Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BE909AA1E1711F1BBBC83B8DAE4EC9C.roa
File: 2BE909AA1E1711F1BBBC83B8DAE4EC9C.roa (raw, json)
Hash identifier: KuhhtG/xdfQ8QAnTVet1CwicZWuTsQXSg3fXTvV89Q0=
Subject key identifier: E5:81:A5:43:61:3A:AF:A6:C9:46:E6:80:05:D5:B7:94:C0:5D:72:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF16
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BE909AA1E1711F1BBBC83B8DAE4EC9C.roa
Signing time: Thu 12 Mar 2026 13:27:10 +0000
ROA not before: Thu 12 Mar 2026 13:27:04 +0000
ROA not after: Sun 19 Apr 2026 13:27:04 +0000
asID: 6079
IP address blocks: 154.221.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114454 (0x1bf16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 12 13:27:04 2026 GMT
Not After : Apr 19 13:27:04 2026 GMT
Subject: CN=69b2bf2e-8543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:30:4f:f6:67:31:ea:8a:37:42:f7:31:db:
41:b2:27:e5:06:65:0f:da:47:88:27:da:a9:84:b6:
5b:d9:f0:4e:43:2f:05:b7:79:a4:e6:6a:6f:40:80:
36:68:6a:2b:07:c0:e4:e2:b8:a8:10:97:0e:85:5c:
37:a7:7c:7a:95:89:67:ae:15:10:a7:da:50:cb:73:
7a:f9:3b:46:d2:8a:9d:da:e0:73:b4:3e:2d:51:11:
17:d4:dc:50:69:c1:d4:5e:45:26:a8:c1:48:84:a1:
36:1a:cd:12:6a:00:20:29:0a:c4:a8:e0:d7:1f:81:
e5:7c:e2:0d:be:2a:fc:0c:ba:5b:64:fb:98:69:e5:
bb:d6:82:ee:e4:ca:9a:04:13:f3:6b:45:f4:52:07:
2a:aa:54:df:2f:3f:08:c9:82:73:71:9c:d7:6d:f8:
44:85:b7:93:fd:4e:22:18:9b:e4:9e:3f:75:b1:c6:
14:f8:d1:f4:96:9f:01:a5:91:b6:a1:54:33:e5:b9:
8d:1c:df:d6:f6:4d:e7:e3:f9:59:0e:c6:9f:c3:20:
83:de:50:ad:a1:ee:42:15:2e:72:d0:95:36:52:64:
94:07:c8:eb:ad:0a:41:72:01:2d:df:bd:f1:3b:95:
16:d7:09:e8:3f:20:3c:81:01:5a:05:da:11:4a:8f:
30:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:81:A5:43:61:3A:AF:A6:C9:46:E6:80:05:D5:B7:94:C0:5D:72:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BE909AA1E1711F1BBBC83B8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.192.0/18
Signature Algorithm: sha256WithRSAEncryption
9b:18:d7:b9:08:6b:5f:0f:a3:a9:75:66:ea:13:a8:8c:39:35:
b3:e9:34:25:41:db:3b:8e:22:02:49:24:6c:2f:f5:7a:b4:6a:
fb:8d:5d:e8:af:db:13:c2:b2:6d:89:04:70:27:f3:a0:a0:b5:
df:5b:18:2d:ab:1c:52:55:78:7f:3c:7d:85:eb:f5:ac:a7:2b:
bb:fe:c0:fb:69:6a:95:8b:ff:ab:22:95:e7:14:b3:26:9a:2a:
17:b9:27:1f:65:f5:93:18:1f:66:f8:fc:77:1a:ca:b3:0f:16:
9c:aa:b3:45:39:ba:5f:92:3f:c2:f7:47:0b:e1:8d:56:b7:b0:
3f:5f:2f:50:d7:ed:be:b6:19:c1:92:46:f8:da:37:18:62:96:
f7:bd:e9:07:db:20:a0:dc:6e:43:16:5e:fd:14:96:56:a9:57:
48:a4:de:96:38:f1:0b:e8:0f:06:ed:44:04:09:4a:cf:4e:92:
48:33:41:b4:0c:de:09:7e:f4:a9:f7:55:ea:78:5b:83:2a:54:
a5:19:89:e9:3b:8c:31:b7:9e:8b:28:6a:f9:31:55:49:bb:75:
42:b5:d6:b3:18:02:b9:09:55:a8:da:7a:bb:7b:29:aa:38:41:
0f:76:e7:ab:c6:e8:71:64:e7:4c:d2:dd:90:d7:03:db:62:4d:
86:ea:5c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:17:30 2026 by rpki-client