Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5B164C2116F11F1BA9248BCDAE4EC9C.roa
File: E5B164C2116F11F1BA9248BCDAE4EC9C.roa (raw, json)
Hash identifier: rTzPs0ybOAcPJT4qnrNj0iyvEWg6Teoky32i28jjuVg=
Subject key identifier: 43:A6:6E:FD:48:0D:B4:E2:64:20:D5:3C:0D:5B:23:7F:52:E7:EE:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB48
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5B164C2116F11F1BA9248BCDAE4EC9C.roa
Signing time: Tue 24 Feb 2026 10:59:32 +0000
ROA not before: Tue 24 Feb 2026 10:59:26 +0000
ROA not after: Tue 31 Mar 2026 10:59:26 +0000
asID: 62240
IP address blocks: 154.195.178.0/24 maxlen: 24
154.195.179.0/24 maxlen: 24
154.195.180.0/24 maxlen: 24
154.195.181.0/24 maxlen: 24
154.195.182.0/24 maxlen: 24
154.195.183.0/24 maxlen: 24
154.195.184.0/24 maxlen: 24
154.195.185.0/24 maxlen: 24
154.195.186.0/24 maxlen: 24
154.195.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113480 (0x1bb48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 10:59:26 2026 GMT
Not After : Mar 31 10:59:26 2026 GMT
Subject: CN=699d8494-3601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:93:db:ce:a4:4c:6b:f7:ac:dc:97:15:ec:0b:
e4:7a:e0:d3:2c:82:a0:89:39:5d:50:21:8c:ba:5b:
2e:20:08:1b:2d:e7:4f:82:53:97:c6:40:69:30:ba:
c8:c8:73:91:9e:4e:cf:45:ed:dc:ec:4d:ee:a5:1f:
96:9a:c2:89:50:19:60:b6:27:66:72:74:2c:c2:cc:
3b:ff:34:72:0b:52:8d:37:7e:02:ee:43:fa:76:b1:
0e:ce:11:bb:d4:08:3c:1d:3c:ad:db:3e:a4:83:0d:
82:19:56:4b:7c:fb:b2:8e:3f:8c:c2:12:08:62:be:
b4:99:f2:ea:8a:15:4c:97:fd:dd:10:86:7e:3e:d8:
2c:21:5a:1c:d7:65:39:43:c5:62:f3:d0:ec:db:64:
0d:21:cd:4e:93:18:9f:2b:5a:24:0a:aa:e3:a3:05:
d9:71:c0:c1:e5:f5:8a:93:7f:28:c1:f6:71:0d:93:
e4:76:8e:d9:80:41:83:a1:e6:98:0d:ea:97:56:09:
15:38:cd:9f:35:97:ef:d6:6d:0d:fc:41:95:30:4f:
0e:ee:8d:9f:49:15:9d:13:3c:be:f5:69:28:f1:48:
49:28:16:c8:e2:7d:d4:df:a9:85:b6:22:7b:5c:c3:
3f:5c:34:4a:2f:56:11:f6:e2:59:23:24:fb:b3:b6:
ce:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A6:6E:FD:48:0D:B4:E2:64:20:D5:3C:0D:5B:23:7F:52:E7:EE:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5B164C2116F11F1BA9248BCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.178.0-154.195.187.255
Signature Algorithm: sha256WithRSAEncryption
5d:c6:85:71:5a:fe:10:b8:47:22:f6:e1:d3:3c:6e:d9:4a:f8:
f8:85:c7:44:bb:66:6c:e1:39:ec:89:49:35:2e:83:44:7e:17:
30:19:d9:4f:11:ae:78:86:81:4d:88:16:01:ae:2b:4b:dc:c8:
79:1c:a7:78:2b:51:25:f0:70:2f:77:1f:b2:01:f3:50:ff:38:
f4:45:a9:aa:77:d9:82:b4:54:9e:e6:cc:8b:31:b9:8a:1f:b8:
d3:05:ac:e7:58:f2:ff:5b:aa:37:95:27:d2:a5:9a:ac:b3:4d:
0c:ba:a5:1f:55:08:86:7f:a8:e0:17:3d:6e:34:e3:98:04:72:
db:ad:9a:f7:69:f3:6e:4e:aa:74:df:52:b7:02:f3:82:47:8f:
2c:8b:e4:2b:d2:e5:19:f8:18:74:c4:66:4f:a7:e4:cb:1b:9e:
38:12:42:c8:ec:d5:11:4e:e1:15:da:d3:06:35:c1:6f:ea:1e:
65:20:e8:8b:9b:1e:c5:1d:f2:e3:4d:4c:6c:0a:57:6c:a8:31:
8b:8f:ba:59:47:f0:cd:e0:86:2c:2a:a1:6e:3d:7f:7e:39:e0:
bf:f2:74:3e:be:87:1e:e1:c9:24:08:9a:e0:60:5c:cf:a6:3c:
14:82:b8:25:8a:b7:7c:76:c8:cc:94:b7:f5:28:58:61:86:a0:
16:aa:2e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:30:38 2026 by rpki-client