Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0616DAB40E4911F1AB3B69E3DAE4EC9C.roa
File: 0616DAB40E4911F1AB3B69E3DAE4EC9C.roa (raw, json)
Hash identifier: /xPn90DJl9Tjs71EBi4OuNKjq8y9LW5jjnyy6qdYIGA=
Subject key identifier: 9C:0A:04:B6:C6:EB:32:C6:20:27:CC:F3:43:42:94:52:9C:57:38:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA5C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0616DAB40E4911F1AB3B69E3DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 10:43:42 +0000
ROA not before: Fri 20 Feb 2026 10:43:38 +0000
ROA not after: Fri 27 Mar 2026 10:43:38 +0000
asID: 55320
IP address blocks: 154.93.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113244 (0x1ba5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 10:43:38 2026 GMT
Not After : Mar 27 10:43:38 2026 GMT
Subject: CN=69983ade-be08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:87:57:bb:af:3d:67:1c:50:60:c7:cd:8f:65:
97:9b:a2:ae:2b:d8:d6:6d:77:46:9a:77:2e:51:64:
30:7a:14:a1:50:6f:28:87:2c:28:2d:21:08:d4:2f:
b0:0d:31:52:e4:f8:74:d0:7a:0c:26:4a:8e:ec:72:
95:9a:6f:47:af:54:f3:91:7a:e4:08:d5:d1:20:fb:
c1:88:09:34:9e:db:40:b3:68:5a:36:19:00:b6:49:
58:d1:d1:0a:88:24:ee:79:56:45:44:c7:fe:6d:28:
fe:56:f9:a4:c4:35:43:de:26:81:e1:5e:b0:42:10:
f9:ea:b7:4b:7b:fb:12:b4:95:59:66:85:01:58:47:
81:91:b4:a4:7b:0d:20:59:d3:bf:79:17:b6:8a:c5:
ce:f9:6f:f8:18:53:8a:a8:61:ca:fc:2a:22:66:75:
a6:e0:b1:62:50:22:34:37:13:9a:f4:b8:c9:93:8b:
89:35:32:1f:2d:e0:9e:79:32:39:ec:5c:18:58:59:
c7:8b:96:54:c3:e1:11:b2:cc:e6:67:de:d2:51:11:
0d:62:ce:5e:a5:bb:3b:7a:bf:1e:59:71:35:bb:74:
ea:8f:af:8f:32:07:30:84:ff:79:bb:2b:6c:de:bc:
96:c7:8c:0c:05:91:3e:f8:0a:72:db:a8:c1:ad:aa:
02:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0A:04:B6:C6:EB:32:C6:20:27:CC:F3:43:42:94:52:9C:57:38:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0616DAB40E4911F1AB3B69E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.98.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:96:f7:02:66:8d:9d:f1:11:f6:ba:4e:2a:13:49:ac:e1:45:
e7:09:d2:be:3a:94:b2:96:bd:75:94:84:8e:d6:3f:24:76:11:
22:17:78:8e:f5:14:5e:cb:8e:bb:96:d6:6b:64:21:a0:e4:68:
18:e6:ef:4c:af:79:02:3d:68:71:77:26:9b:f8:14:58:61:ea:
c5:ec:0d:2c:9b:a2:02:46:17:82:d7:74:50:aa:12:9b:e3:16:
7e:f0:ad:83:43:08:7d:39:bc:da:8e:0e:06:a7:8d:c8:1e:4e:
ba:79:ac:79:83:7a:ca:b0:3c:7c:95:b6:8c:9b:97:8a:8c:34:
64:fd:0e:de:28:d9:dc:a4:52:d8:83:06:f6:62:99:d4:53:6c:
29:5c:ed:0f:40:68:2b:bc:e1:1a:02:94:8a:52:74:38:43:42:
f6:4b:47:7f:8c:5c:01:49:a0:98:1e:02:57:61:e7:13:f9:69:
b2:94:0c:80:cd:1e:ff:72:9d:76:6d:22:e7:34:73:09:da:66:
d2:a4:87:ae:50:4a:7b:e8:e5:7c:fa:05:a2:3c:68:ca:69:58:
e4:e7:39:25:e0:c5:f2:11:60:b3:6f:46:aa:54:21:0b:92:f3:
f6:bf:7b:11:07:e0:c7:30:58:83:a6:f5:00:5b:9d:fc:b0:5c:
8e:21:76:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:02 2026 by rpki-client