Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EAD09B800EFE11F1851338C5DAE4EC9C.roa
File: EAD09B800EFE11F1851338C5DAE4EC9C.roa (raw, json)
Hash identifier: gGW23M7Eroum7uf5qb5lP6bjJZZjSt7C95yB2wTyxBg=
Subject key identifier: 9D:6C:69:66:9E:50:A3:F3:91:14:83:4F:C4:EA:D6:70:E1:93:25:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BAD3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EAD09B800EFE11F1851338C5DAE4EC9C.roa
Signing time: Sat 21 Feb 2026 08:25:45 +0000
ROA not before: Sat 21 Feb 2026 08:25:40 +0000
ROA not after: Tue 24 Mar 2026 08:25:40 +0000
asID: 54600
IP address blocks: 154.202.117.0/24 maxlen: 24
154.202.120.0/21 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113363 (0x1bad3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 21 08:25:40 2026 GMT
Not After : Mar 24 08:25:40 2026 GMT
Subject: CN=69996c09-aa02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:67:8b:95:8e:28:1e:35:fa:3e:f2:55:df:a3:
c2:56:4d:81:70:a6:3e:0f:04:6d:7c:e9:24:2b:23:
35:98:68:64:30:93:cb:8f:a0:b6:26:66:f0:43:d1:
cc:c5:b9:5d:9b:2a:1e:5d:0b:bb:af:28:b1:c5:51:
05:70:82:dc:61:37:96:41:0e:24:b1:d3:7a:58:1c:
75:49:0d:0e:f1:47:80:34:db:4d:09:be:65:0a:c9:
2b:81:f2:0a:fe:7f:06:34:9e:bc:ef:18:ae:a0:bc:
67:f2:6a:87:57:cd:93:24:e7:ee:f9:2a:92:24:e6:
e4:b5:eb:28:9c:53:5d:6c:32:e0:e4:f5:c5:7e:a6:
3c:c3:76:ba:a0:56:ec:93:e3:f5:8e:08:33:77:5f:
cd:f7:8e:fc:25:3e:c5:49:e5:d1:ef:50:b7:9b:5c:
3c:88:af:7b:fa:7d:d4:ec:05:a5:1f:3f:7b:f7:74:
2d:ac:c7:ad:cc:3d:14:a2:c0:14:2b:64:db:82:95:
66:75:f4:3b:bf:bc:bf:9b:78:7b:e9:32:31:a4:ab:
e1:b1:3a:1f:b8:1f:7b:87:ae:dd:3b:c9:23:2b:04:
0b:ca:cc:6a:0b:87:23:84:a7:69:b0:6a:31:59:b3:
b5:0f:cd:a7:09:fa:77:c5:41:fe:c9:d6:e6:44:bf:
57:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6C:69:66:9E:50:A3:F3:91:14:83:4F:C4:EA:D6:70:E1:93:25:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EAD09B800EFE11F1851338C5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.117.0/24
154.202.120.0/21
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
48:62:f9:24:78:e9:2f:89:e9:ad:30:e2:a7:dd:f4:6c:36:cc:
bb:26:15:11:38:89:5c:35:cf:78:ef:89:f9:8d:0a:0c:c9:15:
10:55:31:5d:c3:63:a7:6b:da:ea:68:38:ba:ec:e0:9a:09:c1:
7f:a8:43:2c:88:b7:c3:86:fe:b7:95:63:87:1b:c4:93:61:fa:
7e:62:98:c5:f8:2b:be:94:6e:cb:62:10:5e:d8:8c:bc:51:94:
b9:d7:8c:b0:90:e1:10:b7:26:69:44:92:89:b9:ef:2f:79:08:
96:8d:d2:e0:6c:65:7a:6c:9b:ec:81:82:d0:86:3d:21:c0:c4:
e7:88:c2:92:e9:a2:88:9e:0e:60:1e:03:d1:08:39:0e:9f:a0:
12:16:3b:7a:d4:36:1c:be:0c:6a:c3:ef:c3:3e:39:2b:c0:3a:
67:4b:2d:8e:a4:ae:79:b0:88:76:01:71:ac:a0:83:30:51:b9:
bd:ee:cf:34:7d:48:ea:31:4c:24:3f:5b:3c:45:58:68:23:8a:
50:c0:31:8a:9c:53:7e:54:fa:7e:08:f2:cd:ed:9c:76:b1:29:
0f:f3:c7:1f:74:1e:42:a4:d3:d7:44:f5:a1:6b:64:63:d7:10:
6a:a9:d2:7e:34:ee:4b:72:b8:28:a0:00:08:b4:84:de:32:29:
cf:27:e2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:14:15 2026 by rpki-client