Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF83BBE60E4911F198D741E9DAE4EC9C.roa
File: DF83BBE60E4911F198D741E9DAE4EC9C.roa (raw, json)
Hash identifier: ffQ7fNWbyPXInQaSyIxhxRwCOg8MNJih2W6PvuZIsx4=
Subject key identifier: 62:1C:5C:13:10:43:4F:31:B5:8E:88:EE:EF:CC:68:60:EE:DA:FF:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA5E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF83BBE60E4911F198D741E9DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 10:49:47 +0000
ROA not before: Fri 20 Feb 2026 10:49:43 +0000
ROA not after: Fri 27 Mar 2026 10:49:43 +0000
asID: 63139
IP address blocks: 154.203.172.0/24 maxlen: 24
154.203.173.0/24 maxlen: 24
154.203.174.0/24 maxlen: 24
154.203.175.0/24 maxlen: 24
154.203.176.0/24 maxlen: 24
154.203.177.0/24 maxlen: 24
154.203.178.0/24 maxlen: 24
154.203.179.0/24 maxlen: 24
154.203.180.0/24 maxlen: 24
154.203.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113246 (0x1ba5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 10:49:43 2026 GMT
Not After : Mar 27 10:49:43 2026 GMT
Subject: CN=69983c4b-2b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d3:0b:f3:1c:13:09:8d:43:f3:64:9c:28:48:
42:30:69:0f:6f:eb:c7:ca:21:30:fd:5d:e8:ad:fc:
ea:b5:c8:a6:b4:25:3b:5c:bd:5e:bb:96:1c:85:c7:
e3:a4:22:66:16:88:49:34:31:ca:38:29:0f:09:f4:
31:69:8e:df:36:4e:ee:22:f5:9a:46:74:6b:11:bb:
d3:e7:ac:8d:71:fd:78:53:40:5f:b7:95:80:2c:37:
91:6c:d5:ee:e2:8d:21:71:08:0e:87:f3:e4:75:b5:
64:6b:45:14:d5:b4:20:ba:9f:22:aa:e5:84:cc:29:
33:48:92:3f:40:53:3b:f8:02:ca:44:63:2d:eb:1a:
f1:8c:8f:64:94:fb:35:0f:63:5e:5f:cd:94:54:af:
31:fc:2d:b0:d4:f3:c8:6b:2d:57:5d:4c:bc:b4:d2:
9e:88:ae:05:54:31:23:94:22:21:94:54:65:ca:58:
e4:49:c8:f2:0d:31:09:b8:28:a1:9c:28:4c:1a:d2:
eb:0f:e2:ef:24:94:14:04:0e:a7:0a:79:07:cf:99:
63:d0:3f:c5:63:e4:b0:f9:52:31:ff:da:48:4e:5b:
2c:7c:85:03:4b:95:4f:d5:20:76:5b:c1:43:c4:8d:
09:d2:7c:fd:58:03:06:b0:47:9f:5d:78:7a:c9:6d:
79:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1C:5C:13:10:43:4F:31:B5:8E:88:EE:EF:CC:68:60:EE:DA:FF:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF83BBE60E4911F198D741E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.172.0-154.203.181.255
Signature Algorithm: sha256WithRSAEncryption
9c:fc:c3:f7:48:16:37:06:89:ff:a2:6b:83:c3:14:48:fc:46:
ef:dc:62:50:6f:60:58:6b:5a:27:4e:30:46:b1:cc:82:a0:e2:
d4:16:ef:22:5b:d4:12:e4:b7:57:8b:4f:d7:10:64:c1:86:cf:
50:73:5d:6c:82:e4:68:a1:ee:2c:93:18:5a:97:a7:2f:a0:56:
61:d8:56:86:04:f8:f8:70:d1:57:8c:cf:a5:dd:ed:2d:16:0e:
3e:4a:6f:c8:1a:3c:4d:24:8f:4d:f5:5b:92:de:e7:78:7e:f2:
63:01:a8:2d:9c:2f:c3:ba:0a:b4:eb:84:38:c6:45:84:90:c2:
65:57:8a:10:30:3f:69:64:f9:1e:c5:24:96:a4:ef:e0:c7:88:
45:9c:f9:cb:c2:00:28:78:01:4b:7b:de:89:55:3d:ad:b7:ce:
dc:9f:41:af:51:7f:ad:89:3f:b1:94:0d:5e:ad:3d:cf:f8:a3:
52:9d:8c:83:32:f6:06:00:e7:72:1b:34:41:f1:8d:9b:0b:11:
de:33:ba:c3:7e:e8:82:54:e9:8a:dc:6f:35:88:24:51:c1:12:
d8:98:6f:90:c0:98:d5:e3:58:02:3c:72:21:57:1e:2b:5a:ee:
cd:3d:4a:0d:4f:41:5d:52:48:51:7b:1b:c8:22:42:6e:4c:52:
03:a5:15:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:41 2026 by rpki-client