Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0889ACB6108511F19C17F99FDAE4EC9C.roa
File: 0889ACB6108511F19C17F99FDAE4EC9C.roa (raw, json)
Hash identifier: A9jJsGjG2t5pz58Bua9YmfBS/fRr3oQxB/sASggg97Q=
Subject key identifier: 30:3B:27:EA:7C:61:C6:E6:58:82:1A:E4:C7:43:9B:58:DC:7F:C0:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB0D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0889ACB6108511F19C17F99FDAE4EC9C.roa
Signing time: Mon 23 Feb 2026 06:58:18 +0000
ROA not before: Mon 23 Feb 2026 06:58:14 +0000
ROA not after: Fri 23 Feb 2029 06:58:14 +0000
asID: 17561
IP address blocks: 154.201.116.0/24 maxlen: 24
154.201.117.0/24 maxlen: 24
154.201.118.0/24 maxlen: 24
154.201.119.0/24 maxlen: 24
154.201.120.0/24 maxlen: 24
154.201.121.0/24 maxlen: 24
154.201.122.0/24 maxlen: 24
154.201.123.0/24 maxlen: 24
154.201.124.0/24 maxlen: 24
154.201.125.0/24 maxlen: 24
154.205.30.0/24 maxlen: 24
154.205.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113421 (0x1bb0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 23 06:58:14 2026 GMT
Not After : Feb 23 06:58:14 2029 GMT
Subject: CN=699bfa8a-49a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5c:3b:82:3d:86:cb:f5:84:1f:99:cf:4b:4e:
08:72:bf:57:d1:3c:4f:93:9e:10:78:c0:e5:f4:35:
9f:69:92:3a:4f:6c:0f:bf:8f:16:2a:44:43:1f:07:
8f:b7:b3:c4:b2:51:67:d6:38:40:49:44:fd:0a:39:
f6:d7:7f:54:f9:97:2c:c5:59:e9:2e:72:b3:ed:db:
02:60:22:27:65:41:2e:c1:b3:04:c8:9e:cc:76:4e:
25:ac:55:4f:e1:0e:ce:ff:2b:de:d9:8a:5d:6e:48:
95:82:97:49:9c:49:9d:e2:6e:b3:f2:15:8c:6d:4a:
06:d2:a1:59:d9:c0:a2:c6:8d:73:19:a0:32:34:bb:
ad:f0:83:02:b8:0f:00:27:81:c0:2c:47:5a:97:47:
c1:a4:d7:5d:28:f9:3a:bb:4e:e9:4c:54:fc:c4:8f:
f4:b9:f6:86:66:ad:28:f7:1c:b8:9b:13:e1:2a:63:
0c:c4:c3:46:45:a8:41:f7:0c:8f:14:46:30:90:1f:
e7:0b:b2:ae:e1:49:c5:7d:9c:b7:ab:61:97:4e:b9:
5b:22:21:73:5d:8e:be:9c:ac:3b:9a:ef:dd:e9:05:
67:01:29:af:8b:28:7d:18:71:88:97:d3:8c:73:70:
3a:a3:28:f0:51:8d:93:eb:b2:dc:03:8d:7e:93:42:
3c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3B:27:EA:7C:61:C6:E6:58:82:1A:E4:C7:43:9B:58:DC:7F:C0:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0889ACB6108511F19C17F99FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.116.0-154.201.125.255
154.205.30.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:8f:d0:88:b5:13:7b:f5:59:48:d5:bc:3a:0a:12:5d:34:eb:
8f:13:13:47:b9:14:86:ec:81:ff:52:88:ea:94:90:8d:46:f7:
0a:81:d9:42:d2:19:ca:84:f9:72:1f:36:af:37:45:5e:41:f8:
8b:6a:78:5f:53:22:86:3f:fb:ca:12:2f:9c:ab:00:96:63:37:
3b:9d:4a:f9:38:19:98:13:bf:2d:0e:e5:3f:d2:7c:31:e9:6c:
cb:c7:46:42:0c:ce:ff:fc:a2:4a:da:3b:c1:f8:45:4f:44:4c:
d5:c9:65:a2:a5:72:ff:1c:99:25:64:3d:33:42:80:24:00:ca:
f1:bc:19:83:78:9a:0c:cc:36:9c:7f:6c:89:80:3f:74:d3:28:
91:06:db:f2:ec:de:5c:6d:be:25:54:b8:94:4e:fc:82:f1:c6:
79:f7:52:f4:c6:e9:c8:81:b5:cf:64:9c:96:22:85:1b:58:9d:
02:67:1d:07:88:ee:dd:cc:84:e4:db:83:c5:66:fc:d6:88:12:
d6:e1:a1:38:26:db:ad:4a:a8:03:1e:2e:e1:00:02:b6:6b:9d:
d6:4d:c8:15:e8:de:ac:38:fe:88:60:0b:d2:54:75:c0:37:e9:
ac:65:4e:45:b5:c3:f6:e1:71:ef:8a:f5:e7:db:b7:58:0d:82:
65:01:0c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:13 2026 by rpki-client