Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEE182EE1E0D11F1949E5A84DAE4EC9C.roa
File: DEE182EE1E0D11F1949E5A84DAE4EC9C.roa (raw, json)
Hash identifier: 19jiG6EEt1h4V/9Z+hVEntQp5Phq4q9KmlqgxakiqIs=
Subject key identifier: 2C:A1:FB:ED:1F:66:63:8A:DE:1F:83:D0:50:9D:F1:2B:34:12:75:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF12
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEE182EE1E0D11F1949E5A84DAE4EC9C.roa
Signing time: Thu 12 Mar 2026 12:20:35 +0000
ROA not before: Thu 12 Mar 2026 12:20:30 +0000
ROA not after: Thu 16 Apr 2026 12:20:30 +0000
asID: 22773
IP address blocks: 154.202.30.0/24 maxlen: 24
154.202.31.0/24 maxlen: 24
154.202.69.0/24 maxlen: 24
154.202.72.0/24 maxlen: 24
154.202.73.0/24 maxlen: 24
154.202.76.0/24 maxlen: 24
154.202.77.0/24 maxlen: 24
154.202.99.0/24 maxlen: 24
154.202.109.0/24 maxlen: 24
154.202.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114450 (0x1bf12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 12 12:20:30 2026 GMT
Not After : Apr 16 12:20:30 2026 GMT
Subject: CN=69b2af93-a91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:26:40:f3:66:82:d4:1d:e1:91:69:de:05:60:
0e:02:fe:2a:76:69:42:25:4c:c5:c0:1d:66:83:6a:
3c:af:d0:ac:e2:ef:2c:88:f6:6d:bc:9e:a9:c3:99:
e2:d7:21:5a:69:ef:34:45:bd:f8:e7:e9:de:a9:b0:
f4:41:43:d4:44:e7:85:04:3b:cb:45:43:54:f5:97:
7a:93:5e:1a:5d:e9:71:c9:4e:b5:7f:5c:b1:4d:37:
c7:ce:47:46:3b:1c:24:b3:68:3c:93:1c:03:25:3c:
43:a1:db:79:47:a4:03:64:32:2b:12:43:4f:fb:6f:
d4:8b:63:fa:bc:2c:e9:cd:f7:54:fc:99:47:c6:cd:
74:8c:da:08:64:42:af:41:3c:46:97:27:a1:40:1e:
2d:35:90:8b:a1:0a:06:be:a1:b0:36:ea:4a:b1:11:
a1:74:22:fa:c8:db:8d:59:23:b4:d3:17:46:81:34:
7e:2f:ee:90:30:b6:03:ac:96:a8:1e:ca:47:37:1d:
e0:15:09:81:a2:90:67:0a:6f:3e:aa:f3:5d:e8:23:
e5:28:ec:93:e6:f5:0e:1c:da:4e:18:e8:a0:01:9d:
63:94:a1:ea:d1:34:47:3d:07:58:68:aa:70:ed:82:
bf:ea:34:b4:98:cd:b7:6a:7f:b0:18:58:9b:67:39:
ad:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A1:FB:ED:1F:66:63:8A:DE:1F:83:D0:50:9D:F1:2B:34:12:75:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEE182EE1E0D11F1949E5A84DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.30.0/23
154.202.69.0/24
154.202.72.0/23
154.202.76.0/23
154.202.99.0/24
154.202.109.0-154.202.110.255
Signature Algorithm: sha256WithRSAEncryption
89:be:f8:26:d2:3b:de:a3:c7:c6:38:02:a1:42:08:8b:c6:80:
57:21:41:50:e5:48:57:04:22:c5:6c:cf:3b:9e:55:d9:01:06:
cf:2b:57:67:ac:08:5b:da:37:44:27:47:38:45:f4:cb:33:a2:
7d:e7:2e:52:d1:25:34:eb:f4:0b:e4:83:e4:ae:ca:5d:36:20:
9c:07:09:a0:8d:42:a9:98:a2:d0:5c:53:5e:40:84:ad:e1:f0:
2f:7d:b2:a5:d4:69:e9:d8:8e:90:4a:ea:2d:9e:7b:70:61:a7:
40:03:a7:42:87:3b:7f:29:a1:03:be:b8:41:58:74:51:38:e1:
f8:20:11:55:a5:da:13:59:57:55:1a:c2:15:35:95:90:58:a5:
5b:b3:b0:ea:d8:d3:0d:09:48:a0:78:a3:73:df:2e:8d:93:30:
27:a2:d0:c6:2b:2b:5d:47:27:7d:42:6e:a7:fb:15:68:0b:06:
57:be:c4:b9:b7:bf:e3:24:76:c7:c7:c7:26:6e:7e:0e:f7:af:
3d:43:ac:d2:de:4c:35:33:45:5d:29:d9:c9:ef:a5:7b:81:de:
e5:f3:be:e5:42:b3:51:ae:1f:bd:39:91:fe:31:f4:1b:13:b9:
fd:0c:aa:df:95:51:f8:a4:9c:f4:af:06:75:40:d9:b1:86:25:
59:79:19:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:15:45 2026 by rpki-client