Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/848FFB7A27B011F1AAE9ACAEDAE4EC9C.roa
File: 848FFB7A27B011F1AAE9ACAEDAE4EC9C.roa (raw, json)
Hash identifier: 7MH7sD1JXLnRisZ4L/p+bhjhWDWkFtzehuifARAkPYo=
Subject key identifier: 6F:1B:B9:A2:A3:F8:55:D5:96:54:6E:6A:4B:84:51:3D:94:93:AC:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C0BD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/848FFB7A27B011F1AAE9ACAEDAE4EC9C.roa
Signing time: Tue 24 Mar 2026 18:37:32 +0000
ROA not before: Tue 24 Mar 2026 18:37:27 +0000
ROA not after: Wed 29 Apr 2026 18:37:27 +0000
asID: 59187
IP address blocks: 154.221.32.0/22 maxlen: 24
154.221.32.0/23 maxlen: 24
154.221.32.0/24 maxlen: 24
154.221.33.0/24 maxlen: 24
154.221.34.0/23 maxlen: 24
154.221.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114877 (0x1c0bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 18:37:27 2026 GMT
Not After : Apr 29 18:37:27 2026 GMT
Subject: CN=69c2d9ec-1a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:52:5d:8a:18:5d:cc:87:a7:bd:a8:e5:ac:e5:
af:62:57:79:31:3b:f5:bd:9d:fb:38:92:01:2b:48:
57:9b:75:b3:37:cf:27:54:61:1a:05:cd:89:21:56:
72:4a:86:66:2e:0b:f0:5d:48:82:68:24:c8:8c:a5:
6a:a9:0b:0a:ca:11:30:d2:b6:65:81:95:24:a7:54:
06:68:ec:b3:8e:54:78:f4:e7:74:3e:84:27:5b:bb:
0f:3d:3d:63:19:b3:51:9e:4a:2f:b7:1e:89:05:9e:
fc:7b:77:c1:bb:e8:68:fc:41:05:ee:ca:f6:fe:0f:
7b:41:e3:79:ad:d8:0e:85:cc:5d:a6:d6:6a:e5:35:
bc:9b:8d:40:d9:e9:d7:d7:2e:01:e9:9e:b7:20:27:
4e:60:0c:42:f7:fb:ea:e7:e8:48:ef:64:17:3d:c3:
c3:ad:9e:d8:c4:50:07:34:32:1a:b0:f6:48:20:4b:
73:bb:50:1c:9d:8a:07:cf:7b:49:53:71:ae:30:23:
df:b1:7d:c3:9d:35:4f:1e:b8:80:f2:ea:f1:25:c3:
bb:f7:10:a7:f0:96:2c:24:09:09:5a:66:4d:b6:43:
91:ca:35:c9:c1:1c:19:e5:54:19:47:47:f2:e0:10:
1f:09:30:84:91:36:ff:d0:64:c3:f1:3f:33:32:1c:
8d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1B:B9:A2:A3:F8:55:D5:96:54:6E:6A:4B:84:51:3D:94:93:AC:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/848FFB7A27B011F1AAE9ACAEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.32.0/22
Signature Algorithm: sha256WithRSAEncryption
58:3a:a6:05:6e:05:2f:e4:f3:a6:de:f6:33:b9:c2:59:94:53:
67:67:52:cc:bf:84:03:ad:0a:d0:a6:37:99:de:a9:30:0d:0a:
bc:6e:cb:59:5b:01:05:92:45:a6:6a:f6:36:43:1d:ab:9e:5d:
34:d1:c6:86:5c:7b:e9:f3:a7:77:c2:9c:c4:2f:99:6f:3d:22:
d5:08:06:e5:d7:55:ce:81:a2:c4:2d:d5:ae:fc:d4:89:ad:ab:
fe:cb:79:06:fc:06:66:92:17:9b:11:58:50:44:95:bb:ab:ac:
3f:92:63:d5:9a:61:29:c6:c1:21:a8:56:8a:b1:60:bb:6f:e1:
b4:ec:bb:8e:9e:be:36:73:08:0b:fe:14:f0:30:55:54:25:26:
ed:ee:a7:1f:7c:94:f9:75:73:c8:61:6f:19:cd:0b:e7:67:89:
86:85:73:b3:1e:de:ea:d3:5a:15:ef:91:f5:26:8a:ce:21:ca:
bd:6e:58:4d:4d:f3:fe:8a:76:ff:68:07:d7:45:06:d6:d4:a8:
94:40:66:c1:62:d8:ad:4b:70:da:36:5c:bb:57:30:8a:2f:c8:
a4:5d:c7:23:24:3e:18:07:5c:80:75:73:ca:98:d8:d6:4a:f0:
c7:d6:97:b1:81:56:44:1d:08:92:cb:9e:04:4f:d0:35:8b:b9:
53:82:84:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:01:42 2026 by rpki-client