Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6F2E9480E6B11F1A37A25B5DAE4EC9C.roa
File: E6F2E9480E6B11F1A37A25B5DAE4EC9C.roa (raw, json)
Hash identifier: +ASwqGUGJE+ptleJXRmYYcQKRFumLAnYBeLQI4HoXe4=
Subject key identifier: FB:5A:7B:1F:3F:CE:C1:8A:34:7B:41:53:30:F6:F3:19:87:18:3B:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA92
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6F2E9480E6B11F1A37A25B5DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 14:53:22 +0000
ROA not before: Fri 20 Feb 2026 14:53:18 +0000
ROA not after: Thu 04 Jun 2026 14:53:18 +0000
asID: 18229
IP address blocks: 154.206.22.0/24 maxlen: 24
154.206.23.0/24 maxlen: 24
154.206.29.0/24 maxlen: 24
154.210.128.0/24 maxlen: 24
154.210.129.0/24 maxlen: 24
154.210.130.0/24 maxlen: 24
154.210.131.0/24 maxlen: 24
154.210.132.0/24 maxlen: 24
154.210.133.0/24 maxlen: 24
154.210.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113298 (0x1ba92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 14:53:18 2026 GMT
Not After : Jun 4 14:53:18 2026 GMT
Subject: CN=69987562-17f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:66:7c:47:97:c3:57:ce:6b:61:74:1f:84:e9:
a5:37:7a:15:36:7e:a0:5a:57:47:c4:09:bd:ad:36:
85:ef:bf:10:c8:55:73:34:dc:fd:17:2e:42:02:b9:
46:96:b0:31:95:02:c5:09:91:74:10:f6:7f:ce:eb:
25:b0:5a:34:cb:2f:71:7f:1f:96:86:a6:5e:45:67:
55:4c:bd:a8:75:f9:a8:d3:22:f3:5b:30:fb:52:d4:
c4:de:ff:18:85:40:ed:38:f8:f3:93:27:8a:ea:59:
9c:07:91:62:99:ac:24:1f:ce:f6:44:34:88:8f:79:
5f:97:dd:35:ac:f0:eb:3d:c0:35:84:eb:40:32:d7:
77:42:3e:e3:b8:45:c9:36:39:cd:21:04:8f:5e:6c:
49:06:45:dd:e9:51:09:2c:20:ad:9c:1d:1c:2a:0d:
ca:df:68:67:d7:f2:e1:3e:89:fd:09:64:63:83:7e:
5e:74:ac:84:84:39:2a:5e:d7:5e:62:ce:d6:f5:77:
6a:e7:7e:ed:89:66:bc:32:4d:88:23:42:75:69:b2:
d8:55:b3:95:fe:f5:00:0e:3c:f0:96:9e:0c:b9:0e:
4c:a0:5a:30:d1:2f:0c:2c:d3:d7:3f:fd:5e:df:ea:
21:09:66:3f:6a:8e:df:18:fa:d8:2e:8d:fa:cc:0a:
a5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5A:7B:1F:3F:CE:C1:8A:34:7B:41:53:30:F6:F3:19:87:18:3B:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6F2E9480E6B11F1A37A25B5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.22.0/23
154.206.29.0/24
154.210.128.0-154.210.134.255
Signature Algorithm: sha256WithRSAEncryption
cf:ac:c9:2c:31:62:00:12:b2:c3:91:38:91:d4:76:a8:93:18:
59:fa:c6:26:d3:91:81:01:0f:d0:09:fb:76:82:48:27:1c:59:
70:47:bf:74:9b:fc:86:3a:9f:33:5a:f0:b8:0d:da:79:de:d3:
fb:80:df:42:95:e3:2d:81:60:6e:fc:df:08:17:97:d2:ea:39:
31:f4:3d:12:88:eb:ab:13:76:cf:bd:da:28:bd:d9:e1:7e:40:
84:a3:3d:aa:fd:8f:18:15:81:57:02:a8:e9:b9:b6:97:72:1b:
e8:0c:ab:d1:98:1e:13:0d:23:49:1a:4f:50:ed:b5:e3:1f:37:
04:e6:df:cf:0b:69:08:25:87:0d:7d:84:59:8e:0f:6a:39:01:
c9:73:2b:a4:f8:34:a9:b7:78:1b:fe:3b:68:6f:5f:61:72:d6:
53:6f:cf:d3:3f:f3:b7:2d:b9:38:ab:95:c1:27:13:62:86:00:
11:4c:68:8e:47:3b:9f:b1:6c:77:de:09:08:69:2b:14:8b:ae:
7e:f6:87:6b:13:71:3c:9d:56:ce:08:a6:5a:2a:52:29:87:3f:
27:41:e5:c7:2d:65:47:1b:9e:95:a7:83:ae:dc:04:97:c2:70:
b4:e7:2c:29:34:d2:c0:7e:d8:65:76:63:62:cc:c5:b8:91:9d:
b7:da:d0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:52 2026 by rpki-client