Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFD6C7B2FD1411F09BE1E99FDAE4EC9C.roa
File: FFD6C7B2FD1411F09BE1E99FDAE4EC9C.roa (raw, json)
Hash identifier: MDGwrVeQlRfYTDvb3teqodkFBJxJN6JUgjA+HVG+Rpw=
Subject key identifier: 9A:F6:9F:25:F0:2A:B8:98:9F:53:98:AE:3E:78:97:CF:79:44:30:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B754
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFD6C7B2FD1411F09BE1E99FDAE4EC9C.roa
Signing time: Thu 29 Jan 2026 13:18:28 +0000
ROA not before: Thu 29 Jan 2026 13:16:45 +0000
ROA not after: Sun 01 Mar 2026 13:16:45 +0000
asID: 61461
IP address blocks: 154.216.192.0/18 maxlen: 24
154.218.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 20 Feb 2026 09:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112468 (0x1b754)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 29 13:16:45 2026 GMT
Not After : Mar 1 13:16:45 2026 GMT
Subject: CN=697b5e24-565c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b4:7f:4d:76:5e:76:c0:0d:81:43:82:af:9f:
59:a1:57:37:42:2a:ca:a5:9f:3a:79:c4:25:75:76:
05:6d:71:4e:ea:bb:84:49:c1:da:e7:72:59:a3:85:
d6:de:87:d9:62:89:f9:41:16:b7:21:dc:37:67:3b:
3a:8f:94:dc:89:3d:97:64:c0:95:c7:5b:76:47:b1:
2a:4e:dc:33:ac:00:1d:31:1b:97:94:55:1c:6a:10:
02:ea:b6:62:74:03:1f:75:e4:94:d2:49:61:39:c1:
16:ae:c0:26:b8:44:01:af:7a:9c:62:6e:a4:aa:d3:
4b:eb:2e:51:45:00:ff:4f:4b:51:f8:47:9a:aa:d8:
3b:fe:f7:2f:eb:cf:56:af:9c:f1:da:dd:36:12:5c:
85:ad:ad:bb:e3:86:86:55:85:3f:b9:07:00:31:1a:
83:9c:d0:48:99:84:71:53:61:c4:43:d6:4e:eb:bc:
41:d7:1d:cb:19:c5:b2:1a:38:46:ad:69:23:6c:05:
5b:e5:0f:5b:b7:df:53:bb:54:89:9c:b3:cc:77:25:
7f:fb:37:0f:86:01:2e:e4:b9:c9:f4:2d:c8:2f:1a:
d4:bd:48:d2:e6:8d:6c:c7:77:5a:17:54:bd:4c:e6:
88:fb:16:a0:73:34:2e:93:ec:1f:ea:63:35:64:41:
ae:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F6:9F:25:F0:2A:B8:98:9F:53:98:AE:3E:78:97:CF:79:44:30:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFD6C7B2FD1411F09BE1E99FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.192.0/18
154.218.192.0/18
Signature Algorithm: sha256WithRSAEncryption
39:dd:c5:d6:35:ee:e8:be:52:90:a3:c7:36:4e:d8:bf:7e:7c:
2a:18:3b:f4:21:cd:c8:15:34:68:6f:a9:61:27:7e:2d:07:8d:
8d:de:c5:de:02:ef:65:b9:63:6d:82:38:c4:1d:a5:67:37:29:
6d:a2:15:98:29:b7:00:89:ac:a1:7f:46:a8:62:13:76:f9:78:
ab:b6:6c:98:36:18:e8:b4:02:e6:8d:d6:b8:3b:d2:12:47:60:
49:9b:0f:db:2a:3d:3e:43:aa:a2:db:bc:3c:30:3f:e5:49:b0:
1b:2e:b2:e5:ef:31:dd:bf:63:03:f1:9f:42:83:71:1a:48:1f:
40:0d:6f:a7:4f:09:b9:98:81:e2:ac:28:1e:89:eb:10:c4:7c:
36:3f:dc:fc:44:b7:03:84:5a:ff:86:41:55:51:43:e1:65:1c:
c5:b3:59:65:70:01:e9:5c:77:76:b1:1a:81:19:7a:ad:d8:ef:
9f:30:44:87:aa:3e:8f:4b:31:51:07:a0:f8:10:4f:b6:d2:45:
7c:48:9a:8f:b6:36:8a:cb:52:d2:f9:20:4b:cc:4d:af:02:ae:
5f:af:c2:8a:8c:ee:2f:c1:e4:8a:1e:6e:30:98:c0:4a:78:01:
f4:6d:6d:80:b5:4c:ed:86:57:e7:93:58:79:ed:35:a1:84:4a:
fb:c3:c2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:10:26 2026 by rpki-client