Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16E52A80121811F19047A6CADAE4EC9C.roa
File: 16E52A80121811F19047A6CADAE4EC9C.roa (raw, json)
Hash identifier: 91nnt6/eg78VawIZqJQCWHPM36dGZbv4qXczfdWYXdw=
Subject key identifier: 17:C5:53:C6:D2:68:F2:6E:78:AC:88:BB:9F:DE:69:AE:5E:9F:A8:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB85
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16E52A80121811F19047A6CADAE4EC9C.roa
Signing time: Wed 25 Feb 2026 07:03:30 +0000
ROA not before: Wed 25 Feb 2026 07:03:26 +0000
ROA not after: Fri 27 Mar 2026 07:03:26 +0000
asID: 6079
IP address blocks: 154.202.138.0/23 maxlen: 24
154.202.140.0/22 maxlen: 24
154.207.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113541 (0x1bb85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 07:03:26 2026 GMT
Not After : Mar 27 07:03:26 2026 GMT
Subject: CN=699e9ec2-d0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:21:39:64:d8:c1:4e:eb:1e:27:27:9d:fb:
11:e1:bc:50:80:d3:71:f3:8c:a0:84:d0:c3:d0:97:
23:e2:c1:36:d5:99:1f:b7:d4:b3:ff:80:3c:d9:d8:
03:74:6a:6e:53:f1:d4:e6:b2:99:03:83:b4:9e:1f:
e3:ee:c6:19:0c:78:9d:e3:97:79:11:36:66:35:61:
c5:5e:06:b5:ef:f6:c0:a3:6a:17:cc:69:c3:6e:b9:
52:95:d9:27:23:3c:8f:47:ab:aa:6d:06:36:db:dd:
64:64:c6:20:03:8a:cb:b6:49:f1:80:ca:0a:81:13:
fa:aa:92:f7:23:76:81:b4:64:fb:ab:5f:17:3f:e5:
d5:d0:00:2d:96:87:0d:22:24:1c:05:71:1b:83:bb:
8d:8a:37:bd:a4:f9:4b:4f:aa:d1:69:28:df:3c:4c:
e6:07:14:41:46:ce:69:79:01:e4:3b:8c:c5:e3:a5:
2f:b3:fa:10:e6:89:8a:07:21:6a:d6:78:6d:f4:ff:
42:f9:f2:49:56:07:0f:dc:4c:2e:d6:3d:1d:ef:f1:
8f:ea:24:df:f5:aa:a5:81:0c:6a:7b:3f:9c:51:77:
8e:ce:47:35:e6:cc:09:75:0d:67:1e:16:9b:d5:cf:
c0:b8:82:34:ea:75:cd:b1:49:6a:ca:a2:e3:8b:0b:
30:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C5:53:C6:D2:68:F2:6E:78:AC:88:BB:9F:DE:69:AE:5E:9F:A8:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16E52A80121811F19047A6CADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.138.0-154.202.143.255
154.207.0.0/19
Signature Algorithm: sha256WithRSAEncryption
96:e4:86:da:17:8f:73:a6:30:51:90:ac:b0:4f:65:c6:3d:ab:
de:d8:18:4c:fd:3d:7d:b4:c6:32:60:84:e1:80:b2:02:e2:29:
79:2b:62:d8:c0:0b:79:1b:38:45:a9:71:5a:ee:be:5a:a6:bd:
95:86:7a:7b:3e:46:f2:62:c3:77:05:01:ff:ef:74:76:b8:fe:
33:4c:98:bd:a3:ef:30:08:2b:dc:4f:88:fe:c5:af:d2:53:04:
c1:17:14:2e:f0:05:41:5e:43:67:a9:02:30:64:c6:42:e9:af:
5b:54:99:85:44:21:6c:5f:c7:cc:3f:3b:9b:87:4e:d4:0a:ee:
20:a8:7d:13:91:93:95:6e:36:69:6e:e4:9f:b3:07:9d:97:84:
ea:0b:0b:72:40:c0:4e:a7:56:7b:82:3d:e0:ff:9e:6e:f4:9c:
9c:90:b8:8e:96:77:8a:df:54:78:81:87:30:e0:0a:b0:60:34:
99:33:07:34:17:c2:89:16:83:37:31:98:7d:70:26:e2:22:ba:
fa:be:1e:a0:cc:ce:ee:ae:6a:15:8d:f3:52:db:3b:b3:6f:ed:
fa:7b:42:8f:08:08:34:af:ed:9b:a4:55:07:05:7e:72:7a:9d:
95:9a:31:e6:a4:8c:ac:04:ef:1d:ef:91:ee:ae:5f:40:60:93:
1c:a3:1f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:22:59 2026 by rpki-client