Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D65352621E5111F195F22D88DAE4EC9C.roa
File: D65352621E5111F195F22D88DAE4EC9C.roa (raw, json)
Hash identifier: mmubaZYjySvdUjYZn3HCb73H2PEKoKjgLZl5NCauyS4=
Subject key identifier: 03:7E:43:E0:AC:0B:54:DC:BB:35:C5:4F:A3:97:5B:03:90:76:6F:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF36
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D65352621E5111F195F22D88DAE4EC9C.roa
Signing time: Thu 12 Mar 2026 20:27:06 +0000
ROA not before: Thu 12 Mar 2026 20:27:02 +0000
ROA not after: Thu 16 Apr 2026 20:27:02 +0000
asID: 22773
IP address blocks: 154.202.90.0/24 maxlen: 24
154.202.92.0/24 maxlen: 24
154.202.93.0/24 maxlen: 24
154.202.94.0/24 maxlen: 24
154.202.95.0/24 maxlen: 24
154.202.96.0/24 maxlen: 24
154.202.97.0/24 maxlen: 24
154.202.98.0/24 maxlen: 24
154.202.102.0/24 maxlen: 24
154.202.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114486 (0x1bf36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 12 20:27:02 2026 GMT
Not After : Apr 16 20:27:02 2026 GMT
Subject: CN=69b3219a-baf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0a:df:68:51:cf:76:d9:87:48:1c:8f:81:c9:
0f:51:a9:eb:04:4a:75:cd:5f:15:56:e6:12:1e:de:
bd:1c:f6:8d:50:46:2e:31:63:c7:8f:58:9e:4e:f3:
aa:48:5e:29:a6:70:d9:3d:2c:36:40:a3:ae:f3:f2:
32:80:24:ef:c2:87:23:25:c3:b8:64:c2:2a:3d:da:
b9:6e:d0:58:a0:6e:b2:86:06:44:88:78:1b:e5:b3:
a1:5f:a0:0b:5c:fc:9f:eb:e4:05:49:4c:1d:a2:c9:
c1:13:87:3f:c9:c2:c7:2b:16:32:07:24:f5:fe:8e:
61:68:29:d8:7b:06:82:c2:20:f0:09:3a:d3:da:33:
c3:85:e6:25:c2:9a:b6:c6:56:73:dc:c5:d9:81:83:
16:05:d7:25:ed:9c:61:df:8b:41:f4:dd:5d:21:00:
dd:b4:e1:30:1c:a1:8c:d0:3f:75:64:7c:c4:a5:c2:
d1:b5:80:d1:c7:01:8c:31:2c:25:0b:bf:9a:bf:e4:
c2:c3:b0:a2:e7:49:d8:4b:63:5e:87:7c:2e:a2:d3:
2f:bf:73:0d:40:7f:0d:14:4f:1c:d8:f9:24:58:ca:
6f:ae:ae:fe:27:a6:be:f1:1b:ae:27:cd:e9:16:44:
85:3a:03:b1:2a:15:0d:93:4d:10:20:09:4d:3e:eb:
98:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7E:43:E0:AC:0B:54:DC:BB:35:C5:4F:A3:97:5B:03:90:76:6F:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D65352621E5111F195F22D88DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.90.0/24
154.202.92.0-154.202.98.255
154.202.102.0/24
154.202.107.0/24
Signature Algorithm: sha256WithRSAEncryption
17:5a:8d:d7:fd:57:21:aa:0e:93:b8:26:ec:8b:aa:da:46:40:
a1:ad:99:d8:56:5a:18:43:5b:82:e6:41:c0:c0:44:07:76:7c:
33:18:2e:30:41:fd:bc:73:a9:58:7a:28:fd:0c:8d:02:bf:d7:
43:8a:27:c7:1b:db:2b:7e:a2:36:46:f5:9f:4a:a2:f4:0a:54:
cd:91:38:fd:c3:4b:d6:3c:49:d9:da:fc:d9:6d:3a:8f:12:b8:
02:1a:ce:b2:0a:03:9c:53:ec:ea:89:16:14:a5:93:93:e2:4c:
e7:ef:5a:f8:56:c6:e7:b2:9d:19:e9:3c:ab:26:b8:72:cd:1b:
3a:11:94:c9:15:03:02:51:b2:3e:c3:81:de:1b:71:13:df:7b:
55:bc:e4:0b:71:5f:c2:ac:b2:c6:32:e4:36:97:54:07:7e:00:
10:ea:fb:02:d8:19:81:b0:8c:da:5b:c4:74:f4:9f:33:69:c8:
8c:b2:68:f9:7e:13:81:e6:e0:8b:5c:cb:6a:c7:9e:85:4b:43:
c4:3a:c0:0d:65:54:ea:6c:9e:17:6a:7c:38:6c:73:28:91:c7:
0e:1d:20:f5:87:5d:89:00:81:6d:2d:3c:97:ea:18:18:f1:52:
f1:86:c2:6d:18:8f:80:2d:1e:06:be:08:61:5d:a2:7e:4c:3f:
19:d9:4e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:19:50 2026 by rpki-client