Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0983240C160D11F19C20C291DAE4EC9C.roa
File: 0983240C160D11F19C20C291DAE4EC9C.roa (raw, json)
Hash identifier: /2zBtOyDls0z9g+UionoeOLFrO4iik6Fmin//rjMwB4=
Subject key identifier: 7F:9B:C3:7B:4C:AF:C9:99:87:EE:6A:86:60:E4:B7:4A:9F:BD:20:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BCBA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0983240C160D11F19C20C291DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 07:54:28 +0000
ROA not before: Mon 02 Mar 2026 07:54:23 +0000
ROA not after: Thu 09 Apr 2026 07:54:23 +0000
asID: 138915
IP address blocks: 154.95.72.0/22 maxlen: 24
154.95.89.0/24 maxlen: 24
154.95.90.0/24 maxlen: 24
154.95.91.0/24 maxlen: 24
154.95.92.0/24 maxlen: 24
154.95.93.0/24 maxlen: 24
154.95.94.0/24 maxlen: 24
154.95.96.0/22 maxlen: 24
154.95.100.0/22 maxlen: 24
154.95.104.0/22 maxlen: 24
154.95.108.0/22 maxlen: 24
154.95.112.0/22 maxlen: 24
154.95.116.0/22 maxlen: 24
154.95.120.0/23 maxlen: 24
154.95.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Mar 2026 00:06:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113850 (0x1bcba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 2 07:54:23 2026 GMT
Not After : Apr 9 07:54:23 2026 GMT
Subject: CN=69a54233-793a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:3f:e2:a5:58:4c:bd:f1:5a:fa:9b:0e:1b:
ea:e4:a1:f4:40:22:2f:d6:02:99:ff:fd:81:e0:c8:
31:00:6f:10:d9:b5:75:0d:a3:23:72:c7:a9:ee:f0:
04:a3:14:9c:fe:53:cd:ec:5b:df:de:58:1f:89:2a:
53:c7:0d:63:1e:55:6c:97:10:d2:f1:03:0d:bb:c1:
49:92:3d:a4:e7:1a:77:76:c5:84:67:60:c2:43:bb:
ad:29:1a:90:d6:8f:32:12:bf:70:18:41:72:a7:52:
c9:39:8b:a6:e4:ff:31:c4:c2:0b:31:b9:ba:1e:8b:
10:82:92:66:05:29:f6:87:79:9e:6c:8a:2a:90:ea:
8e:9e:b7:5a:c6:ee:5e:85:5f:92:04:c7:20:5c:99:
f3:6d:9c:ad:66:31:00:9a:d4:b5:a3:f1:9d:21:e5:
70:b8:a8:f7:4e:9e:bc:7d:ac:f6:67:92:08:81:d6:
4b:b1:38:44:60:31:2a:47:ec:43:28:88:d6:4d:6c:
16:6c:08:74:d4:bb:e2:c2:a5:4e:6c:d2:50:24:6b:
00:5c:e0:a4:dd:9f:d1:a3:ed:92:f2:6e:57:0f:87:
30:99:0e:e9:57:ff:42:e1:56:f5:2a:88:29:64:c2:
bf:6d:95:05:15:f4:ab:ab:87:ae:98:11:eb:64:d3:
da:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9B:C3:7B:4C:AF:C9:99:87:EE:6A:86:60:E4:B7:4A:9F:BD:20:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0983240C160D11F19C20C291DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.72.0/22
154.95.89.0-154.95.94.255
154.95.96.0-154.95.123.255
Signature Algorithm: sha256WithRSAEncryption
b8:c5:fa:2e:f9:9e:1f:e7:f0:18:1c:88:02:98:8b:73:93:03:
3b:a1:0b:ab:e7:da:38:9f:2f:8d:1e:76:f7:c7:5a:f2:58:ef:
60:b5:d5:ab:e9:39:7c:6b:ba:f2:b1:b4:8b:da:2c:6c:d9:a0:
e6:d4:4b:92:80:a2:29:ac:38:de:35:58:dd:51:f8:85:dd:c1:
bf:53:4b:1c:cb:84:35:0e:54:4f:83:a1:42:c1:41:11:cc:fc:
cd:74:d0:5e:50:0c:7b:06:f9:c6:2a:22:ab:8c:0e:0c:74:3e:
da:92:7d:3e:a7:91:c6:f5:2b:25:6b:a0:45:e9:ea:9b:6d:8c:
f5:c7:fe:0b:43:8b:cc:ee:9f:3a:7a:bd:80:36:49:52:98:5e:
00:d3:5a:e7:7e:5b:bc:f8:21:d3:66:a7:28:f8:49:87:3e:09:
26:fb:11:dc:6c:9e:98:87:41:2e:88:3d:40:73:aa:99:de:ad:
42:46:32:c0:bd:ce:a2:81:ae:63:ff:26:2b:8c:64:08:cd:b3:
6c:eb:77:4c:3c:d0:61:61:e8:4a:ac:1f:17:ae:8f:7e:bd:66:
8f:a0:01:60:fa:5d:80:78:57:28:91:fb:0f:ee:20:e3:2e:cf:
84:c5:13:ed:56:17:99:e0:d1:ba:aa:3d:c3:ed:52:1d:9a:87:
34:27:12:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 22:17:33 2026 by rpki-client