Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D0AE2A6171411F1AB87CEDDDAE4EC9C.roa
File: 5D0AE2A6171411F1AB87CEDDDAE4EC9C.roa (raw, json)
Hash identifier: FL0o2MzCYH0l6sEnupp8w7aYgGoO0GaKNsljWmxdn1s=
Subject key identifier: AD:12:1C:E5:0D:A4:F0:E6:91:D2:FC:B6:EF:14:FA:2F:A1:B0:11:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BD46
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D0AE2A6171411F1AB87CEDDDAE4EC9C.roa
Signing time: Tue 03 Mar 2026 15:19:25 +0000
ROA not before: Tue 03 Mar 2026 15:19:20 +0000
ROA not after: Thu 09 Apr 2026 15:19:20 +0000
asID: 17497
IP address blocks: 154.203.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113990 (0x1bd46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 15:19:20 2026 GMT
Not After : Apr 9 15:19:20 2026 GMT
Subject: CN=69a6fbfd-8176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e9:8f:7e:1d:0c:35:ef:6b:58:eb:fa:c2:48:
21:13:e2:c6:ef:26:1a:bd:bc:4d:72:be:30:9f:94:
7f:68:38:33:06:a6:f8:17:ae:30:c6:ab:d5:b3:29:
97:8e:7b:9f:7b:91:0d:1f:71:d1:23:71:41:53:d0:
f6:e4:62:f2:8d:60:11:e1:e8:5e:88:3c:21:5e:ce:
3c:76:28:ca:e8:3d:77:3d:98:d5:37:9f:42:16:73:
ee:e7:ab:0e:5b:14:3a:b6:97:13:53:46:0f:e8:26:
14:31:e5:b8:43:9a:8d:a7:d8:83:c2:91:2e:8f:c6:
d9:4f:45:fc:6c:c0:0a:a4:40:1b:0e:1e:bb:3f:d8:
d7:18:77:6a:7a:92:c9:6c:83:ba:21:e3:80:43:3a:
cd:a4:14:57:4b:ff:91:bb:5b:41:62:f9:89:27:a7:
8a:7d:e9:7c:5b:18:a0:3c:7e:2c:d6:ec:89:b9:e0:
a3:72:f1:fd:b5:03:42:74:a1:25:ed:f7:75:96:4e:
67:71:1e:59:97:ac:86:26:d0:70:f8:cb:cc:ad:a3:
21:6e:42:dd:68:ae:ce:a8:7a:ad:ac:d2:8e:e5:97:
5c:f9:0d:3d:a8:f9:ce:87:23:50:48:f2:fc:12:bf:
4b:19:f6:1a:03:7c:ad:23:9c:c9:50:91:c5:42:cb:
cf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:12:1C:E5:0D:A4:F0:E6:91:D2:FC:B6:EF:14:FA:2F:A1:B0:11:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D0AE2A6171411F1AB87CEDDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.92.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:9f:9b:c3:22:ff:45:19:15:69:5c:92:12:c3:9a:81:b1:7e:
b7:77:91:f5:d3:56:a4:79:13:a8:cb:1b:c3:30:b6:65:04:c7:
85:b4:20:86:6c:53:3a:5f:13:69:91:2b:da:0a:43:1d:7c:83:
e5:56:ee:45:3e:b3:a4:78:d5:51:4f:18:9d:84:02:65:95:c1:
07:d9:db:04:d2:88:d0:40:d6:91:dc:b4:2f:f7:53:39:bd:31:
0c:7e:4d:05:f2:93:cf:c4:aa:eb:41:9d:ff:c8:e6:92:55:a6:
6c:df:5c:b3:ce:44:be:90:aa:f3:c7:09:22:cc:53:c9:3d:c0:
a1:38:94:76:8d:a5:12:0a:9d:35:9c:ce:29:00:fe:78:12:df:
39:2c:ba:28:59:2f:90:e2:4d:a9:89:7d:6d:70:07:95:ca:7b:
bf:a0:64:39:fd:ee:57:bf:20:ac:b4:3e:de:6d:d7:20:1a:9f:
49:68:f8:ae:df:53:71:38:37:af:af:9b:f0:6f:38:c9:f8:54:
6e:f9:b8:00:a2:78:d5:98:f1:3e:5d:9c:1a:c4:8d:ce:85:00:
4b:30:18:89:7c:70:a5:2f:16:8e:15:dd:74:ae:18:7a:c2:77:
2f:15:73:4e:d0:91:0a:b8:f3:80:38:ae:24:50:7d:bd:69:c8:
ec:e2:22:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 09:28:18 2026 by rpki-client