Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11384ED00B1211F19EF0E69CDAE4EC9C.roa
File: 11384ED00B1211F19EF0E69CDAE4EC9C.roa (raw, json)
Hash identifier: W7h12h65nG0ugzhXnvjdAiEPaiFzcg7uPCM8ofjf4gw=
Subject key identifier: 03:4F:EC:84:72:FC:86:44:FC:5F:13:12:92:32:73:6F:13:E7:A1:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B9B4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11384ED00B1211F19EF0E69CDAE4EC9C.roa
Signing time: Mon 16 Feb 2026 08:32:46 +0000
ROA not before: Mon 16 Feb 2026 08:32:40 +0000
ROA not after: Sun 15 Mar 2026 08:32:40 +0000
asID: 397423
IP address blocks: 154.202.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 25 Feb 2026 00:06:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113076 (0x1b9b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 08:32:40 2026 GMT
Not After : Mar 15 08:32:40 2026 GMT
Subject: CN=6992d62d-262f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6b:d7:d4:d7:50:ed:fd:03:f7:88:0e:99:03:
16:40:c4:e7:9b:a6:5b:8e:db:d9:de:a8:c9:01:5d:
8a:5e:7b:25:e2:4f:e5:bf:97:62:49:b4:4e:a7:9e:
5b:95:e0:d4:b3:8b:cd:6a:e0:91:81:78:47:d6:60:
83:7c:53:71:3d:3f:c8:08:51:08:37:32:d3:01:89:
16:e9:3a:f8:43:f6:2e:9b:c5:19:20:2a:15:05:49:
a3:bf:c1:fd:85:94:80:f0:78:f9:e9:25:cc:24:66:
67:b5:14:23:92:1b:a7:60:fb:c4:82:79:3f:d4:1d:
62:8e:4a:c1:cf:ef:6e:03:f0:3f:f2:e9:e3:dc:bc:
90:4c:10:16:f0:08:2a:90:e0:b2:6f:01:b9:50:e8:
b4:78:b7:3c:31:71:ff:d0:04:27:44:c6:16:8a:7c:
6d:4a:c2:87:4a:56:37:cf:0f:a8:42:2e:57:2f:b0:
43:78:3a:dc:a5:98:d9:3e:28:e0:60:39:99:10:05:
34:b3:4d:ab:66:61:09:cd:d3:0b:e9:aa:22:0e:48:
87:30:46:93:ca:44:7d:09:2c:25:fa:28:45:03:f5:
c2:15:2a:4f:95:db:27:77:80:7d:7f:aa:98:5f:44:
44:de:d0:8b:bc:98:ab:13:04:00:05:fd:c8:8d:23:
f0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4F:EC:84:72:FC:86:44:FC:5F:13:12:92:32:73:6F:13:E7:A1:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11384ED00B1211F19EF0E69CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.3.0/24
Signature Algorithm: sha256WithRSAEncryption
61:e7:ea:56:6c:50:cf:96:70:9f:25:5a:1d:a3:e5:26:a0:52:
c0:34:61:1d:d1:05:89:52:3e:c6:6e:47:fe:e6:1e:64:bc:81:
07:d0:36:b2:d5:15:9c:dc:44:5a:90:63:63:ef:f8:38:81:e6:
3c:19:f8:99:9e:9d:39:a6:39:7c:4b:e8:f0:7a:ad:29:42:95:
c3:94:d2:16:7c:7c:a1:dd:de:0e:4c:55:42:08:0b:24:31:46:
6e:d6:55:52:b6:e1:27:7c:d9:81:ea:52:97:91:6b:bd:a3:13:
79:53:ed:e5:92:24:e1:3d:5a:69:c3:0e:72:85:34:ea:71:d7:
bd:f1:ac:12:79:d6:d4:ef:74:ba:e6:58:2a:7e:98:b4:af:36:
3b:36:af:d9:c2:b3:df:71:3c:a8:dd:62:07:11:39:84:35:61:
3b:41:4a:3e:b9:54:64:36:22:f2:9a:8b:b6:9e:d1:d3:ef:83:
4e:07:18:9b:a0:ab:b2:f3:c4:58:a5:31:4a:ed:4c:cb:27:cd:
ea:c4:e7:4e:32:0c:dd:1f:4d:ee:ec:35:3b:79:bf:a9:d2:38:
fa:8d:fc:cc:05:b7:a9:eb:13:f7:5f:cb:de:d4:30:db:21:2a:
c7:59:0d:1a:16:02:13:56:0b:7a:7b:7e:04:41:67:b0:f7:5a:
19:17:53:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 03:58:34 2026 by rpki-client