Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6794BB14124D11F194565C8FDAE4EC9C.roa
File: 6794BB14124D11F194565C8FDAE4EC9C.roa (raw, json)
Hash identifier: cT/7pyohJ7eEzqRs13HtDnPwEVirXO3pzuyeYe7twFE=
Subject key identifier: 1E:48:36:AB:F1:53:7E:BC:EC:B6:7F:31:90:9F:3D:D4:91:F6:AD:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BBC9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6794BB14124D11F194565C8FDAE4EC9C.roa
Signing time: Wed 25 Feb 2026 13:25:09 +0000
ROA not before: Wed 25 Feb 2026 13:25:04 +0000
ROA not after: Fri 06 Mar 2026 13:25:04 +0000
asID: 401696
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113609 (0x1bbc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 13:25:04 2026 GMT
Not After : Mar 6 13:25:04 2026 GMT
Subject: CN=699ef834-4509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0f:bd:66:b2:18:7d:6f:a3:52:e9:28:79:39:
f1:0c:7d:6a:b8:23:f3:ff:29:4a:30:c9:1e:15:8e:
c5:46:fb:3a:7d:68:5a:7c:b1:c9:83:fb:d7:cd:52:
52:9c:9c:f1:aa:17:7f:e7:cb:7a:24:94:aa:f6:9a:
3d:d7:1d:e6:a7:da:8e:9e:00:9d:e5:10:54:a3:e3:
e7:56:d8:2c:c3:9a:ba:0a:1b:ef:9f:8e:bc:19:0d:
1d:bc:90:91:f8:1a:00:ff:d9:29:31:94:b2:cc:e2:
89:b8:ba:9e:03:64:55:63:b3:dc:33:6f:de:9f:c9:
9c:67:de:59:fd:8b:eb:26:8b:fd:7b:71:7a:7f:1c:
cf:51:b5:fc:17:8d:60:bf:30:4b:1f:62:51:c2:23:
48:7c:81:68:b1:d3:93:fa:c8:c8:9e:54:8f:05:ba:
c0:8d:eb:37:83:5c:ea:20:e9:1a:1e:a4:d4:82:cf:
82:a1:de:32:be:a9:a5:66:9f:14:01:63:78:83:8f:
56:f0:7e:91:a7:2c:e2:ae:d9:ba:24:64:bc:1e:52:
2d:1e:0d:47:d9:03:1c:43:9d:6c:7d:3c:50:3f:31:
ec:f2:a2:72:0e:3f:74:3d:fd:34:7a:11:39:60:b2:
a1:67:cd:01:bb:49:de:bf:06:af:58:ad:32:2a:09:
9f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:48:36:AB:F1:53:7E:BC:EC:B6:7F:31:90:9F:3D:D4:91:F6:AD:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6794BB14124D11F194565C8FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
73:b6:52:13:b5:ee:65:3f:06:29:0b:db:4e:3a:55:b5:8a:35:
27:a0:0b:7e:d9:8b:3c:6c:06:5e:54:58:87:ff:1e:2f:cd:ff:
84:9d:97:c4:32:75:4f:ae:1f:b1:e5:2f:3c:9f:81:7b:db:f2:
3c:05:cf:38:5b:b0:18:73:ef:f4:ec:a1:5a:c5:05:e2:35:d5:
cc:e7:b9:d9:d6:9d:fb:40:63:81:0a:96:e1:52:07:61:74:cf:
83:8c:8a:8b:6e:33:2f:bd:c6:eb:6d:a9:25:d6:16:ed:b9:e8:
19:98:97:31:59:d2:a5:eb:f7:91:48:57:57:62:17:4d:9e:18:
c8:b2:26:1b:7c:11:fd:18:7c:70:7a:c2:e5:c1:88:24:ce:cb:
3b:04:bb:b8:22:73:4b:b7:6a:e2:2b:1b:40:1b:40:dc:ff:14:
9b:35:36:c5:ab:6b:8e:98:a5:0a:d5:80:fb:df:a5:2b:08:7f:
6d:73:c6:a4:b5:79:0d:09:5b:7b:d5:6f:06:49:e3:8f:64:da:
e2:07:01:dc:9a:93:1f:45:a0:77:10:79:bf:bf:54:df:ad:46:
1a:dc:ad:90:0c:cd:f3:79:bd:91:ad:9b:38:02:18:63:6e:a1:
62:48:70:6d:f3:22:b1:9c:c4:c3:92:38:f4:09:78:00:34:76:
56:19:6a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:56:19 2026 by rpki-client