Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CDA584007E011F19F656F7DDAE4EC9C.roa
File: 0CDA584007E011F19F656F7DDAE4EC9C.roa (raw, json)
Hash identifier: a34SpvXve4BSxkhHqe2ouVLgERuGQ29CheoxZjLfmZ4=
Subject key identifier: 19:82:11:DC:E7:4A:BE:6E:4F:C4:AE:D0:CD:C2:AB:BF:85:17:C0:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B92D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CDA584007E011F19F656F7DDAE4EC9C.roa
Signing time: Thu 12 Feb 2026 06:57:10 +0000
ROA not before: Thu 12 Feb 2026 06:57:05 +0000
ROA not after: Fri 14 Aug 2026 06:57:05 +0000
asID: 63199
IP address blocks: 154.89.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112941 (0x1b92d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 12 06:57:05 2026 GMT
Not After : Aug 14 06:57:05 2026 GMT
Subject: CN=698d79c6-d5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:47:65:c7:e0:82:d2:84:ac:f9:2a:a2:e8:43:
93:bc:f2:82:04:44:7f:45:18:01:ee:df:e2:2f:5a:
6a:74:8b:7e:65:b9:e7:35:8d:15:93:ae:2e:99:7b:
14:56:31:81:2e:db:f6:f0:9a:d2:e3:45:dc:9b:84:
48:e4:19:70:f1:11:0b:d4:43:7f:60:90:b9:bf:8f:
05:48:1a:1b:c3:d1:40:6c:a4:be:2d:9c:6f:f5:94:
0c:1e:38:77:c8:db:b2:1e:94:2a:30:41:37:90:b2:
95:08:10:7d:23:c1:fe:b1:34:38:ea:a8:e2:9f:93:
eb:17:64:87:31:75:97:16:80:44:0d:4c:74:da:a0:
e8:78:f2:62:49:3c:9b:50:8f:c5:7f:54:48:37:e2:
06:8a:11:5b:5d:9c:9b:c8:87:92:5e:0e:d6:f8:c1:
d4:6d:b1:33:25:0a:1c:6e:f5:fb:b7:9f:ec:ae:44:
24:38:ea:2f:fb:75:57:85:e9:33:93:09:2f:b4:93:
22:07:f9:31:f4:e4:07:06:74:e2:09:64:b8:1d:5e:
dd:95:43:50:d7:0e:08:32:bd:db:1e:18:4f:a5:fc:
09:2d:4f:6b:31:73:27:9b:ac:8a:26:32:da:5f:b9:
9e:14:b0:b7:53:e5:54:c6:78:87:37:85:ce:a1:36:
a0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:82:11:DC:E7:4A:BE:6E:4F:C4:AE:D0:CD:C2:AB:BF:85:17:C0:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CDA584007E011F19F656F7DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.140.0/22
Signature Algorithm: sha256WithRSAEncryption
54:74:cc:3e:2b:17:41:aa:c7:70:f8:65:4a:f7:e9:f9:e7:e9:
2b:62:78:2b:07:a9:3f:76:9e:61:a3:4f:68:f8:98:10:f7:92:
8e:7d:fa:99:dc:26:74:47:58:c0:3c:85:f8:36:aa:84:76:23:
6c:67:6f:8d:ad:d1:34:49:3e:e5:f2:2f:d1:6e:51:39:63:6c:
94:55:e4:cd:a2:93:82:60:f4:4c:78:7e:26:9c:f6:79:c7:63:
6d:4b:b4:51:cc:03:4a:a8:af:8e:a3:98:5d:0a:1d:8e:df:ba:
68:47:cb:c3:7d:5e:32:e8:18:45:46:ca:51:2e:33:ca:76:7e:
1b:e1:7b:3d:59:0d:ff:96:ef:f1:1c:5e:bb:d0:04:31:13:84:
e1:e8:ab:8d:c6:41:d8:e4:dc:e9:73:da:6b:3b:96:55:a2:2a:
01:10:cf:f5:70:38:6b:e1:f3:36:2c:ad:ea:36:f6:3d:1b:9e:
27:ab:b6:8b:0d:81:8a:72:7d:00:d1:6e:28:f8:80:52:f5:58:
73:45:78:e6:b9:da:19:60:0b:ca:8e:89:3c:c5:a6:f0:e5:6c:
14:d7:b7:7e:05:8a:e8:fa:2c:c4:27:9a:1f:8e:5d:5c:29:bc:
d9:7c:a1:e1:8c:bc:f9:4f:1f:ae:e1:92:b5:c8:86:aa:43:02:
c3:75:26:11
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbktMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjEyMDY1NzA1WhcNMjYwODE0MDY1NzA1WjAYMRYw
FAYDVQQDEw02OThkNzljNi1kNWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4Udlx+CC0oSs+Sqi6EOTvPKCBER/RRgB7t/iL1pqdIt+ZbnnNY0Vk64u
mXsUVjGBLtv28JrS40Xcm4RI5Blw8REL1EN/YJC5v48FSBobw9FAbKS+LZxv9ZQM
Hjh3yNuyHpQqMEE3kLKVCBB9I8H+sTQ46qjin5PrF2SHMXWXFoBEDUx02qDoePJi
STybUI/Ff1RIN+IGihFbXZybyIeSXg7W+MHUbbEzJQocbvX7t5/srkQkOOov+3VX
hekzkwkvtJMiB/kx9OQHBnTiCWS4HV7dlUNQ1w4IMr3bHhhPpfwJLU9rMXMnm6yK
JjLaX7meFLC3U+VUxniHN4XOoTagXwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBmC
EdznSr5uT8Su0M3Cq7+FF8DBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wQ0RBNTg0MDA3RTAxMUYxOUY2NTZGN0REQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlmMMA0GCSqGSIb3DQEB
CwUAA4IBAQBUdMw+KxdBqsdw+GVK9+n55+krYngrB6k/dp5ho09o+JgQ95KOffqZ
3CZ0R1jAPIX4NqqEdiNsZ2+NrdE0ST7l8i/RblE5Y2yUVeTNopOCYPRMeH4mnPZ5
x2NtS7RRzANKqK+Oo5hdCh2O37poR8vDfV4y6BhFRspRLjPKdn4b4Xs9WQ3/lu/x
HF670AQxE4Th6KuNxkHY5Nzpc9prO5ZVoioBEM/1cDhr4fM2LK3qNvY9G54nq7aL
DYGKcn0A0W4o+IBS9VhzRXjmudoZYAvKjok8xabw5WwU17d+BYro+izEJ5ofjl1c
KbzZfKHhjLz5Tx+u4ZK1yIaqQwLDdSYR
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:17 2026 by rpki-client