Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06050FE80A5A11F1992713B0DAE4EC9C.roa
File: 06050FE80A5A11F1992713B0DAE4EC9C.roa (raw, json)
Hash identifier: NmxkBCXRquK0mAAupsF8PYPHCeGgwkqYhNgPn9m9YMU=
Subject key identifier: DF:4D:8C:A6:44:57:0C:FB:53:7C:81:1D:A6:CE:C7:D8:B1:39:4E:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B972
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06050FE80A5A11F1992713B0DAE4EC9C.roa
Signing time: Sun 15 Feb 2026 10:35:19 +0000
ROA not before: Sun 15 Feb 2026 10:35:14 +0000
ROA not after: Wed 25 Mar 2026 10:35:14 +0000
asID: 174
IP address blocks: 154.214.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Feb 2026 00:07:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113010 (0x1b972)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 15 10:35:14 2026 GMT
Not After : Mar 25 10:35:14 2026 GMT
Subject: CN=6991a167-9778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:22:51:1b:06:c7:1a:5e:e1:f5:83:ca:71:f2:
d9:1d:2e:0f:5f:87:18:f6:45:90:94:47:b2:5e:03:
c8:9a:40:d0:1c:d6:b2:ce:e0:ff:a8:09:be:33:b7:
38:c3:c8:8a:4c:98:f9:1b:2f:be:85:48:3f:33:cf:
ba:9e:de:ac:d5:da:37:bb:fd:4f:a1:3e:46:c1:23:
36:7a:a5:14:a9:56:19:70:7a:92:d3:f6:1f:94:dd:
e1:8b:c0:63:bf:31:7d:8f:38:b3:55:73:e2:a8:b7:
ba:6f:ec:a9:70:fb:84:b3:cb:74:90:8c:1d:40:7b:
3c:5e:26:c1:b3:88:75:99:9f:68:73:50:75:e6:34:
dd:2b:8d:b2:23:cd:a6:b8:d0:f2:66:c5:1d:56:fc:
60:a6:82:1c:90:b0:ee:c7:d6:d9:81:18:c6:17:ba:
ca:e1:28:b0:e8:bd:92:c7:cf:2d:b9:b0:b0:f2:d6:
c0:93:17:ff:9d:c6:99:a0:dc:b4:03:10:eb:08:96:
7c:f4:f0:33:bc:03:3b:7c:24:66:75:f1:a7:f5:fe:
39:51:13:5e:9e:76:92:05:6f:ff:ff:83:a0:52:f3:
ea:87:41:56:ee:ea:b4:ec:0a:a4:69:cf:6b:b6:41:
ad:82:85:2e:94:7b:8b:9a:d8:c6:96:3a:6c:fe:b8:
f6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4D:8C:A6:44:57:0C:FB:53:7C:81:1D:A6:CE:C7:D8:B1:39:4E:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06050FE80A5A11F1992713B0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.0.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:78:94:a2:12:b2:4b:f6:15:8d:b6:6d:dc:2d:c3:4e:7c:76:
18:93:9c:6d:77:c7:f8:28:0d:54:68:5d:f8:f3:da:9d:2a:fb:
b5:c9:f8:28:dc:8c:37:98:94:fa:7b:dc:d9:4d:d4:14:98:21:
5a:33:d8:63:3f:d6:fd:5a:df:35:ed:83:b3:e5:bd:fe:09:f9:
9a:99:20:bb:60:c1:5c:06:ef:e2:7e:74:fa:dc:e5:dd:45:35:
04:17:e6:8b:4c:c8:6d:78:f7:dc:90:0f:5f:3e:e2:ac:23:7b:
94:31:77:6c:9f:98:04:ac:c0:3a:38:b0:7d:f0:50:ca:b6:2f:
24:12:a1:02:43:25:86:4d:46:93:96:d4:67:1b:5f:9a:ad:22:
21:0e:a1:d7:10:ac:ad:aa:5f:65:eb:93:bf:6c:51:60:2f:0d:
10:ac:6b:59:15:86:3a:3a:90:94:ac:6b:78:b4:3d:c6:d1:68:
59:53:96:7a:2c:c7:f0:62:c8:82:a5:f6:3b:f2:40:2d:84:1a:
2e:56:17:c0:d3:85:62:8f:78:aa:08:b0:98:fd:c9:1d:11:1f:
9d:bb:05:de:74:4f:be:d2:78:12:ba:77:da:0d:19:ec:77:b4:
57:31:31:89:5b:00:5e:7f:51:5c:f7:81:d2:ce:3c:84:e8:37:
18:eb:d1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 10:35:04 2026 by rpki-client