Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2DB1AAC161A11F1B62668E3DAE4EC9C.roa
File: B2DB1AAC161A11F1B62668E3DAE4EC9C.roa (raw, json)
Hash identifier: RtSDYp/K6fTwo4gM+HgBVBFuCLHbBLuq6/xiAgSOiK8=
Subject key identifier: 0A:B2:1E:CE:8E:80:A3:22:24:F1:DC:73:6E:2B:BD:3F:EB:1B:E5:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BCE5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2DB1AAC161A11F1B62668E3DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 09:32:15 +0000
ROA not before: Mon 02 Mar 2026 09:32:10 +0000
ROA not after: Mon 15 Mar 2027 09:32:10 +0000
asID: 55720
IP address blocks: 154.216.2.0/23 maxlen: 24
154.220.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Mar 2026 00:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113893 (0x1bce5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 2 09:32:10 2026 GMT
Not After : Mar 15 09:32:10 2027 GMT
Subject: CN=69a5591f-0288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:92:92:85:c5:f5:24:10:71:f3:36:19:dc:da:
56:87:44:b0:0a:f2:10:98:a4:63:5a:fd:e3:f5:a1:
6a:94:de:c6:02:fd:8f:2a:03:36:d2:42:0e:4b:09:
02:a6:12:29:6d:74:37:3d:66:0a:c4:eb:bf:d3:96:
d9:35:75:69:aa:e0:d9:d0:78:28:50:0d:1a:d8:f8:
5a:41:a2:bb:9e:cc:f0:4f:c7:3f:59:db:a1:0b:81:
cf:29:ea:65:41:83:13:03:30:24:d3:fa:5c:fb:84:
7a:10:96:f3:a1:9d:b6:56:04:01:1e:7f:57:05:1a:
97:1e:ac:07:2d:37:61:ef:3f:63:01:d7:54:5f:f7:
25:06:28:6e:f3:bd:2b:5b:ba:53:de:08:5a:c8:d8:
92:60:e0:f0:f4:bb:85:d6:2b:4f:9f:03:aa:d4:e1:
c7:c4:74:a2:29:8d:a9:20:49:d7:2d:3c:7c:ea:4c:
4b:4b:fd:62:5b:c3:d5:8b:e5:4a:15:49:c6:53:ed:
8f:6b:5d:e9:4c:76:86:fb:cd:20:b7:5b:b1:d9:1f:
ef:a8:da:93:7c:8e:dd:82:02:cf:be:2f:0e:9c:b0:
f6:b0:29:3b:3b:22:45:86:f2:0d:20:c0:22:11:74:
90:44:ae:9f:e4:29:73:68:06:31:d7:b4:f9:4a:c0:
68:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B2:1E:CE:8E:80:A3:22:24:F1:DC:73:6E:2B:BD:3F:EB:1B:E5:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2DB1AAC161A11F1B62668E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.2.0/23
154.220.2.0/24
Signature Algorithm: sha256WithRSAEncryption
44:48:f4:20:c3:de:e2:9b:99:51:2d:f4:e0:01:c1:cb:d7:50:
d2:5a:5b:82:d8:4f:bc:41:44:3d:87:d3:75:87:88:e5:54:73:
6b:16:a1:0c:60:ca:ce:eb:93:67:77:07:b9:f3:76:5a:89:73:
03:75:72:86:00:f7:fe:c4:04:9c:09:28:0b:8d:4d:4e:21:f9:
35:08:49:45:99:45:4c:11:6b:f8:8e:64:7e:10:5e:e8:89:2e:
3f:f1:0e:9a:a6:30:02:7e:85:b4:07:8b:fe:19:99:0b:21:42:
c3:33:51:99:52:c8:85:a1:f9:0a:15:5e:4b:f9:72:79:63:8f:
11:46:5a:27:55:73:50:c8:e6:8b:27:ba:97:bf:3d:07:b2:69:
37:90:05:4c:67:83:44:f5:ac:8c:20:b9:08:d3:4b:01:84:51:
01:af:24:72:c6:fd:34:57:dc:57:66:06:bd:df:4c:18:71:2d:
e5:44:a0:04:66:e8:3a:9e:e4:af:82:8e:86:e8:84:00:4e:a7:
f7:35:9e:43:49:5e:bd:e7:31:75:b2:17:90:32:2d:4d:11:9b:
8d:39:fb:6b:11:78:7c:30:10:dd:00:16:cc:89:98:83:8f:1a:
fe:12:7a:92:12:84:66:f1:7a:9b:00:e2:19:09:28:dc:55:7f:
1f:3f:f0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 13:08:14 2026 by rpki-client