Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE522F3C122711F195BE62ABDAE4EC9C.roa
File: DE522F3C122711F195BE62ABDAE4EC9C.roa (raw, json)
Hash identifier: +pQlZQaBBRO5PLVGfrrTruDcKhqRLFikfNDge5PblsQ=
Subject key identifier: BF:9E:25:1B:B8:BD:26:44:74:4F:EB:D6:A4:5E:E9:ED:E3:7A:15:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB99
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE522F3C122711F195BE62ABDAE4EC9C.roa
Signing time: Wed 25 Feb 2026 08:56:27 +0000
ROA not before: Wed 25 Feb 2026 08:56:23 +0000
ROA not after: Wed 01 Apr 2026 08:56:23 +0000
asID: 44559
IP address blocks: 154.203.225.0/24 maxlen: 24
154.203.229.0/24 maxlen: 24
154.203.250.0/24 maxlen: 24
154.205.28.0/24 maxlen: 24
154.205.29.0/24 maxlen: 24
154.205.224.0/24 maxlen: 24
154.205.225.0/24 maxlen: 24
154.205.241.0/24 maxlen: 24
154.205.242.0/24 maxlen: 24
154.205.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113561 (0x1bb99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 08:56:23 2026 GMT
Not After : Apr 1 08:56:23 2026 GMT
Subject: CN=699eb93b-4f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ad:92:99:bc:13:70:97:43:52:ad:8c:3a:51:
aa:49:8e:b9:d1:db:41:fc:c7:38:81:21:9f:f3:2d:
ce:10:76:52:12:da:37:34:d3:c1:a9:81:03:0b:38:
5f:e5:4d:40:99:d4:fb:29:64:a0:8e:78:d6:0e:f5:
8f:2b:61:7f:25:30:a4:16:5a:92:c4:8e:91:1a:93:
b6:5b:1b:92:ef:e5:66:34:79:a2:9d:6d:aa:45:30:
6d:6d:5f:4c:13:43:ed:2d:b4:b3:a7:37:9d:28:f6:
39:d3:b3:5b:0b:b8:db:bd:3a:f7:f9:24:0d:d3:5d:
66:8f:3f:24:ab:53:c2:05:13:10:ba:72:44:88:60:
0c:7a:e9:a0:4e:de:71:b7:26:75:fc:1b:9e:b7:bd:
f9:4e:8d:b1:93:77:1a:58:a7:8a:f1:1f:4d:ca:64:
d1:86:49:75:40:9b:7a:51:bf:fe:56:c2:db:b7:ea:
33:a6:5e:03:9c:33:72:76:5d:05:99:e3:ba:1c:98:
88:94:97:43:3b:3e:64:0c:61:db:d9:44:18:9b:9a:
95:3d:f6:be:c1:db:17:46:ec:18:30:60:f0:50:d5:
ac:8d:9a:b4:dd:cd:22:59:9a:38:e2:52:8e:72:d0:
6b:77:9b:4e:93:a2:14:f9:4d:1d:eb:2e:46:0f:5a:
92:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9E:25:1B:B8:BD:26:44:74:4F:EB:D6:A4:5E:E9:ED:E3:7A:15:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE522F3C122711F195BE62ABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.225.0/24
154.203.229.0/24
154.203.250.0/24
154.205.28.0/23
154.205.224.0/23
154.205.241.0-154.205.243.255
Signature Algorithm: sha256WithRSAEncryption
63:aa:a8:a6:c5:61:65:b2:54:f3:c6:cb:5c:8c:8e:aa:ed:7c:
22:69:c2:71:c2:17:d9:34:24:1f:89:49:d8:bc:53:46:82:88:
5b:d3:2f:7b:13:26:d6:64:11:fc:17:94:0e:e8:3f:2f:6f:b4:
7a:90:44:dc:17:1f:5d:f0:d1:54:47:e1:c8:82:62:0b:cd:7a:
50:75:11:db:94:d0:17:6b:80:ff:47:86:99:74:85:50:03:e1:
d8:63:82:3e:c0:ba:79:1d:f8:4d:89:1e:6c:3b:54:55:f0:fd:
8b:c7:27:14:9f:e9:0a:8c:c1:d2:e5:23:fa:42:60:01:7f:dd:
3f:0b:89:2d:01:54:f5:4e:84:21:73:71:78:8c:dd:f8:02:51:
57:bc:49:8c:2e:af:f5:f0:0e:a0:f8:70:12:33:74:a9:18:16:
ea:f4:d9:87:a7:5f:dc:a2:76:81:f9:57:57:fa:77:99:f9:91:
23:89:35:2d:ae:35:09:0d:6e:2f:cc:03:34:7a:44:22:41:8c:
93:e3:92:5e:3a:ac:43:ee:34:08:a5:66:79:9d:a9:59:05:72:
e2:58:40:06:c0:ef:05:40:bb:55:48:c5:17:f3:78:f9:67:c3:
7e:da:44:0f:7e:6b:c6:08:1d:67:e3:d6:65:b3:90:b1:0e:b2:
cb:c2:c5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:20:39 2026 by rpki-client