6c:52:85:b5:90:f2:b7:f8:49:f9:ae:f4:5c:0c:
18:05:9b:b5:0c:22:72:e0:de:eb:e3:1d:33:f7:5d:05:c3:b2:
e8:79:aa:6b:bf:85:2e:6b:e6:da:e7:11:b8:a8:bb:5d:4e:72:
dc:ec:d1:84:ab:a7:13:dc:8f:4a:ae:e4:56:1c:65:6a:e6:86:
49:3f:1b:22:07:36:5e:47:31:e2:08:f3:fe:bb:0a:67:67:d7:
1a:e1:11:ce:96:c7:d7:b9:81:1e:4f:de:7a:3c:44:3d:76:55:
71:93:5c:92:66:d6:1d:9f:7b:2d:33:ac:12:1b:70:48:4d:42:
e3:c4:a6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:14 2026 by rpki-client