Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/825070361AB011F19880019FDAE4EC9C.roa
File: 825070361AB011F19880019FDAE4EC9C.roa (raw, json)
Hash identifier: cUxDuCM4c6OfU4wHifo/mM9Z5/vzSSLkX4fZBMAyMsU=
Subject key identifier: F7:5F:71:56:72:51:A2:E0:4C:16:4D:87:05:C9:55:64:80:73:BC:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE43
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/825070361AB011F19880019FDAE4EC9C.roa
Signing time: Sun 08 Mar 2026 05:34:43 +0000
ROA not before: Sun 08 Mar 2026 05:34:39 +0000
ROA not after: Sat 11 Apr 2026 05:34:39 +0000
asID: 214143
IP address blocks: 154.197.60.0/23 maxlen: 24
154.197.86.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114243 (0x1be43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 8 05:34:39 2026 GMT
Not After : Apr 11 05:34:39 2026 GMT
Subject: CN=69ad0a73-5b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2b:c4:b4:6d:b4:e8:da:45:71:60:5a:8e:29:
81:dc:ae:d1:55:46:3d:b4:f6:95:4d:58:77:5b:68:
5e:4b:87:52:33:79:50:9c:e7:66:43:9f:3d:27:7d:
36:10:bd:53:c1:6c:d0:03:e7:c0:3e:38:21:0f:45:
a2:ea:47:53:76:0a:a0:b8:61:68:e6:07:41:7f:5e:
d6:97:ce:8f:59:03:8e:75:74:cb:9d:59:16:74:fd:
b3:75:08:61:17:d6:65:9d:4f:aa:e6:ca:cf:8d:63:
3f:1b:30:90:fc:ba:f1:46:3c:aa:98:92:d6:6e:06:
d5:39:e8:d4:1c:1f:77:00:e3:3a:34:b5:63:1f:11:
b6:90:03:6f:36:bd:21:fe:6b:6d:20:22:8e:32:e0:
73:87:a5:db:6e:9d:90:b4:69:a5:51:c5:33:61:b3:
7c:6a:56:71:39:42:6b:f5:72:33:c8:3d:1e:4d:00:
fc:0d:6c:10:73:67:47:8f:5a:02:d3:6d:7c:1a:02:
3d:d2:25:38:62:8c:4e:14:84:17:8c:77:4c:ee:1d:
65:f0:16:cf:6a:d8:99:fe:ed:22:2d:b3:f6:05:29:
8e:ef:b6:8a:2d:27:66:3c:a7:90:53:3f:e4:5e:66:
62:5c:8b:03:28:4c:33:70:47:c0:de:e6:19:23:aa:
ea:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5F:71:56:72:51:A2:E0:4C:16:4D:87:05:C9:55:64:80:73:BC:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/825070361AB011F19880019FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.60.0/23
154.197.86.0/23
Signature Algorithm: sha256WithRSAEncryption
58:66:f6:5a:de:ac:21:36:ea:f9:f5:0e:fa:a2:7b:e4:99:f4:
28:19:40:35:f4:60:3f:4e:a2:aa:0c:cc:f4:68:79:fa:3d:49:
a3:f5:92:ef:dd:d7:27:5e:e3:ac:b6:ec:4e:84:5c:e4:f0:14:
cc:91:6d:ae:91:86:38:13:63:cd:b5:f6:26:f4:9d:df:e0:6c:
02:b6:61:9d:60:e7:de:47:3e:4d:da:02:a8:23:28:f8:b5:b1:
4c:ec:66:14:4a:be:aa:89:82:23:32:2e:84:63:2f:f9:1b:30:
07:9b:9d:9a:e4:b5:da:40:98:39:2d:00:4c:c3:96:86:e6:a9:
2e:19:ca:bd:1b:a3:45:2e:6c:cb:92:fb:35:9d:43:73:0b:dc:
bd:7c:e0:18:67:46:e4:50:dd:28:7f:1c:96:e4:57:22:1c:4a:
88:e1:f2:32:72:6f:75:9f:54:b2:eb:f6:2d:a4:6d:64:18:03:
48:b4:a7:f8:9a:8b:d2:c4:44:96:f2:1d:fe:23:7a:35:08:e4:
6b:23:48:96:e1:35:a4:7d:11:07:dd:00:48:13:21:3e:1c:9c:
a7:d7:eb:86:bc:bf:ec:e5:36:de:20:fe:8f:b1:f2:ec:a9:3c:
ec:72:5b:95:f6:83:20:cd:f2:af:b9:ea:d1:d4:66:17:2e:6e:
73:d1:8a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:19:48 2026 by rpki-client