Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA084A9EFCE611F08856638ADAE4EC9C.roa
File: CA084A9EFCE611F08856638ADAE4EC9C.roa (raw, json)
Hash identifier: Ve1DWjimPeOmYCqkDJFbn0BXEJHhJtwWVyQqy6mkB+Q=
Subject key identifier: F0:95:FC:4B:F3:FD:4A:9B:E4:40:48:28:C1:31:03:94:04:84:95:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B740
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA084A9EFCE611F08856638ADAE4EC9C.roa
Signing time: Thu 29 Jan 2026 07:47:41 +0000
ROA not before: Thu 29 Jan 2026 07:47:35 +0000
ROA not after: Sat 07 Mar 2026 07:47:35 +0000
asID: 397423
IP address blocks: 154.202.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 25 Feb 2026 00:06:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112448 (0x1b740)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 29 07:47:35 2026 GMT
Not After : Mar 7 07:47:35 2026 GMT
Subject: CN=697b109d-4142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e5:03:2f:79:87:8f:b7:b3:d0:e7:d0:a8:b1:
54:5a:0f:a6:d6:9f:51:7c:41:e0:34:ef:21:09:43:
db:df:09:b6:93:71:44:3e:29:e4:18:10:f2:75:ba:
7a:87:4f:d9:ad:7e:2a:75:2a:93:1b:26:a1:22:28:
93:77:19:b0:07:17:98:b9:ae:35:9c:35:ff:5e:90:
d9:f6:6a:27:01:d1:dd:3c:c7:82:5a:5f:e6:20:e9:
45:92:d4:e3:28:f9:89:29:69:79:85:bd:d7:f2:01:
e0:19:e2:f6:57:81:0e:dd:4e:30:03:eb:ca:59:8d:
78:c3:aa:c6:80:38:1f:87:b4:3b:b0:00:bf:22:e5:
45:5c:bf:ca:f9:20:b4:bc:c6:bd:dc:9c:cf:6b:40:
c7:e3:61:e6:73:d8:41:8f:93:a9:73:11:2d:44:80:
1b:8f:f2:44:d6:15:6c:2a:84:23:65:a3:8a:60:30:
d3:62:e7:f1:d4:f1:6e:9a:05:16:a4:98:cf:67:c0:
f4:03:74:b7:9e:db:99:1e:e3:e7:11:6a:5e:f7:41:
f5:19:de:dd:36:34:4f:46:d0:5e:16:84:c9:04:2d:
4d:89:fa:74:7c:a6:a7:b8:6b:85:51:d5:9b:c0:be:
c2:0b:1d:0c:25:fd:f8:79:80:98:45:70:c6:b9:38:
b6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:95:FC:4B:F3:FD:4A:9B:E4:40:48:28:C1:31:03:94:04:84:95:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA084A9EFCE611F08856638ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.0.0/24
Signature Algorithm: sha256WithRSAEncryption
18:39:fc:52:a9:72:98:fe:00:39:2b:40:3e:bb:ef:ec:8e:dd:
81:47:60:25:c2:49:cb:66:1a:09:ed:44:02:af:21:ca:a6:47:
53:12:f6:14:fe:60:a0:f4:2d:70:62:7f:78:12:a3:4e:80:4c:
25:08:36:81:bf:56:0d:97:6e:e4:29:f1:d3:df:a5:d0:dd:a7:
ea:e0:65:eb:a1:b5:1b:94:f0:f8:1a:03:d9:31:46:91:db:8c:
e3:ea:0f:c7:41:2b:30:0d:5a:ae:87:9f:a4:ff:8a:c9:17:b0:
ac:60:a8:4b:ad:b1:86:ce:16:6b:0b:10:5e:84:46:0b:69:3c:
57:2f:72:a7:04:69:da:be:83:d1:7a:85:4f:f7:81:03:b2:83:
05:48:92:66:1a:3e:3c:84:2b:75:53:37:34:0d:c3:00:98:95:
2c:2d:a6:8c:9b:31:9f:27:91:69:9d:d2:96:15:b9:49:0e:4c:
31:ca:62:97:8b:9a:bc:cb:cb:3f:61:7d:6f:d9:36:80:6b:21:
2a:38:02:d3:3a:75:c6:fa:b2:53:a0:8f:2b:d5:7d:7c:86:9b:
99:51:2a:9a:19:ec:5c:63:fd:78:96:6f:3c:8f:a4:b9:e8:34:
b4:17:98:2c:46:47:18:4d:ad:7a:1e:ba:11:f2:dd:11:b6:06:
19:aa:c2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 03:58:34 2026 by rpki-client