Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/649B6AC013BF11F1898780EBDAE4EC9C.roa
File: 649B6AC013BF11F1898780EBDAE4EC9C.roa (raw, json)
Hash identifier: uUxkAKoojEGYiezIOKPP6QYPYdrezz8LMd30ifRKexo=
Subject key identifier: 66:6A:91:50:1B:DE:0A:47:AC:FA:92:66:0C:84:40:5E:8D:24:2B:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC36
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/649B6AC013BF11F1898780EBDAE4EC9C.roa
Signing time: Fri 27 Feb 2026 09:33:37 +0000
ROA not before: Fri 27 Feb 2026 09:33:33 +0000
ROA not after: Wed 01 Apr 2026 09:33:33 +0000
asID: 395793
IP address blocks: 154.200.2.0/23 maxlen: 24
154.200.4.0/23 maxlen: 24
154.200.6.0/23 maxlen: 24
154.200.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113718 (0x1bc36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 09:33:33 2026 GMT
Not After : Apr 1 09:33:33 2026 GMT
Subject: CN=69a164f1-89dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:37:d0:a3:99:fe:cc:ea:be:29:ff:a3:bf:cf:
33:d7:84:45:51:d8:08:04:b4:a4:de:a1:ac:af:e9:
26:eb:74:87:a4:ab:dd:43:64:c8:02:f5:60:4e:d5:
9b:c5:bf:d8:e3:4b:02:73:43:6b:53:37:11:58:ec:
81:77:9b:fa:09:d6:a6:7b:e0:24:36:a0:56:17:62:
ce:63:c1:3a:68:da:3d:05:13:7b:40:c0:23:b9:9e:
f9:18:b1:9e:e8:a4:f6:d9:9a:ec:15:62:e7:0f:46:
22:1a:ac:d7:b5:e6:df:70:3b:d8:18:a0:90:21:44:
d3:ac:53:b7:eb:41:88:15:40:68:49:57:87:74:4c:
77:f7:da:e6:46:8d:8d:31:29:b9:22:b4:02:25:23:
13:d6:10:9b:75:76:c3:b2:18:af:48:44:26:3a:8e:
8d:e5:57:d5:91:a4:be:0c:48:c6:15:ad:cf:c5:7c:
79:00:f9:1f:1e:4d:00:27:41:e4:fc:09:9a:dd:cf:
5d:3e:1d:21:58:e7:ca:a2:74:a9:d1:9f:6f:d4:25:
e1:a5:03:66:ea:7c:5b:8b:fc:5d:28:b8:60:c5:52:
59:ce:56:b4:da:7b:21:75:dd:dc:c6:b6:51:9d:64:
0c:56:ba:e6:30:c7:78:cb:7d:24:db:5f:b6:9b:c0:
c0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6A:91:50:1B:DE:0A:47:AC:FA:92:66:0C:84:40:5E:8D:24:2B:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/649B6AC013BF11F1898780EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.2.0-154.200.7.255
154.200.104.0/22
Signature Algorithm: sha256WithRSAEncryption
80:08:8e:dc:71:d0:23:af:d3:92:03:f0:ab:7e:39:1e:2e:ca:
60:98:6e:e7:36:23:e0:01:42:51:80:ac:4d:3c:46:f7:9f:a2:
02:a6:6a:77:2f:b4:f7:94:2e:44:74:46:da:17:9f:a0:1e:f6:
63:ac:cb:8c:82:a7:3e:a8:36:09:c5:f4:5c:46:9a:d7:d8:b2:
3e:8f:03:18:f9:29:aa:93:d1:21:29:59:27:a6:0b:73:85:6d:
3f:e3:04:eb:70:ca:fa:7b:85:44:c7:b3:ca:e0:4e:e3:8d:2f:
dc:76:4e:c3:6b:41:c9:1a:a3:ca:5b:cf:b8:0e:e1:4a:da:1e:
ad:68:4a:32:05:63:00:4a:b3:cc:71:11:ab:7a:fb:9d:59:1e:
01:56:f3:5d:cb:e8:cf:6f:c8:bb:59:d0:18:fe:91:ff:74:b8:
d6:4d:e6:0a:7b:a5:1e:f6:4e:5f:24:c1:93:92:b9:62:85:4c:
86:87:49:e8:ba:3b:f1:d9:35:bf:9c:af:c9:75:7e:eb:e0:d7:
9a:4a:ea:45:f8:fa:ae:e5:65:de:70:29:f4:ea:7f:5c:69:af:
bf:bf:25:72:1a:57:b6:ae:c0:ee:3e:9d:2b:39:9d:e8:02:03:
8d:aa:93:f9:a5:0a:7d:74:24:35:8d:db:eb:33:68:65:b7:00:
11:40:2b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:43:44 2026 by rpki-client