Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05F684F61E1811F1AAB31ABEDAE4EC9C.roa
File: 05F684F61E1811F1AAB31ABEDAE4EC9C.roa (raw, json)
Hash identifier: xnNz0oaw4fW9H5jwx4U+at686s5dNQ6jUOUHVJE7TEE=
Subject key identifier: 1D:97:F0:0F:97:64:5D:33:BF:41:EC:91:A0:A5:D6:B2:33:9F:94:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF18
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05F684F61E1811F1AAB31ABEDAE4EC9C.roa
Signing time: Thu 12 Mar 2026 13:33:15 +0000
ROA not before: Thu 12 Mar 2026 13:33:12 +0000
ROA not after: Sun 19 Apr 2026 13:33:12 +0000
asID: 11404
IP address blocks: 154.193.112.0/20 maxlen: 24
154.196.192.0/20 maxlen: 24
154.199.80.0/20 maxlen: 24
154.200.112.0/20 maxlen: 24
154.205.48.0/20 maxlen: 24
154.206.32.0/20 maxlen: 24
154.207.144.0/20 maxlen: 24
154.207.160.0/20 maxlen: 24
154.208.96.0/20 maxlen: 24
154.222.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114456 (0x1bf18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 12 13:33:12 2026 GMT
Not After : Apr 19 13:33:12 2026 GMT
Subject: CN=69b2c09b-0c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:43:0a:90:1f:8c:94:20:b4:ef:de:27:a1:60:
7a:84:b0:d2:fd:b0:00:2f:0a:d3:60:c8:6e:00:4e:
3e:4d:19:30:df:c3:d7:03:82:58:15:25:a1:4a:45:
a6:d9:ec:8b:f8:34:8d:2f:88:5a:42:1e:38:6b:41:
36:9a:ab:09:f1:c3:4a:b1:04:4d:41:d6:39:33:b6:
f2:e9:aa:5c:54:ad:cf:ac:0d:06:69:5c:e4:94:2b:
c3:c6:f5:c8:ef:dd:4a:6e:74:e3:91:40:48:ea:27:
a4:fa:d4:74:04:55:6a:75:93:4b:29:5e:05:77:28:
3f:32:ca:10:b3:7b:4d:fd:1c:b1:58:2f:b4:bd:62:
ab:41:be:ab:e6:01:b0:ca:87:da:72:93:8a:ae:d0:
e2:73:d0:0e:7b:cc:f2:60:22:82:8c:d4:d9:f6:45:
34:45:42:fd:ea:f5:86:37:5e:3a:8c:ba:1c:8e:7d:
69:36:bd:79:3a:04:2e:bf:45:e1:5e:c0:5c:77:60:
33:1a:e5:c1:fc:17:b6:df:01:2e:2d:7d:83:21:d4:
b8:90:59:9a:e1:ac:5e:07:64:c9:f9:9b:35:4a:eb:
57:8b:8f:11:ee:ac:e8:c1:c4:99:d0:17:c9:e4:dc:
ce:d6:79:f1:3d:1f:c2:c3:2c:e5:d4:76:fd:67:54:
6f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:97:F0:0F:97:64:5D:33:BF:41:EC:91:A0:A5:D6:B2:33:9F:94:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05F684F61E1811F1AAB31ABEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.112.0/20
154.196.192.0/20
154.199.80.0/20
154.200.112.0/20
154.205.48.0/20
154.206.32.0/20
154.207.144.0-154.207.175.255
154.208.96.0/20
154.222.96.0/20
Signature Algorithm: sha256WithRSAEncryption
93:cd:61:44:3e:35:3f:8a:87:9d:ec:e8:43:12:ba:46:bc:d8:
21:b9:ed:4e:57:12:9d:78:5a:7d:26:8c:13:63:96:90:ac:04:
97:cb:ac:21:cf:81:50:6e:6d:65:c7:c8:a3:4a:88:12:bf:5e:
c9:28:ea:ee:68:78:eb:55:f9:1f:c4:94:fc:e3:fb:a4:40:64:
23:0b:98:57:09:2a:83:c2:19:e4:2f:dc:d8:5e:38:7e:d1:16:
04:ea:72:e2:0b:fc:cb:f1:ee:37:77:9e:4e:92:6a:68:8c:12:
f4:36:e3:0c:13:9c:23:17:2f:89:e3:7f:5c:7c:90:9e:71:4c:
74:f5:cf:cd:40:2c:34:94:5d:ff:d2:18:69:4f:ac:ab:dd:f4:
f6:8d:6f:65:f5:7b:46:50:9d:ce:69:da:82:b0:24:e6:63:7f:
18:00:cf:e6:53:28:f3:8e:ca:61:5b:f0:03:16:f2:f3:1d:9c:
e8:6c:bb:8b:42:fc:d1:2f:e0:60:35:b8:02:35:2a:bb:38:c1:
eb:e2:67:e4:ed:6a:00:1d:57:71:c7:53:38:32:1f:08:f2:61:
d8:20:63:99:28:7f:79:ef:9e:39:4c:2b:f3:c0:a4:66:e1:05:
63:25:94:48:28:19:50:19:4f:bd:ee:d5:82:fe:39:83:eb:16:
f9:63:99:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:15:55 2026 by rpki-client