Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD8BC9C80E3311F187BCD3E5DAE4EC9C.roa
File: FD8BC9C80E3311F187BCD3E5DAE4EC9C.roa (raw, json)
Hash identifier: YN7wT+eKTRa9LABbAIUy+APQ1Eenbm2BM/sSEEIferI=
Subject key identifier: 5B:BE:AE:64:34:9E:33:39:9E:19:8B:C1:64:12:E0:5C:F6:D1:C9:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA44
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD8BC9C80E3311F187BCD3E5DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 08:13:09 +0000
ROA not before: Fri 20 Feb 2026 08:13:04 +0000
ROA not after: Thu 19 Mar 2026 08:13:04 +0000
asID: 11404
IP address blocks: 154.223.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113220 (0x1ba44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 08:13:04 2026 GMT
Not After : Mar 19 08:13:04 2026 GMT
Subject: CN=69981794-72fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d6:32:94:38:85:cb:ba:6a:d9:33:27:35:e5:
f4:ce:85:46:e8:5e:11:36:e3:b4:13:5d:d7:34:cf:
a5:62:78:e1:58:df:61:52:c5:41:88:20:2f:db:1b:
36:d7:d5:da:8a:6b:ea:9d:e3:fc:ed:af:b3:ff:70:
c0:67:90:c0:78:2e:5a:9e:39:85:22:89:2a:73:8a:
e4:ef:5e:13:2c:e4:b8:f8:19:b2:4b:92:0e:17:b5:
12:15:3a:f3:3e:8c:4c:0a:a7:00:96:4f:44:13:13:
3f:b4:b8:b4:49:55:e5:69:41:d6:50:01:f7:19:d8:
12:b1:9a:ae:eb:d2:af:ae:1a:d8:e2:88:fb:ab:cf:
22:6f:2a:e0:2d:7e:d4:52:34:a4:c6:29:70:da:f1:
40:ac:50:3d:d9:74:0a:bc:dc:67:a9:89:38:2b:4a:
1e:1b:c1:f3:6f:83:1a:93:06:18:f0:26:f0:fc:5c:
6c:53:fa:9c:a6:3b:b5:d6:68:e7:09:08:5c:2c:a0:
ce:2e:fb:7c:e4:b3:92:db:48:65:de:e3:23:b5:b2:
f0:93:5e:b2:68:8c:da:14:16:37:a9:87:fc:99:bd:
f6:92:83:1a:b7:67:f6:19:a0:ff:8c:7c:35:ac:65:
af:cf:ea:15:a0:d4:27:17:83:ec:0f:84:9b:48:43:
ed:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BE:AE:64:34:9E:33:39:9E:19:8B:C1:64:12:E0:5C:F6:D1:C9:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD8BC9C80E3311F187BCD3E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.96.0/19
Signature Algorithm: sha256WithRSAEncryption
cf:1a:30:d1:1e:fd:95:2c:5e:a4:d7:70:e7:e1:ee:e3:e5:ac:
7c:2c:62:ce:ff:f8:2c:40:46:16:0b:42:a1:a5:b6:53:ae:45:
d1:c3:78:0f:f0:02:2c:f7:37:af:35:bc:c9:7e:a0:23:11:32:
9e:65:eb:4c:f3:85:7e:19:94:3c:b2:71:78:5b:ff:89:5d:c3:
1a:1c:1d:95:3a:ab:ff:a4:e5:1d:5b:13:9c:33:a0:cb:46:a8:
51:ce:db:d5:ac:03:2d:e0:17:0e:77:c6:58:e1:74:00:2e:3e:
58:b4:d6:f2:a4:bb:c6:94:4b:0b:0b:f6:fd:4d:8a:29:47:66:
42:03:eb:2f:14:c2:f5:e9:2a:d4:63:3b:6b:f1:07:c9:9c:78:
64:5b:69:34:3d:d0:27:01:ee:91:10:98:e8:89:04:77:07:17:
fa:fd:93:75:62:87:9d:2b:8b:49:a6:d4:18:d8:cd:3d:0f:20:
bb:9f:f6:c2:89:e1:01:c3:8f:96:51:c7:5c:f3:7b:ae:88:9a:
96:d3:bd:38:02:21:9a:08:17:08:8a:be:61:10:d9:53:79:bd:
d6:9d:c8:39:77:7e:2b:ff:a4:0f:88:e4:f1:32:f7:e9:25:21:
a0:da:a8:24:c5:44:4a:dd:4d:f2:49:e3:2f:0b:fa:30:d7:9b:
f4:66:34:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:59 2026 by rpki-client