Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24B9A2B60BD911F193856DE5DAE4EC9C.roa
File: 24B9A2B60BD911F193856DE5DAE4EC9C.roa (raw, json)
Hash identifier: 2fdLzOpBd4Mqihx/6BRIlLuQVF0xxuveJpkd65+PFgo=
Subject key identifier: 0A:6B:18:5E:6E:8A:44:AA:E9:5E:CA:5D:DD:50:7C:0D:8C:F0:85:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B9F5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24B9A2B60BD911F193856DE5DAE4EC9C.roa
Signing time: Tue 17 Feb 2026 08:17:48 +0000
ROA not before: Tue 17 Feb 2026 08:17:43 +0000
ROA not after: Tue 24 Mar 2026 08:17:43 +0000
asID: 55933
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.148.0/23 maxlen: 24
154.89.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113141 (0x1b9f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 17 08:17:43 2026 GMT
Not After : Mar 24 08:17:43 2026 GMT
Subject: CN=6994242c-d73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:72:e2:c9:2b:5d:d1:b4:35:c5:d2:22:24:
a8:7a:e9:cc:f9:a6:3a:8a:dd:ab:5b:29:d6:3c:61:
85:1d:c6:d4:e2:ce:f4:74:54:b8:f9:d4:9c:5d:5a:
14:72:9f:bc:8f:28:db:39:5b:a1:73:a4:f5:5a:8c:
66:81:16:a8:05:d0:fc:30:47:31:67:71:c0:0d:51:
15:85:77:80:bd:f3:2e:28:1f:ea:58:c2:d8:5c:31:
d7:23:15:63:24:34:bb:9a:69:be:4d:30:a7:de:c0:
d3:91:41:af:14:51:79:1d:76:d1:95:58:69:fe:58:
fb:7d:b0:d0:3c:4a:b5:26:90:24:0f:42:ba:a0:65:
d5:63:fb:d8:2a:f9:8f:e8:de:03:2e:93:ad:c1:ad:
20:0a:2a:35:24:c0:ae:bf:8c:97:ea:27:bd:8d:96:
89:1b:a5:01:0c:1b:d2:df:cf:c9:a8:64:0f:79:2c:
8c:8a:1c:9f:15:59:11:7e:de:33:94:67:ed:24:c2:
58:76:b6:2e:b7:f7:10:74:5e:a2:93:4c:2d:0a:25:
31:e3:aa:ee:f6:bd:5f:58:bc:c3:e2:f4:e0:06:63:
88:ed:e7:73:d8:a1:b2:e8:47:bc:36:5c:b5:45:d2:
92:26:fa:a6:90:91:5b:04:50:73:e9:b6:29:a1:c0:
8a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6B:18:5E:6E:8A:44:AA:E9:5E:CA:5D:DD:50:7C:0D:8C:F0:85:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24B9A2B60BD911F193856DE5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0/20
Signature Algorithm: sha256WithRSAEncryption
00:13:ea:15:da:e9:42:36:96:f2:28:6e:da:80:21:c4:47:ea:
d8:7b:ae:34:dd:bc:ac:ac:d2:16:00:e8:a0:2e:ad:3d:ed:ec:
56:ee:f8:98:76:11:48:96:7e:af:5a:49:30:a8:30:81:c7:6d:
06:90:51:91:5e:7f:b4:6b:df:b1:cb:05:34:06:08:cc:d0:ae:
ea:d1:2a:0f:c0:7f:1a:ac:ef:e0:71:a2:95:14:60:81:f2:c1:
bd:08:b0:64:44:2c:5f:61:df:16:7c:1a:17:36:29:03:d5:93:
02:30:ed:2b:e8:10:56:44:57:9a:02:f3:b8:ad:36:e9:bb:25:
5c:f8:68:66:2a:3b:d1:b5:8f:72:89:96:67:0c:2e:12:a0:86:
54:ea:f8:76:22:5a:76:27:c5:ef:53:85:bd:13:0d:b1:5d:0a:
f5:59:7d:36:a7:fa:de:e3:30:08:f3:db:d1:2a:21:c3:62:72:
dd:86:89:8f:f9:41:c8:06:3c:94:01:26:bf:90:2d:4c:96:9e:
31:66:dc:dc:0d:f1:da:d6:23:bd:02:7c:59:45:6d:11:94:34:
68:72:08:e6:d7:24:1d:57:29:8b:3c:78:61:84:31:46:91:7d:
ae:bf:75:99:ac:b2:26:90:f4:09:8a:ae:5b:2c:65:5c:d5:d2:
e5:c5:4a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:51:30 2026 by rpki-client