Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F00E5614161511F1AD7C9EC5DAE4EC9C.roa
File: F00E5614161511F1AD7C9EC5DAE4EC9C.roa (raw, json)
Hash identifier: JETYkSpGuqCXso+8ZMIFw1vgNSZu+Cvg/D+v6yH2OMk=
Subject key identifier: D9:1F:BC:D1:2C:1C:63:D9:BF:F2:62:52:46:FB:DF:5F:4B:BC:A0:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BCD9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F00E5614161511F1AD7C9EC5DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 08:58:10 +0000
ROA not before: Mon 02 Mar 2026 08:58:06 +0000
ROA not after: Fri 02 Mar 2029 08:58:06 +0000
asID: 17561
IP address blocks: 154.198.114.0/24 maxlen: 24
154.198.115.0/24 maxlen: 24
154.198.116.0/24 maxlen: 24
154.198.117.0/24 maxlen: 24
154.198.118.0/24 maxlen: 24
154.198.119.0/24 maxlen: 24
154.198.120.0/24 maxlen: 24
154.198.121.0/24 maxlen: 24
154.198.122.0/24 maxlen: 24
154.198.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113881 (0x1bcd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 2 08:58:06 2026 GMT
Not After : Mar 2 08:58:06 2029 GMT
Subject: CN=69a55122-eeca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:03:7a:08:1c:65:4c:2e:ba:4e:f2:eb:54:de:
f9:ac:09:cc:54:70:97:95:2e:84:5f:b4:49:50:1f:
ff:b2:9c:d5:ff:38:80:e3:14:ff:62:df:3b:19:17:
6f:eb:f0:95:da:20:46:a0:7d:94:a6:d0:2a:66:6d:
31:8b:43:96:97:7d:ec:80:8a:1c:2d:cf:3b:83:5c:
2a:2b:e7:e3:ff:cc:d2:31:bf:0b:68:42:df:b3:31:
cf:41:c4:68:1e:4e:f0:07:27:fb:66:d4:c9:a2:32:
be:bb:4b:4c:b6:89:4d:4a:20:6c:6d:76:be:81:ae:
b1:d9:4f:b7:a0:47:bf:84:30:25:c5:49:fe:1e:bc:
36:a9:1e:92:01:f7:9d:5b:35:29:a6:35:24:e7:4a:
9c:46:8d:d7:9f:d0:5c:c0:b9:01:45:05:76:a1:1a:
c2:11:56:16:7f:32:7d:41:19:b7:94:01:da:cf:c0:
8e:f8:c9:55:b6:d4:d9:76:dd:06:33:c9:73:a8:21:
e2:d6:4b:25:43:93:7b:07:78:32:75:fd:b4:5e:64:
da:fc:ad:64:86:07:b3:56:e3:67:f4:03:2b:0a:e5:
08:81:86:0f:1c:17:e6:85:58:87:38:d7:55:c5:ce:
e4:52:2b:bd:83:ad:74:c6:ce:a6:c3:6d:75:97:45:
50:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1F:BC:D1:2C:1C:63:D9:BF:F2:62:52:46:FB:DF:5F:4B:BC:A0:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F00E5614161511F1AD7C9EC5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.114.0-154.198.123.255
Signature Algorithm: sha256WithRSAEncryption
a4:7a:41:71:c0:88:2f:66:4d:85:38:6c:f5:4d:2f:f4:45:77:
76:ff:d2:93:67:d9:ae:41:f3:4e:e7:52:73:53:ac:30:9a:b0:
b4:25:30:87:44:9e:c1:55:3f:ea:16:75:cc:45:99:4a:bf:f7:
d7:df:5e:d0:69:10:52:47:4c:7b:1d:83:ad:f6:05:e7:8b:ed:
7b:42:15:41:d5:2e:5c:80:90:ee:2e:3f:02:34:21:dd:b1:c5:
3d:8b:f5:24:bf:80:64:9c:f8:69:40:12:92:de:36:8a:80:54:
51:3d:de:5f:1a:a0:7b:0a:12:85:d1:ed:8c:ee:7f:36:a9:2e:
dd:97:e5:73:a5:bd:3f:93:68:b5:73:34:9b:a2:a4:6d:bf:33:
85:e8:30:8b:52:5d:39:06:5b:7c:f5:bc:97:dd:93:8b:09:83:
ce:ba:bc:a8:d2:01:91:21:6f:65:22:15:79:cd:ae:14:c4:ce:
91:f4:24:2c:99:f4:c9:1c:8b:34:6d:88:b0:26:cf:8b:a9:c2:
26:cc:4a:99:00:41:4d:63:f0:69:0d:a7:b3:11:0b:56:7b:77:
ab:ed:a1:b7:f2:86:a7:9f:bc:f5:12:0b:47:f0:f8:a3:ee:30:
97:8e:61:5a:95:53:63:de:db:6d:da:7b:0d:3d:db:3b:c2:21:
43:b7:b2:d8
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAbzZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzAyMDg1ODA2WhcNMjkwMzAyMDg1ODA2WjAYMRYw
FAYDVQQDEw02OWE1NTEyMi1lZWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2AN6CBxlTC66TvLrVN75rAnMVHCXlS6EX7RJUB//spzV/ziA4xT/Yt87
GRdv6/CV2iBGoH2UptAqZm0xi0OWl33sgIocLc87g1wqK+fj/8zSMb8LaELfszHP
QcRoHk7wByf7ZtTJojK+u0tMtolNSiBsbXa+ga6x2U+3oEe/hDAlxUn+Hrw2qR6S
AfedWzUppjUk50qcRo3Xn9BcwLkBRQV2oRrCEVYWfzJ9QRm3lAHaz8CO+MlVttTZ
dt0GM8lzqCHi1kslQ5N7B3gydf20XmTa/K1khgezVuNn9AMrCuUIgYYPHBfmhViH
ONdVxc7kUiu9g610xs6mw211l0VQ8QIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFNkf
vNEsHGPZv/JiUkb7319LvKDbMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GMDBFNTYxNDE2MTUxMUYxQUQ3QzlFQzVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGaxnIDBAKaxngwDQYJ
KoZIhvcNAQELBQADggEBAKR6QXHAiC9mTYU4bPVNL/RFd3b/0pNn2a5B807nUnNT
rDCasLQlMIdEnsFVP+oWdcxFmUq/99ffXtBpEFJHTHsdg632BeeL7XtCFUHVLlyA
kO4uPwI0Id2xxT2L9SS/gGSc+GlAEpLeNoqAVFE93l8aoHsKEoXR7YzufzapLt2X
5XOlvT+TaLVzNJuipG2/M4XoMItSXTkGW3z1vJfdk4sJg866vKjSAZEhb2UiFXnN
rhTEzpH0JCyZ9MkcizRtiLAmz4upwibMSpkAQU1j8GkNp7MRC1Z7d6vtobfyhqef
vPUSC0fw+KPuMJeOYVqVU2Pe223aew092zvCIUO3stg=
-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:49 2026 by rpki-client