Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D2F079E0BD811F185D852E1DAE4EC9C.roa
File: 6D2F079E0BD811F185D852E1DAE4EC9C.roa (raw, json)
Hash identifier: 2CA92OqbApYbF7540kpP/EbSC2QEGJYJ71fuCvhq8ME=
Subject key identifier: 32:5B:80:A9:09:D7:16:41:32:A2:BB:52:F1:AC:21:D5:E2:C8:9E:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B9F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D2F079E0BD811F185D852E1DAE4EC9C.roa
Signing time: Tue 17 Feb 2026 08:12:40 +0000
ROA not before: Tue 17 Feb 2026 08:12:34 +0000
ROA not after: Tue 24 Mar 2026 08:12:34 +0000
asID: 395886
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113139 (0x1b9f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 17 08:12:34 2026 GMT
Not After : Mar 24 08:12:34 2026 GMT
Subject: CN=699422f8-bf8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ea:63:6e:ea:c9:60:02:36:39:5f:01:3f:74:
3e:54:59:23:a9:77:8a:e4:2c:e8:d7:3e:bd:62:19:
3a:99:14:03:4c:03:a0:f0:52:e7:f1:73:ac:6e:08:
db:6c:0f:0a:de:3c:c6:e9:60:96:d6:9c:48:68:ba:
b7:46:bd:c2:41:aa:d1:75:c9:df:df:54:fe:00:e5:
e8:c2:53:0c:67:a5:36:a1:6d:5c:8b:ac:04:21:2d:
63:fe:ff:2b:7b:f8:94:16:ee:c8:37:24:73:e8:6e:
c3:01:ae:41:d1:cb:73:b3:5e:a9:fe:bd:ab:64:a8:
fb:c3:bb:c5:1c:fd:9e:44:29:25:24:f8:8a:c1:b2:
31:aa:e4:33:60:fe:02:a6:8e:62:75:ce:6a:88:cc:
8b:27:64:a8:ff:9a:5e:80:89:5a:0b:9a:df:0a:ae:
10:57:8d:5e:0d:59:a0:38:74:bc:32:af:2b:c1:74:
a2:cf:23:6a:4c:45:a0:c7:e1:81:53:64:a1:00:88:
a5:68:9e:98:da:2e:72:b1:a7:8a:c3:34:b0:49:2e:
24:8f:8f:b6:34:b6:82:60:cf:4c:be:10:5e:28:5d:
d7:ec:0f:a2:15:94:96:02:b3:e3:cc:83:83:13:d0:
0f:3d:75:aa:03:34:e9:6b:28:8c:ce:4f:44:3d:9f:
ce:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5B:80:A9:09:D7:16:41:32:A2:BB:52:F1:AC:21:D5:E2:C8:9E:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D2F079E0BD811F185D852E1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
Signature Algorithm: sha256WithRSAEncryption
d0:3f:2a:ab:9a:ca:73:18:3a:d6:24:1a:54:34:e2:40:9c:ae:
99:30:b6:22:74:b7:d3:37:dd:26:e7:27:f1:de:ac:66:1b:6c:
49:7f:da:6e:e4:95:05:42:c6:99:b6:21:a2:fc:4a:1a:1c:10:
6d:c6:06:1e:e8:c1:03:b4:23:97:1e:27:fe:c8:ea:0b:c0:c0:
a9:7f:c1:c0:3f:69:1c:2d:d4:d3:af:53:b5:f0:eb:a4:f5:e7:
15:72:dc:92:b5:06:cb:63:fd:f4:3f:65:f2:2b:cd:7f:d1:14:
6e:62:a4:9c:48:9b:3e:8f:5e:df:c1:47:de:61:00:b6:7b:c7:
64:b3:3d:f4:56:46:8c:05:aa:04:85:f9:12:86:e5:64:11:91:
95:c6:92:e4:5c:57:9f:c6:42:f0:cb:12:7c:c3:31:89:ce:fb:
0d:d6:3a:e0:ff:09:48:03:e1:7f:37:66:a4:39:0f:62:0a:4c:
fb:34:9e:06:88:73:dd:ec:7f:a6:5b:6e:12:11:76:c9:28:be:
e7:67:2f:84:0b:55:1c:86:6f:29:77:4f:f3:a3:9c:f6:89:ae:
46:65:e9:12:1d:86:1f:6f:d9:0a:47:ff:3f:af:ff:e8:df:9d:
08:c0:87:2a:34:30:0d:2a:3a:d0:94:23:a2:09:2a:98:1c:a1:
dd:96:43:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:38:09 2026 by rpki-client