Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC1A000812EF11F1B0BA18F1DAE4EC9C.roa
File: FC1A000812EF11F1B0BA18F1DAE4EC9C.roa (raw, json)
Hash identifier: mx8j43pmdBdNlfE37kMFFRHIZ+DVCPTF+hlbAY4tygk=
Subject key identifier: 30:6C:4D:93:EF:64:91:A5:66:71:1D:63:A6:F8:ED:67:77:A4:EE:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BBFD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC1A000812EF11F1B0BA18F1DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 08:48:56 +0000
ROA not before: Thu 26 Feb 2026 08:48:50 +0000
ROA not after: Mon 30 Mar 2026 08:48:50 +0000
asID: 401783
IP address blocks: 154.193.2.0/24 maxlen: 24
154.196.160.0/24 maxlen: 24
154.199.4.0/24 maxlen: 24
154.200.129.0/24 maxlen: 24
154.200.130.0/24 maxlen: 24
154.200.154.0/24 maxlen: 24
154.200.156.0/24 maxlen: 24
154.200.157.0/24 maxlen: 24
154.200.158.0/24 maxlen: 24
154.200.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113661 (0x1bbfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 26 08:48:50 2026 GMT
Not After : Mar 30 08:48:50 2026 GMT
Subject: CN=69a008f8-209c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:cb:1f:96:d0:66:f8:29:86:c0:4f:b4:98:
14:43:b5:56:74:10:4c:8b:f8:0c:06:e0:5f:c2:62:
05:71:c6:54:5d:33:c6:0b:31:05:7c:9f:67:b7:8b:
52:a0:17:d3:81:f0:f4:18:09:c3:a5:f3:12:7d:ad:
d8:d2:cf:f2:8d:7c:4f:7a:54:c4:db:82:3c:e7:08:
2b:62:72:29:46:95:53:12:57:5c:cd:ab:09:54:1d:
71:32:70:53:2b:44:f2:45:08:1a:6c:43:13:be:8f:
07:b6:7c:41:da:55:98:f1:de:f1:31:65:6b:44:1f:
dd:0f:9c:a0:e7:77:8f:77:d2:c9:48:2c:49:ce:4b:
d6:aa:cb:70:a0:55:f1:56:36:2e:93:a9:60:ed:ec:
f1:c2:11:53:8b:ab:d3:33:c1:bb:20:9e:e2:c1:a7:
57:d9:1f:47:93:08:41:36:c6:6c:e5:b0:29:6d:70:
ab:ef:c5:56:fc:18:ab:75:29:e1:ee:e9:6d:2b:ab:
56:bd:3a:ba:65:f9:52:fc:c5:b1:8c:bc:59:cd:7f:
b5:0a:60:cb:f6:49:be:bf:99:f7:f4:c0:6d:78:a1:
f4:88:80:34:fa:69:ce:61:6e:e8:5e:ba:39:bc:7a:
d7:6a:a8:7b:f7:48:9a:d9:ad:95:bb:cb:a3:5a:9b:
84:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6C:4D:93:EF:64:91:A5:66:71:1D:63:A6:F8:ED:67:77:A4:EE:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC1A000812EF11F1B0BA18F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.2.0/24
154.196.160.0/24
154.199.4.0/24
154.200.129.0-154.200.130.255
154.200.154.0/24
154.200.156.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:56:bd:cf:ac:09:1d:49:19:f1:00:04:1e:9b:20:ff:1d:39:
97:ab:89:a9:47:b1:35:3b:3c:1a:48:7a:b0:33:38:2b:38:2f:
14:c4:dd:0f:ee:43:4f:fb:18:76:d0:d3:41:ff:c5:fa:dd:dc:
fe:de:a6:8b:09:45:75:b7:c9:67:03:fe:c7:02:d9:1b:1f:d3:
b8:18:db:32:12:5f:02:86:95:06:a2:d6:2d:4e:a1:9e:05:9a:
fd:f1:33:f9:02:ef:cb:5d:7e:10:a5:75:8c:fb:9b:4e:27:56:
18:50:86:44:2e:e0:8f:70:a8:42:53:f4:2d:57:cf:38:c9:7e:
45:0d:a3:ea:8b:bb:2b:e5:a6:5a:06:07:77:6a:2e:17:bc:37:
ce:19:71:db:ba:3d:3d:e9:b0:d5:86:7f:29:0b:bb:20:49:12:
4c:d3:c1:7a:04:d8:81:84:86:0c:fe:9f:f4:df:bb:bf:29:77:
55:0e:23:bd:d3:2a:5e:ee:d6:c8:cb:a0:12:9c:83:a4:8b:c2:
7f:27:2c:ff:ca:58:ff:d3:a5:7e:1a:7c:6b:8b:54:72:bb:d1:
26:6e:d8:4f:00:46:8c:2f:d0:94:8a:96:46:c9:6e:19:35:04:
d3:f6:c3:e5:18:fd:b3:75:44:96:8f:44:16:32:b1:7b:99:b5:
8b:c1:0c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:16 2026 by rpki-client