Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AB755BC1B8611F19C8EA6BFDAE4EC9C.roa
File: 6AB755BC1B8611F19C8EA6BFDAE4EC9C.roa (raw, json)
Hash identifier: 8r7+zwrXzi4hI0P4eP8qJCeuwlPB8vVahiuxGF3PsGg=
Subject key identifier: 33:6F:A5:FE:41:5D:5B:7D:1E:A6:76:C8:F1:E5:7A:CF:47:AA:1C:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE68
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AB755BC1B8611F19C8EA6BFDAE4EC9C.roa
Signing time: Mon 09 Mar 2026 07:05:56 +0000
ROA not before: Mon 09 Mar 2026 07:05:51 +0000
ROA not after: Thu 16 Apr 2026 07:05:51 +0000
asID: 17497
IP address blocks: 154.196.216.0/21 maxlen: 24
154.196.216.0/24 maxlen: 24
154.196.217.0/24 maxlen: 24
154.196.218.0/24 maxlen: 24
154.196.219.0/24 maxlen: 24
154.196.220.0/24 maxlen: 24
154.196.221.0/24 maxlen: 24
154.197.26.0/23 maxlen: 24
154.197.26.0/24 maxlen: 24
154.197.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114280 (0x1be68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 9 07:05:51 2026 GMT
Not After : Apr 16 07:05:51 2026 GMT
Subject: CN=69ae7154-bf4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:70:67:55:ff:96:49:63:c9:1e:d3:21:f4:f2:
31:72:1d:a6:56:a7:40:28:7e:29:ab:84:18:26:00:
4f:c6:a9:8e:c6:13:c4:23:82:c4:b2:a7:21:1a:75:
fc:6a:7e:ff:48:18:44:05:23:fc:2e:5e:86:3f:0c:
24:52:5d:22:33:11:c4:bd:a9:d2:84:5c:17:26:9d:
dd:b1:df:7b:0a:97:da:98:48:51:a2:25:87:91:0a:
2f:05:fa:d6:9d:ac:43:a5:18:b5:3e:20:d3:b3:20:
65:ad:1a:93:0d:fa:62:28:5e:d9:a4:7c:b6:5c:6d:
0a:de:96:1b:41:18:1c:b6:1d:57:f0:27:7f:2b:bb:
2b:d2:10:06:da:30:1e:08:19:43:36:a2:37:65:02:
f8:38:34:ec:4a:e0:a9:d5:73:3c:d4:9f:43:c7:7f:
fc:92:8b:0e:52:6f:e4:70:27:11:ed:1c:14:a2:8c:
18:f1:c9:20:82:2b:e4:0d:fb:f3:17:53:e6:61:7c:
76:b7:cc:bf:c1:87:53:87:b5:fd:e6:63:f0:14:c7:
12:ff:58:91:3a:7b:14:21:8c:2a:b0:62:76:cd:32:
99:a8:65:a7:29:0a:1b:8e:8c:29:8e:a6:be:30:fd:
3b:2c:c0:ff:c8:a0:26:b1:98:a3:40:7e:ce:fc:ec:
70:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6F:A5:FE:41:5D:5B:7D:1E:A6:76:C8:F1:E5:7A:CF:47:AA:1C:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AB755BC1B8611F19C8EA6BFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.216.0/21
154.197.26.0/23
Signature Algorithm: sha256WithRSAEncryption
10:b0:27:16:45:6c:30:49:1a:db:b6:38:0d:e8:31:5e:61:d8:
01:e5:91:36:c7:e8:1f:97:a8:7b:7f:19:10:93:8a:81:83:c2:
94:f1:fb:b8:1a:31:51:24:50:38:fd:3d:e5:73:98:b3:c1:f5:
ce:26:60:80:81:1e:8e:f6:6a:68:e9:43:9b:f5:3a:dd:13:ed:
e3:c0:f9:b8:54:ea:67:4c:51:bb:4a:f2:0a:67:df:5c:f7:bd:
64:cf:4b:47:c9:81:24:80:89:51:7f:67:8c:16:79:c3:48:d8:
a7:72:48:28:58:a0:00:10:00:7e:2f:84:b2:99:8e:1d:97:5f:
be:ed:4a:79:db:00:4a:77:f9:79:c4:cb:2d:0b:1e:b4:99:6e:
9e:21:3c:d4:94:aa:6f:ba:c8:0b:53:91:f0:b6:46:00:4a:91:
53:a4:46:84:b5:c9:85:d0:5e:fa:3c:c1:f3:c7:95:d2:95:7c:
d1:72:f1:ad:1c:c0:24:0b:c8:58:38:38:40:f8:c9:d6:9d:da:
c6:9a:2c:9a:ac:c7:0a:7c:da:bd:47:bc:00:66:5a:7b:fa:41:
ed:09:d0:6c:08:b0:89:bf:16:9b:be:1e:d8:4b:35:ae:77:e9:
b6:97:e1:fe:f3:02:e2:da:2a:50:b5:7c:03:d1:e5:ef:b5:c8:
90:0c:45:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 09:29:46 2026 by rpki-client