Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04CC69B40E4711F1BA3FE2D8DAE4EC9C.roa
File: 04CC69B40E4711F1BA3FE2D8DAE4EC9C.roa (raw, json)
Hash identifier: eV6JO2kr50Fe3j9AlhIW2V0ZeJPeRH1DCaqxJSXW/gI=
Subject key identifier: 06:D0:30:9D:02:41:2A:9C:2C:BA:BC:F8:07:14:36:72:1B:94:EB:BA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA56
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04CC69B40E4711F1BA3FE2D8DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 10:29:21 +0000
ROA not before: Fri 20 Feb 2026 10:29:17 +0000
ROA not after: Fri 27 Mar 2026 10:29:17 +0000
asID: 140666
IP address blocks: 154.93.87.0/24 maxlen: 24
154.93.88.0/22 maxlen: 24
154.93.94.0/24 maxlen: 24
154.93.100.0/23 maxlen: 24
154.94.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113238 (0x1ba56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 10:29:17 2026 GMT
Not After : Mar 27 10:29:17 2026 GMT
Subject: CN=69983781-a780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7a:30:ea:d3:1e:eb:c8:bb:51:19:1a:62:96:
a6:cb:bc:96:e4:a7:35:f3:df:08:43:be:09:c8:21:
7e:3e:59:86:9d:86:04:1b:d6:c2:3b:f2:3b:6e:75:
c7:87:98:2f:80:ff:ca:df:a3:bc:74:bb:a9:f2:60:
66:a0:db:a9:27:1a:40:08:96:1c:79:2a:fd:05:ea:
7f:b3:08:31:91:fd:a5:e3:37:c2:08:d8:01:c1:ef:
1e:1d:6f:76:08:f2:11:cd:fd:ce:12:3e:10:c2:a8:
ee:ea:10:da:45:98:45:a7:0f:b6:9e:0b:22:e9:b8:
4d:63:af:00:43:4f:49:af:c8:e6:90:e3:fb:11:b5:
dd:92:43:87:ae:a1:69:7a:b0:84:f9:b2:70:81:0d:
ee:b2:2b:6a:6c:a3:09:78:28:8f:cd:f5:f3:11:80:
c9:25:a2:ce:25:11:1a:c6:64:37:cf:0b:9e:09:5c:
92:f8:29:61:87:a3:5c:0c:a7:06:a5:9c:1f:5a:e3:
6e:27:1f:3c:51:56:65:de:9c:36:e4:10:32:a2:39:
25:e0:c7:f2:9d:65:80:84:4a:0b:1e:b2:ef:38:ff:
81:72:32:ef:9f:85:7d:06:20:e4:db:e2:e5:ae:c2:
25:d0:ea:f4:db:6a:aa:37:3f:f4:a2:7b:c0:57:24:
5f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D0:30:9D:02:41:2A:9C:2C:BA:BC:F8:07:14:36:72:1B:94:EB:BA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04CC69B40E4711F1BA3FE2D8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.87.0-154.93.91.255
154.93.94.0/24
154.93.100.0/23
154.94.68.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:3c:3b:0b:a3:ef:24:86:34:85:93:87:03:3f:2e:66:9a:84:
7f:76:2b:f8:c1:b5:68:2d:32:8b:a6:b5:61:5f:14:57:4d:89:
d0:b6:bd:bc:6c:82:d4:88:17:a4:b6:54:e7:5b:97:42:41:14:
4d:84:9f:a1:c8:3b:c3:8b:e7:32:5b:d5:b1:bd:c9:74:70:19:
a8:d6:99:d9:0a:75:de:41:71:09:39:1e:d9:9b:15:12:54:61:
3e:72:86:aa:8e:f6:30:8f:ee:b7:25:fb:47:9c:19:6c:17:89:
ad:44:13:0d:82:74:ea:ba:7e:73:36:de:cb:b5:b7:42:55:4a:
64:1b:64:fd:6e:50:07:4a:9b:89:98:7d:c3:73:6d:f2:87:bf:
58:f0:2a:7e:d2:bb:44:87:77:16:5b:76:e3:1b:e2:04:83:7e:
7f:2d:f5:8c:7f:0d:cf:ed:a1:31:c2:a5:d7:1b:32:11:1d:bb:
32:24:0a:ea:53:c6:e9:26:ea:60:27:63:21:f1:d0:60:c5:f7:
73:99:0f:07:fe:17:b0:1b:ac:e6:86:15:ac:ef:d7:c3:a5:32:
4e:c5:64:1c:59:a5:1f:c5:7c:14:34:3f:ea:fd:4b:79:9e:89:
c1:e2:d5:9a:bb:3b:ec:45:93:e1:fc:bd:f8:53:ef:bc:c0:f3:
4e:1e:cd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:41:34 2026 by rpki-client