Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/0B265DAC188C11F182BD24E5DAE4EC9C.roa
File: 0B265DAC188C11F182BD24E5DAE4EC9C.roa (raw, json)
Hash identifier: rPML4O6c9gJBf9ETeEWqZZUxyMsY3h9ZYfoknsJWcPg=
Subject key identifier: BA:A8:1B:CD:40:19:02:6F:C2:4B:B7:C1:A9:B9:CB:0B:28:9E:18:F1
Certificate issuer: /CN=F367F26DAF/serialNumber=AB19964619FF85343CC091180673A8AC528610F4
Certificate serial: 0A34
Authority key identifier: AB:19:96:46:19:FF:85:34:3C:C0:91:18:06:73:A8:AC:52:86:10:F4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/0B265DAC188C11F182BD24E5DAE4EC9C.roa
Signing time: Thu 05 Mar 2026 12:08:40 +0000
ROA not before: Thu 05 Mar 2026 12:08:32 +0000
ROA not after: Fri 01 Dec 2028 12:08:32 +0000
asID: 328366
IP address blocks: 41.79.212.0/22 maxlen: 24
102.211.180.0/22 maxlen: 24
154.68.176.0/20 maxlen: 24
154.118.244.0/22 maxlen: 24
2c0f:efe0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.mft
rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 15 Mar 2026 00:07:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2612 (0xa34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367F26DAF, serialNumber=AB19964619FF85343CC091180673A8AC528610F4
Validity
Not Before: Mar 5 12:08:32 2026 GMT
Not After : Dec 1 12:08:32 2028 GMT
Subject: CN=69a97248-03f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8e:7a:4a:86:65:c6:80:d5:75:9a:2e:a0:4a:
92:63:c9:96:ee:6f:fa:5d:f8:11:f3:6e:3c:ef:2e:
2b:77:50:e0:f3:b7:67:04:4e:dc:d6:c7:59:fa:49:
1d:87:23:21:1d:6c:e3:9c:b2:b4:37:23:63:9a:9f:
ae:8b:07:6e:ed:c5:3d:b7:b1:11:f2:f1:8e:31:78:
c6:9d:23:bb:78:7a:b5:3c:93:77:f6:45:a4:10:0a:
e9:58:bb:59:37:f4:d1:e2:d3:83:e0:90:2f:a0:7a:
22:01:42:ea:c1:14:5e:67:96:a6:4e:f2:28:87:69:
a0:ea:38:01:3e:96:be:a8:fc:97:27:08:eb:3c:4d:
81:98:69:29:48:d6:e6:01:72:24:a5:c9:72:3c:8b:
94:3c:1c:d5:54:62:53:f2:16:5f:a5:9e:c4:17:59:
c6:08:b1:8c:29:77:ee:4f:88:22:b0:9d:62:87:37:
db:d0:f3:31:6e:60:88:55:87:fc:d0:45:3a:7d:b4:
b7:88:7f:be:90:32:fa:62:3e:95:b3:f9:4e:04:60:
5a:4c:e0:c9:86:8d:ee:97:37:f7:81:24:dd:04:9f:
c8:f9:90:a1:ac:06:e2:d8:d2:35:01:26:4a:57:e0:
58:e4:04:66:5d:88:42:80:75:15:10:9d:ac:fc:15:
30:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A8:1B:CD:40:19:02:6F:C2:4B:B7:C1:A9:B9:CB:0B:28:9E:18:F1
X509v3 Authority Key Identifier:
keyid:AB:19:96:46:19:FF:85:34:3C:C0:91:18:06:73:A8:AC:52:86:10:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/0B265DAC188C11F182BD24E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.79.212.0/22
102.211.180.0/22
154.68.176.0/20
154.118.244.0/22
IPv6:
2c0f:efe0::/32
Signature Algorithm: sha256WithRSAEncryption
b2:ac:54:1a:d4:f3:2d:22:fd:87:de:09:3f:46:04:c5:5d:54:
e7:11:7f:7d:32:21:3e:04:26:ad:8b:35:29:70:3e:13:fc:a0:
e7:ad:d4:a6:ae:b0:6c:f8:0c:d6:bd:ed:16:6f:60:b6:5b:f2:
14:fb:e4:91:3b:8a:8a:ee:61:c7:c4:d7:4b:a7:d9:d5:83:d2:
83:44:69:29:bb:a8:82:49:46:00:af:52:5d:3c:e7:9f:14:b9:
d3:4d:98:06:f1:67:4d:4e:1c:f8:32:96:4c:bf:d4:10:e5:98:
12:db:16:a8:ce:73:88:2b:83:9e:5d:b5:92:0d:ac:8b:0e:3f:
56:2c:0f:83:28:fb:06:1e:f7:f2:37:7b:ce:81:a3:a9:c9:4a:
89:d0:72:a9:0b:30:09:82:75:8a:32:ab:b8:ae:5c:15:f2:af:
a4:73:89:a1:0e:c5:b5:aa:c2:1b:da:24:60:31:05:d6:63:7d:
71:1d:a4:38:e8:54:2c:37:29:71:9b:23:ba:13:af:cc:4a:85:
d0:db:8e:61:8a:c7:fe:8c:53:a1:2f:19:21:72:6f:dc:3e:69:
72:1e:10:e9:fd:53:00:3f:89:86:88:b7:84:95:8a:06:99:9a:
99:ef:c2:de:c6:5a:e4:16:0a:09:4a:14:e3:9a:dd:6d:0e:58:
b7:59:98:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:13:34 2026 by rpki-client