Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F000DC282E8411F1AF065CC7DAE4EC9C.roa
File: F000DC282E8411F1AF065CC7DAE4EC9C.roa (raw, json)
Hash identifier: qetSo2S8GEZ5u28uN800CikmwbC3UUgqVLc7nMMulwE=
Subject key identifier: 56:B7:D4:8B:79:F0:D1:97:1C:05:FC:99:5E:05:46:D9:DB:33:C3:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C23F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F000DC282E8411F1AF065CC7DAE4EC9C.roa
Signing time: Thu 02 Apr 2026 11:13:13 +0000
ROA not before: Thu 02 Apr 2026 11:13:08 +0000
ROA not after: Wed 06 May 2026 11:13:08 +0000
asID: 48031
IP address blocks: 154.218.20.0/24 maxlen: 24
154.218.21.0/24 maxlen: 24
154.218.23.0/24 maxlen: 24
154.218.24.0/24 maxlen: 24
154.222.207.0/24 maxlen: 24
154.222.208.0/24 maxlen: 24
154.222.209.0/24 maxlen: 24
154.222.210.0/24 maxlen: 24
154.222.211.0/24 maxlen: 24
154.222.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115263 (0x1c23f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 11:13:08 2026 GMT
Not After : May 6 11:13:08 2026 GMT
Subject: CN=69ce4f48-7c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a2:62:e6:18:90:7e:7d:fb:a0:b5:98:c9:07:
c1:e7:88:c5:97:08:e5:9a:6e:32:42:3f:68:d6:cc:
73:5c:c5:c8:f2:1d:b1:45:eb:7e:f3:12:3c:c4:ea:
2f:b7:81:7d:de:e1:69:0c:f6:23:9f:2e:2a:4b:87:
8b:f1:6b:fe:74:e1:17:67:82:b8:15:af:d7:8e:1d:
93:f3:14:a2:30:36:82:6f:4a:df:06:14:b5:43:ca:
07:e9:90:fb:4c:b9:2c:1d:40:db:84:5f:f1:f5:cb:
69:ea:aa:a2:87:54:67:9b:5d:f1:ef:c5:e7:a1:77:
d9:33:0c:71:69:65:5c:03:5d:1b:d0:b5:72:2a:d3:
38:57:1e:c6:83:6f:d2:05:9a:7d:d0:82:a3:a5:78:
cd:d0:63:9b:ae:61:a3:5b:59:d2:24:b4:53:bb:e9:
f5:da:1e:0c:63:70:5e:75:28:44:c1:ca:5f:9b:47:
f1:96:e6:e4:09:21:f6:62:41:2b:b6:d5:10:0b:a9:
08:91:b6:17:74:c4:0a:6a:f7:99:47:35:53:aa:a8:
33:01:27:1a:61:00:70:27:58:c2:34:71:bb:c4:69:
61:d5:ae:8a:33:62:bd:90:dd:3c:4d:d9:be:b5:c3:
d6:be:7b:45:18:9b:24:f8:fa:a5:aa:00:54:ff:ba:
ee:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B7:D4:8B:79:F0:D1:97:1C:05:FC:99:5E:05:46:D9:DB:33:C3:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F000DC282E8411F1AF065CC7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.20.0/23
154.218.23.0-154.218.24.255
154.222.207.0-154.222.212.255
Signature Algorithm: sha256WithRSAEncryption
63:a2:ab:89:99:b9:aa:84:0b:76:78:c7:d5:1c:35:aa:99:60:
03:e9:d1:81:e2:97:be:1d:2f:b0:aa:f6:53:f5:8b:01:8b:10:
4e:c4:30:de:57:92:0f:5f:0c:16:07:16:34:62:56:e2:5a:6b:
10:97:77:f8:f4:f2:36:9f:15:2b:0c:22:b7:eb:64:3d:e0:c9:
c9:39:b7:06:91:12:20:5d:f4:88:ae:f7:70:14:fa:e4:40:5d:
11:f2:7b:05:75:8a:a5:b4:4d:74:16:c6:4b:03:8e:b8:99:ca:
5d:e5:d5:20:96:1d:00:9c:8f:08:5a:75:88:fa:09:90:3c:5d:
06:32:5f:13:6f:98:04:7b:19:66:1a:4f:47:92:2e:be:70:aa:
c0:b3:6b:d9:aa:ed:8a:52:57:63:20:61:78:3e:ea:23:ae:6b:
12:3e:c6:8b:ae:2f:c8:a5:ae:b7:96:df:ac:ce:10:0f:b4:47:
9f:41:6a:84:93:3f:5c:a9:9d:11:93:bf:8f:80:99:3c:4e:b9:
22:3f:b6:cb:07:f4:fb:4d:aa:27:a6:11:11:ec:2f:f1:c4:ba:
7d:56:a2:56:29:7a:bb:c6:f9:c8:c1:a8:74:f7:1d:9b:cd:73:
56:3b:dd:12:33:fd:58:c1:7e:69:61:c3:26:24:16:3c:f6:f9:
a9:8a:d8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:51:46 2026 by rpki-client