Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE1A36EE058811F18C0EBD99DAE4EC9C.roa
File: FE1A36EE058811F18C0EBD99DAE4EC9C.roa (raw, json)
Hash identifier: y25fSiJyrpE3NdTD9QzY5QZ1NImswzpXT7Q3pgf2Evg=
Subject key identifier: D1:14:44:40:25:4E:0D:00:7C:B1:FC:EA:54:30:EE:93:85:94:61:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B8EE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE1A36EE058811F18C0EBD99DAE4EC9C.roa
Signing time: Mon 09 Feb 2026 07:28:57 +0000
ROA not before: Mon 09 Feb 2026 07:28:52 +0000
ROA not after: Tue 10 Mar 2026 07:28:52 +0000
asID: 395886
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112878 (0x1b8ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 9 07:28:52 2026 GMT
Not After : Mar 10 07:28:52 2026 GMT
Subject: CN=69898cb8-d545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:41:7f:20:3d:72:d1:c5:5b:da:54:6d:98:e2:
9f:81:f2:af:8b:91:f7:2b:3e:18:56:e3:a1:eb:8b:
2c:6c:f3:b3:4a:1a:db:91:9c:27:63:8d:d8:f4:2b:
92:07:76:b2:a0:96:da:2e:22:00:11:b9:53:b0:7e:
f6:3d:ca:a9:fb:3d:08:fd:dc:d3:c4:5b:81:e4:2f:
4b:c7:b6:76:b4:55:b9:8a:52:36:c5:91:b8:52:a1:
de:4d:da:e0:50:b0:88:37:c7:39:44:fd:78:aa:97:
ee:b9:48:35:7f:04:07:d7:e5:f8:3c:09:06:62:7c:
57:6b:a3:aa:76:03:ab:a4:30:00:8d:22:ec:80:01:
bf:20:eb:aa:da:ff:12:42:42:7b:0a:38:91:a4:9d:
eb:d3:b2:b5:e3:a3:25:f8:04:cf:bf:79:59:66:41:
f6:fa:00:05:3f:8d:93:58:49:f9:af:6a:aa:a8:25:
56:20:b4:bb:49:67:72:d3:5d:e7:c4:0e:8f:27:f3:
96:12:a0:99:f0:29:ba:53:18:ab:33:a1:ce:0e:13:
b3:3f:36:87:77:e8:02:28:89:03:de:1c:ef:d5:90:
74:b1:84:77:d4:f2:5c:4b:7d:52:88:68:19:fc:0c:
e4:09:85:f4:5f:b3:aa:7d:0f:2c:10:7b:db:37:dd:
42:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:14:44:40:25:4E:0D:00:7C:B1:FC:EA:54:30:EE:93:85:94:61:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE1A36EE058811F18C0EBD99DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
6f:77:68:38:50:c3:df:bc:f0:ac:f6:de:10:b1:4a:61:b1:b7:
cb:b8:d4:dd:65:f0:0e:5d:8f:a5:b4:ba:52:74:38:af:de:c6:
e2:e6:96:2d:a1:5c:b0:ab:76:3b:4a:c9:2e:df:e6:9e:00:b4:
2d:bf:e0:55:3e:7d:d6:68:db:85:70:2b:25:45:3c:bb:d4:62:
45:31:8f:a0:81:d9:b1:ba:f9:da:e5:3a:71:6b:f4:d0:a1:d8:
12:f9:76:9a:08:b3:ed:b0:3e:bb:50:c4:12:78:ca:d7:37:9b:
1e:49:41:1a:52:3e:92:a8:8b:92:b3:f9:fe:da:17:08:7d:3b:
5b:02:97:7a:e3:62:e3:c1:75:bf:1c:4d:66:aa:e0:f6:96:fa:
23:ee:90:ee:31:fa:bc:6d:db:a1:12:dc:48:b6:27:18:cf:43:
1e:0b:5a:9f:c8:a2:95:b8:cd:86:c9:2e:05:e4:b6:4d:35:ac:
79:43:bf:ff:ae:08:a2:75:e2:82:47:4f:9d:b2:2c:84:85:4f:
86:3e:47:40:df:a0:60:3b:6a:0c:10:12:bf:c5:de:05:bb:8d:
a7:db:7b:90:a0:53:28:e9:ce:25:ff:3a:b2:18:86:21:67:0e:
68:bb:17:2c:52:cf:d4:b2:21:3f:7f:2a:af:69:14:30:0d:8c:
3a:a0:04:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:38:04 2026 by rpki-client