Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8FD3908160D11F18CC6DE95DAE4EC9C.roa
File: C8FD3908160D11F18CC6DE95DAE4EC9C.roa (raw, json)
Hash identifier: 9qnMw9wNmnLe8e6ewOAnyEKv/uqPDXGj+zSEytLKDhg=
Subject key identifier: 30:7C:C0:91:CD:9C:37:1A:A6:6E:F4:C9:0B:6A:ED:EB:3F:93:3D:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BCBC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8FD3908160D11F18CC6DE95DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 07:59:49 +0000
ROA not before: Mon 02 Mar 2026 07:59:44 +0000
ROA not after: Fri 02 Mar 2029 07:59:44 +0000
asID: 17561
IP address blocks: 154.80.82.0/24 maxlen: 24
154.80.83.0/24 maxlen: 24
154.80.84.0/24 maxlen: 24
154.80.85.0/24 maxlen: 24
154.80.86.0/24 maxlen: 24
154.80.87.0/24 maxlen: 24
154.80.88.0/24 maxlen: 24
154.80.89.0/24 maxlen: 24
154.80.90.0/24 maxlen: 24
154.80.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113852 (0x1bcbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 2 07:59:44 2026 GMT
Not After : Mar 2 07:59:44 2029 GMT
Subject: CN=69a54375-42f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5b:03:02:78:22:c6:9d:8c:5b:67:e1:7c:b7:
43:7a:c6:d8:c2:0d:8f:18:51:0e:98:63:14:e0:81:
6f:f5:87:6e:11:9f:65:38:e1:37:5f:ab:ed:5f:07:
be:1a:0b:e3:1a:89:d6:8e:27:9a:dc:aa:58:3a:6d:
d3:18:d2:be:31:1d:59:c3:de:db:af:3b:4b:cc:71:
47:39:bd:ac:91:b8:ae:80:98:12:b7:29:e4:27:b4:
97:4a:1a:c8:ee:d0:d5:5c:04:d5:b2:9a:70:db:e5:
29:72:ae:ad:ba:a2:09:7f:59:99:0a:6b:79:1c:90:
84:3a:71:1c:0f:03:ed:7f:06:66:7a:c0:84:63:32:
d4:c9:45:51:c7:36:72:fb:b8:df:42:67:09:c4:60:
f6:73:50:cb:82:30:96:5a:0c:8b:1e:07:2a:9b:d4:
e7:3f:44:49:29:5f:70:2b:75:0e:5f:57:8b:52:06:
ae:88:3e:1f:9f:af:55:7f:77:81:2a:88:c6:73:c1:
08:ca:42:da:ec:2a:5c:bd:6e:b0:00:39:c1:d3:57:
20:20:19:1b:80:fc:cb:86:96:2c:a9:2d:4c:c1:07:
dc:89:ab:cc:fb:a5:93:ba:7c:c5:27:86:25:e0:a1:
95:9f:b5:bd:9d:07:90:e8:b2:c0:08:d9:80:d2:28:
30:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7C:C0:91:CD:9C:37:1A:A6:6E:F4:C9:0B:6A:ED:EB:3F:93:3D:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8FD3908160D11F18CC6DE95DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.82.0-154.80.91.255
Signature Algorithm: sha256WithRSAEncryption
14:ac:a6:eb:1d:98:67:f3:12:47:4f:e3:4e:b9:19:1a:50:0b:
61:e1:28:40:5d:a0:4f:75:80:46:07:b3:52:cb:c3:ff:83:ce:
2e:f3:57:dc:57:b2:d7:12:61:0e:7c:b8:fc:ce:74:1a:16:f2:
8d:59:7a:bd:0e:ef:b4:e0:8e:e1:82:a6:bc:fa:59:5f:a4:49:
ca:41:cf:14:80:fc:d9:b4:ff:1f:47:5b:f6:59:35:ef:68:1a:
a6:d3:0e:3a:2c:c6:32:63:be:b1:e0:1b:24:1b:e1:6e:c4:32:
73:08:f2:ae:0d:42:d9:41:41:9a:e5:f3:cc:d9:4a:bf:3e:db:
53:d6:4d:6a:a1:c9:fc:f4:56:52:0b:18:0c:30:84:70:b4:18:
dc:fa:96:ad:43:80:8d:d7:a7:ae:02:9d:24:57:b3:30:97:1d:
b1:64:7d:59:ba:eb:cc:f6:0a:da:c3:d0:30:ec:bb:0e:52:f3:
e8:e5:7d:c0:5c:84:54:cc:5b:4b:d0:63:4c:33:51:0e:cd:fa:
33:7f:09:3d:96:5a:5a:09:42:6a:46:3f:8f:d6:50:c3:88:b7:
fa:a8:83:45:0b:0e:57:28:85:79:3d:a5:9a:dc:93:d6:55:8c:
aa:6b:af:4f:09:52:44:7f:62:0e:d0:44:a1:d4:43:14:ae:af:
8c:ec:26:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:19:12 2026 by rpki-client