Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/192009BC12E211F1B112C69FDAE4EC9C.roa
File: 192009BC12E211F1B112C69FDAE4EC9C.roa (raw, json)
Hash identifier: vC1qwOpIBn1wrXYu29LM84DARXQUhmt5omxur0n2FpU=
Subject key identifier: 5F:B7:A2:47:A2:37:84:57:1E:BA:07:C0:C8:18:A2:2F:CD:34:21:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BBE1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/192009BC12E211F1B112C69FDAE4EC9C.roa
Signing time: Thu 26 Feb 2026 07:09:32 +0000
ROA not before: Thu 26 Feb 2026 07:09:28 +0000
ROA not after: Mon 30 Mar 2026 07:09:28 +0000
asID: 32043
IP address blocks: 154.194.5.0/24 maxlen: 24
154.195.8.0/24 maxlen: 24
154.195.9.0/24 maxlen: 24
154.195.10.0/24 maxlen: 24
154.195.11.0/24 maxlen: 24
154.195.12.0/24 maxlen: 24
154.195.13.0/24 maxlen: 24
154.203.8.0/22 maxlen: 24
154.203.12.0/22 maxlen: 24
154.203.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113633 (0x1bbe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 26 07:09:28 2026 GMT
Not After : Mar 30 07:09:28 2026 GMT
Subject: CN=699ff1ac-ed5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:30:f2:54:cd:bf:d0:67:53:7b:7f:8c:ec:9e:
11:b2:f7:49:1d:0d:5c:0a:4a:40:8b:2e:6a:56:70:
06:a0:17:80:cf:14:d4:7b:bb:0f:43:4c:d7:6c:87:
8d:fb:0e:10:16:dd:e1:b7:6c:5c:39:eb:5f:6a:a5:
e4:db:bd:2e:0d:0f:63:6e:1e:f4:fb:f2:53:40:7d:
0a:02:d9:bc:e0:00:3b:60:1e:9f:2b:78:5f:27:9c:
a5:b9:2a:8e:10:45:98:45:0a:ad:67:aa:0b:d5:db:
ad:68:f5:4f:f9:3d:0f:57:6a:9e:6c:5e:76:c4:df:
ee:d2:18:2b:08:83:b3:97:f2:64:4e:55:62:62:b5:
df:fa:2e:f0:5d:7f:bc:32:21:21:43:65:86:79:fe:
dc:b2:92:6f:ff:d7:11:ab:99:9d:07:69:9b:94:28:
70:2c:a6:3d:60:b2:5a:36:f6:b4:79:31:f6:06:42:
3f:99:eb:85:ca:f0:86:91:be:7d:bb:4a:74:52:69:
58:13:da:55:5a:87:18:9f:9b:cb:2f:72:ca:1f:a3:
54:ce:2a:7f:b6:4f:48:a5:0d:76:4e:76:1f:ae:f0:
51:32:c5:6f:48:c8:59:b9:61:b5:3a:1f:e3:b3:17:
f9:5d:ab:2b:aa:92:dd:e6:c6:03:f6:99:e1:2c:b8:
33:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B7:A2:47:A2:37:84:57:1E:BA:07:C0:C8:18:A2:2F:CD:34:21:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/192009BC12E211F1B112C69FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.5.0/24
154.195.8.0-154.195.13.255
154.203.8.0/21
154.203.243.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:d5:3f:74:20:5c:b6:5d:52:cd:00:5a:aa:de:a4:22:73:b2:
03:65:2f:24:3b:41:a5:31:07:1f:20:73:09:ad:88:4e:10:3a:
81:3f:36:b4:9e:7a:33:27:9f:29:49:9f:ac:17:4b:c2:5b:57:
96:d9:a2:ab:fd:28:f3:d5:ad:df:0c:ac:8c:32:40:ed:15:b7:
dc:8c:fa:d3:e5:28:5a:39:85:28:b1:f8:a1:d3:40:c1:59:3c:
d6:e4:ec:0f:ed:87:9e:2d:8d:21:a3:d8:f0:87:10:2e:ab:62:
00:ee:ff:04:3c:15:ca:f5:1c:31:cc:a2:e9:a5:74:02:b2:87:
b8:8d:9f:3d:41:0d:da:9d:42:c3:c6:05:5b:5b:33:94:78:94:
e5:db:e0:03:66:58:46:25:d2:aa:2f:f5:d3:6a:9b:2c:6f:84:
18:13:23:c3:d3:ba:1d:fa:b6:73:64:87:3c:da:09:0b:8f:37:
a8:75:1a:b4:04:f8:7a:39:81:e7:46:39:79:51:59:3e:30:10:
51:25:19:a6:60:34:56:90:cd:a7:4b:43:43:10:26:f5:ff:29:
3f:09:66:43:29:9d:df:4e:4f:3c:12:bd:2e:ae:20:4b:6e:1d:
85:e5:ac:a0:69:42:12:22:a2:5e:e6:05:4d:34:d8:a4:16:e1:
23:31:9f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:05 2026 by rpki-client