Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12B2FD8C12DD11F18BD93381DAE4EC9C.roa
File: 12B2FD8C12DD11F18BD93381DAE4EC9C.roa (raw, json)
Hash identifier: MK/b3AIQ0JbW8SAImrknqcIXlJBVQ7B0ZWx9e1GSPrg=
Subject key identifier: 83:39:36:B8:36:D4:D4:C1:BD:23:3E:B2:58:22:A6:91:2B:83:D6:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BBD6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12B2FD8C12DD11F18BD93381DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 06:33:34 +0000
ROA not before: Thu 26 Feb 2026 06:33:30 +0000
ROA not after: Wed 01 Apr 2026 06:33:30 +0000
asID: 11427
IP address blocks: 154.90.160.0/21 maxlen: 24
154.90.176.0/21 maxlen: 24
154.90.192.0/19 maxlen: 24
154.94.16.0/20 maxlen: 24
154.94.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113622 (0x1bbd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 26 06:33:30 2026 GMT
Not After : Apr 1 06:33:30 2026 GMT
Subject: CN=699fe93d-6663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:34:73:17:b0:cc:06:ca:5d:f0:37:f9:ac:7c:
5d:cb:d6:d3:e1:46:65:dc:27:57:21:2c:06:22:d8:
5d:58:2c:49:ef:1d:37:9f:f6:39:5f:96:72:6e:64:
04:56:fc:e4:1d:bf:eb:f1:a0:7d:30:7f:a1:f4:a8:
a2:a5:79:3c:7c:bd:4a:08:c2:72:0f:97:0a:5d:b6:
80:02:f0:b2:e9:0f:61:97:d2:76:7b:44:84:cd:7b:
46:48:ec:da:ab:7c:17:a7:6a:40:e2:6a:8d:33:7c:
99:df:27:1c:82:df:86:f4:8b:a7:83:ac:e2:96:43:
43:6b:3a:a7:e3:69:8b:17:20:8c:5d:1b:ac:ee:de:
80:6f:a9:62:94:55:ce:57:59:37:d7:43:66:08:30:
61:26:d0:1f:76:73:f3:be:c1:26:08:1f:31:9b:dd:
b7:4b:eb:41:41:85:03:89:ae:5c:b8:75:28:c5:45:
d2:4b:5b:fd:d2:ef:d8:3d:66:d3:43:43:1e:f4:ed:
3c:f1:89:cd:72:10:50:cb:1d:3b:e3:14:b7:52:71:
f5:a3:91:b2:d0:38:5a:e3:76:68:0c:a1:92:bb:b3:
70:72:14:cc:ed:bc:5e:66:f1:a8:f0:7e:86:12:8d:
ad:64:00:64:c3:83:0c:92:9e:e7:49:5f:16:f7:8d:
90:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:39:36:B8:36:D4:D4:C1:BD:23:3E:B2:58:22:A6:91:2B:83:D6:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12B2FD8C12DD11F18BD93381DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.160.0/21
154.90.176.0/21
154.90.192.0/19
154.94.16.0/20
154.94.240.0/20
Signature Algorithm: sha256WithRSAEncryption
b8:17:ca:4d:fc:16:bb:68:79:6e:41:3c:66:44:c7:e9:30:9d:
d4:f6:dc:2d:20:ae:24:ed:12:57:bd:b8:24:c6:17:84:b0:2a:
f1:f2:0b:15:ab:fa:59:f8:7c:20:39:5e:66:28:13:57:48:8b:
cb:a3:0e:fb:88:cb:95:7c:92:de:e2:e2:3d:e1:9a:84:cf:2d:
71:74:68:1a:07:50:4f:31:88:29:cb:26:e0:27:28:7d:3a:ec:
89:14:fc:00:07:c5:2f:c4:2b:1c:62:12:bb:37:0f:1a:56:d7:
05:b6:6c:28:7f:79:44:7f:78:f0:1f:fe:59:48:5c:3b:33:9a:
c6:17:5c:b6:4f:d7:a0:5c:a9:8a:e1:31:f3:2c:ca:af:6a:45:
25:09:ce:99:58:c7:c8:ca:2d:30:9a:33:31:16:c6:95:07:a0:
67:15:ad:7c:5d:f0:46:e3:92:39:15:75:a1:b1:32:a8:9b:fe:
e9:89:84:21:ef:cd:af:b6:02:85:f5:e5:35:8c:1e:f1:f7:76:
f6:3c:78:e1:ea:47:1d:1e:56:02:67:80:71:db:38:51:42:fb:
cb:bb:08:4c:fc:cf:67:b8:f3:77:30:09:f6:5e:02:58:0f:63:
b3:15:fd:99:03:65:62:2f:bb:96:97:1b:bb:76:13:80:b6:c8:
e9:d5:74:b3
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgIDAbvWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjI2MDYzMzMwWhcNMjYwNDAxMDYzMzMwWjAYMRYw
FAYDVQQDEw02OTlmZTkzZC02NjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAszRzF7DMBspd8Df5rHxdy9bT4UZl3CdXISwGIthdWCxJ7x03n/Y5X5Zy
bmQEVvzkHb/r8aB9MH+h9KiipXk8fL1KCMJyD5cKXbaAAvCy6Q9hl9J2e0SEzXtG
SOzaq3wXp2pA4mqNM3yZ3yccgt+G9Iung6zilkNDazqn42mLFyCMXRus7t6Ab6li
lFXOV1k310NmCDBhJtAfdnPzvsEmCB8xm923S+tBQYUDia5cuHUoxUXSS1v90u/Y
PWbTQ0Me9O088YnNchBQyx074xS3UnH1o5Gy0Dha43ZoDKGSu7NwchTM7bxeZvGo
8H6GEo2tZABkw4MMkp7nSV8W942QZQIDAQABo4ICvTCCArkwHQYDVR0OBBYEFIM5
Nrg21NTBvSM+slgippErg9b2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMkIyRkQ4QzEyREQxMUYxOEJEOTMzODFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDmlqgAwQDmlqwAwQFmlrA
AwQEml4QAwQEml7wMA0GCSqGSIb3DQEBCwUAA4IBAQC4F8pN/Ba7aHluQTxmRMfp
MJ3U9twtIK4k7RJXvbgkxheEsCrx8gsVq/pZ+HwgOV5mKBNXSIvLow77iMuVfJLe
4uI94ZqEzy1xdGgaB1BPMYgpyybgJyh9OuyJFPwAB8UvxCscYhK7Nw8aVtcFtmwo
f3lEf3jwH/5ZSFw7M5rGF1y2T9egXKmK4THzLMqvakUlCc6ZWMfIyi0wmjMxFsaV
B6BnFa18XfBG45I5FXWhsTKom/7piYQh782vtgKF9eU1jB7x93b2PHjh6kcdHlYC
Z4Bx2zhRQvvLuwhM/M9nuPN3MAn2XgJYD2OzFf2ZA2ViL7uWlxu7dhOAtsjp1XSz
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:25:48 2026 by rpki-client