Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0ECA9F2159C11F1A8C471D4DAE4EC9C.roa
File: E0ECA9F2159C11F1A8C471D4DAE4EC9C.roa (raw, json)
Hash identifier: T6awiLP/bxnasraNWRdsfARugQHiaSZf6d28UwYNexI=
Subject key identifier: BA:E4:CF:72:39:29:B2:81:C5:BB:35:74:09:75:48:B1:08:0D:BA:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BCA2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0ECA9F2159C11F1A8C471D4DAE4EC9C.roa
Signing time: Sun 01 Mar 2026 18:31:36 +0000
ROA not before: Sun 01 Mar 2026 18:31:31 +0000
ROA not after: Sun 05 Apr 2026 18:31:31 +0000
asID: 202656
IP address blocks: 154.218.25.0/24 maxlen: 24
154.218.26.0/24 maxlen: 24
154.218.31.0/24 maxlen: 24
154.219.224.0/24 maxlen: 24
154.219.225.0/24 maxlen: 24
154.219.226.0/24 maxlen: 24
154.219.227.0/24 maxlen: 24
154.219.228.0/24 maxlen: 24
154.219.229.0/24 maxlen: 24
154.219.231.0/24 maxlen: 24
154.219.233.0/24 maxlen: 24
154.219.234.0/24 maxlen: 24
154.219.235.0/24 maxlen: 24
154.219.236.0/24 maxlen: 24
154.219.249.0/24 maxlen: 24
154.221.52.0/24 maxlen: 24
154.222.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113826 (0x1bca2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 18:31:31 2026 GMT
Not After : Apr 5 18:31:31 2026 GMT
Subject: CN=69a48608-7b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bc:f8:a7:81:bd:f8:9f:4c:2b:db:4a:60:46:
71:45:96:79:f6:b8:d2:59:99:9f:1e:9b:9a:2a:c0:
e4:0c:bb:aa:8d:3d:1c:5d:85:f9:67:c4:c3:aa:1a:
c1:e1:92:d1:4e:11:6d:c2:68:de:ba:4a:d5:15:60:
11:d5:11:8e:f5:58:80:5c:33:a1:13:20:71:f7:1b:
3c:56:76:50:5a:6a:0d:d9:72:79:bf:ee:bb:6e:85:
7a:e7:62:34:f4:c5:0b:5d:ea:47:31:24:7c:a1:0e:
a8:37:8b:57:41:b0:bf:db:b2:de:67:c3:f9:78:a2:
8b:bc:b8:92:15:70:01:16:9e:23:21:ce:61:9b:d8:
c9:76:da:d5:af:71:77:d7:77:aa:4d:09:a1:4b:a7:
5b:57:dc:a4:63:93:93:37:24:d9:f6:71:b1:54:9d:
e2:ee:41:bb:ac:76:88:6d:d1:5f:84:93:b6:1f:8f:
03:2d:b4:3d:24:e6:01:0d:bc:43:ce:50:c0:f2:a3:
10:e4:ea:87:b1:12:e9:44:19:3f:40:a8:69:26:64:
15:dd:7a:33:0d:f9:f6:ca:b5:ca:49:bf:97:fc:10:
09:9f:55:3c:7e:bc:17:cf:3d:40:2d:f9:22:7d:58:
d2:9a:12:0a:da:e7:b8:b8:18:08:b8:f8:2f:6d:d9:
54:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E4:CF:72:39:29:B2:81:C5:BB:35:74:09:75:48:B1:08:0D:BA:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0ECA9F2159C11F1A8C471D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.25.0-154.218.26.255
154.218.31.0/24
154.219.224.0-154.219.229.255
154.219.231.0/24
154.219.233.0-154.219.236.255
154.219.249.0/24
154.221.52.0/24
154.222.197.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:25:94:e6:2e:a5:2f:b1:8b:9a:e2:e0:a2:78:6e:6a:4a:5e:
9a:79:8f:a9:64:15:8f:af:9f:f0:c2:64:14:66:9f:16:c0:16:
a8:15:9a:b2:4c:33:30:90:63:c2:c6:a0:c1:5f:06:ff:7d:0f:
77:4c:aa:f9:f0:10:0f:3b:0a:ab:75:db:d9:28:a7:58:ec:77:
19:24:47:63:1e:75:bc:20:d4:32:6b:22:be:d6:b7:3c:2a:0b:
7b:ae:d8:e5:53:cd:31:0f:5c:7f:a0:68:6b:5b:6b:81:0e:ce:
fa:42:c0:95:18:ec:4c:ac:c8:43:a0:9c:a1:de:5c:79:2b:98:
eb:4b:40:0b:54:f7:06:fc:f0:e6:2d:bf:45:42:0e:5b:2e:5b:
c2:f6:8c:29:eb:13:8e:27:19:15:2b:a2:1b:29:a1:91:22:bc:
0d:42:f0:7e:6f:27:eb:41:90:45:d5:77:ef:bd:3f:e5:97:97:
43:05:48:69:e3:b3:05:c5:6b:61:f9:63:94:21:ee:4d:ba:14:
69:b4:12:29:20:6d:17:31:9b:4b:38:15:da:09:e8:91:d3:90:
c2:98:d0:6d:be:88:f5:1b:71:23:5f:38:03:c9:51:86:31:7f:
63:b9:35:0b:a4:f7:2f:60:5c:a6:99:c9:e4:ee:93:5d:30:0e:
7e:86:c9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:09:04 2026 by rpki-client