Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41FF363E0CAA11F1ABC7B2E9DAE4EC9C.roa
File: 41FF363E0CAA11F1ABC7B2E9DAE4EC9C.roa (raw, json)
Hash identifier: Y/oQ7O/S03VQvXnGKt3i/QJgmYN/VSuNeD9z6AuIEpw=
Subject key identifier: 6A:59:CA:9D:85:67:56:A2:43:EA:58:16:36:CD:B5:D3:04:70:F8:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA20
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41FF363E0CAA11F1ABC7B2E9DAE4EC9C.roa
Signing time: Wed 18 Feb 2026 09:14:43 +0000
ROA not before: Wed 18 Feb 2026 09:14:37 +0000
ROA not after: Tue 05 May 2026 09:14:37 +0000
asID: 141372
IP address blocks: 154.208.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113184 (0x1ba20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 18 09:14:37 2026 GMT
Not After : May 5 09:14:37 2026 GMT
Subject: CN=69958302-7b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c9:ac:8a:89:65:0e:53:d6:8d:ec:43:21:49:
06:8f:ce:52:d7:0b:3f:70:d3:eb:b5:e3:5c:ec:38:
75:34:f8:fc:68:f0:11:f4:bc:2d:da:fa:cf:38:fc:
ef:18:22:0e:d4:3b:01:8b:77:cb:64:24:52:d5:ce:
b5:72:19:fb:5c:a9:8d:7d:2c:72:6f:1b:6d:d3:88:
33:98:69:ef:ca:9f:81:ad:3e:14:2f:2c:8b:fe:a5:
30:1a:aa:4e:e7:00:b7:eb:8a:88:cb:ad:35:65:55:
d1:1a:b4:ff:52:8c:cb:74:92:3a:07:01:91:75:8a:
a4:6e:fd:20:c0:9a:39:28:a2:58:b7:5e:6c:2a:1f:
24:05:b5:bb:c4:42:b5:37:71:49:9c:ea:da:b0:e8:
50:4c:08:80:b8:48:ea:46:af:e7:88:02:11:fd:dc:
79:69:6e:a0:d4:de:d9:0e:81:e2:86:f6:3f:54:6b:
e5:b2:9f:18:6e:43:70:a8:05:b9:2f:fb:2d:85:2c:
45:da:52:af:c9:4e:61:f4:85:e1:91:4b:bb:5c:4e:
0a:c7:55:96:09:da:cd:88:b4:c9:8b:a9:46:08:83:
57:9d:a5:e3:9b:e8:f2:bd:49:92:65:d6:73:b0:7d:
b9:aa:9a:6e:95:ad:89:12:d1:68:5e:82:0d:e3:70:
fe:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:59:CA:9D:85:67:56:A2:43:EA:58:16:36:CD:B5:D3:04:70:F8:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41FF363E0CAA11F1ABC7B2E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.56.0/24
Signature Algorithm: sha256WithRSAEncryption
63:fa:38:91:52:d0:40:7e:e9:16:2c:76:26:a3:5c:bb:cc:69:
83:51:e8:14:67:79:6a:7c:74:8a:85:04:13:0d:55:c0:90:08:
71:db:19:ef:f3:c9:88:93:38:12:68:20:23:02:77:45:12:90:
86:da:ac:32:92:fe:30:33:59:43:07:72:3f:32:80:36:af:3b:
71:e1:66:b7:a8:5e:ce:a6:f8:29:91:cc:73:b5:44:71:9e:c4:
de:38:e4:c2:f1:a7:5d:6e:0b:da:47:33:2a:4d:5c:cf:bf:95:
e4:27:6a:db:07:29:08:c9:f5:80:54:d3:d3:89:3f:69:4e:df:
dc:57:44:f6:bf:41:61:22:2a:05:76:53:19:84:36:6b:85:2f:
9a:b8:dc:c2:02:27:f6:02:55:ed:a8:d4:c7:0f:45:04:41:9c:
cb:5d:0c:6f:85:99:be:bb:81:96:42:76:80:06:b6:07:20:cb:
14:6c:c7:d5:95:8f:05:cd:8c:48:b0:fc:56:3a:a8:a4:1e:32:
8e:14:e2:df:0e:3f:6e:e8:e4:18:a4:8a:0c:16:df:d1:1b:b7:
1f:9b:95:ef:af:96:25:71:89:8f:85:71:30:60:06:99:6d:49:
42:9d:c0:ef:1a:d6:55:07:e4:4c:bb:f7:7a:bc:94:03:5d:6d:
75:0d:e8:07
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbogMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjE4MDkxNDM3WhcNMjYwNTA1MDkxNDM3WjAYMRYw
FAYDVQQDEw02OTk1ODMwMi03YjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0smsiollDlPWjexDIUkGj85S1ws/cNPrteNc7Dh1NPj8aPAR9Lwt2vrP
OPzvGCIO1DsBi3fLZCRS1c61chn7XKmNfSxybxtt04gzmGnvyp+BrT4ULyyL/qUw
GqpO5wC364qIy601ZVXRGrT/UozLdJI6BwGRdYqkbv0gwJo5KKJYt15sKh8kBbW7
xEK1N3FJnOrasOhQTAiAuEjqRq/niAIR/dx5aW6g1N7ZDoHihvY/VGvlsp8YbkNw
qAW5L/sthSxF2lKvyU5h9IXhkUu7XE4Kx1WWCdrNiLTJi6lGCINXnaXjm+jyvUmS
ZdZzsH25qppula2JEtFoXoIN43D+qwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGpZ
yp2FZ1aiQ+pYFjbNtdMEcPj9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MUZGMzYzRTBDQUExMUYxQUJDN0IyRTlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtA4MA0GCSqGSIb3DQEB
CwUAA4IBAQBj+jiRUtBAfukWLHYmo1y7zGmDUegUZ3lqfHSKhQQTDVXAkAhx2xnv
88mIkzgSaCAjAndFEpCG2qwykv4wM1lDB3I/MoA2rztx4Wa3qF7OpvgpkcxztURx
nsTeOOTC8addbgvaRzMqTVzPv5XkJ2rbBykIyfWAVNPTiT9pTt/cV0T2v0FhIioF
dlMZhDZrhS+auNzCAif2AlXtqNTHD0UEQZzLXQxvhZm+u4GWQnaABrYHIMsUbMfV
lY8FzYxIsPxWOqikHjKOFOLfDj9u6OQYpIoMFt/RG7cfm5Xvr5YlcYmPhXEwYAaZ
bUlCncDvGtZVB+RMu/d6vJQDXW11DegH
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:22 2026 by rpki-client