Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E242B5A0E3211F1ADA537DDDAE4EC9C.roa
File: 6E242B5A0E3211F1ADA537DDDAE4EC9C.roa (raw, json)
Hash identifier: CXvLO+VieOV8VHaAEw1z5hoL1TYxhoxW0gFSEMLJ1J4=
Subject key identifier: D7:B1:44:D0:80:91:EB:13:84:F4:DA:19:DC:94:51:20:95:10:FE:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA40
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E242B5A0E3211F1ADA537DDDAE4EC9C.roa
Signing time: Fri 20 Feb 2026 08:01:59 +0000
ROA not before: Fri 20 Feb 2026 08:01:48 +0000
ROA not after: Thu 19 Mar 2026 08:01:48 +0000
asID: 11404
IP address blocks: 154.193.112.0/20 maxlen: 24
154.196.192.0/20 maxlen: 24
154.199.80.0/20 maxlen: 24
154.200.112.0/20 maxlen: 24
154.205.48.0/20 maxlen: 24
154.206.32.0/20 maxlen: 24
154.207.144.0/20 maxlen: 24
154.207.160.0/20 maxlen: 24
154.208.96.0/20 maxlen: 24
154.222.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113216 (0x1ba40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 08:01:48 2026 GMT
Not After : Mar 19 08:01:48 2026 GMT
Subject: CN=699814f7-c49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:53:29:6e:82:ea:29:78:75:70:98:af:6b:ec:
1f:4e:17:ee:54:f2:e1:1b:9e:4f:a3:16:3c:41:53:
cd:37:a8:54:0d:0f:ab:7d:55:84:67:cd:93:fc:46:
b0:18:55:16:a6:08:f8:46:f7:73:b8:22:bc:bb:d5:
d3:45:ba:84:3f:15:c2:e0:1a:85:11:f4:bd:e0:14:
85:08:3d:95:60:b1:71:db:78:54:cc:94:61:bb:a8:
8c:45:ab:10:64:61:e1:a7:0e:e8:62:91:37:f0:df:
c4:65:a2:59:dc:4d:a5:dd:bb:69:b4:e2:57:b1:bd:
17:8d:9e:bb:68:39:d6:59:ff:e5:15:cc:2d:56:5f:
95:10:4a:59:84:91:f9:41:67:76:e6:0d:08:79:a6:
cb:5b:5b:1c:84:2c:ff:e2:02:e8:8b:18:bd:48:10:
65:1a:c3:69:21:ea:98:92:c9:ca:2b:e3:e7:3d:1a:
1e:e2:3a:8f:a9:fe:7a:0d:8e:e2:67:69:44:44:34:
4d:16:3a:8b:e9:bd:9e:e0:15:67:24:fa:35:d2:fc:
33:ad:86:e3:ac:34:18:b1:e7:d9:64:be:92:bc:2f:
95:40:a5:b6:da:52:3f:39:f3:97:56:ef:36:5c:35:
4f:6a:94:7e:b6:9d:a0:b7:90:98:67:e3:06:27:cc:
1b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B1:44:D0:80:91:EB:13:84:F4:DA:19:DC:94:51:20:95:10:FE:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E242B5A0E3211F1ADA537DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.112.0/20
154.196.192.0/20
154.199.80.0/20
154.200.112.0/20
154.205.48.0/20
154.206.32.0/20
154.207.144.0-154.207.175.255
154.208.96.0/20
154.222.96.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:b1:61:96:a2:e2:a3:b2:65:d5:90:44:d9:ac:22:e7:4a:2f:
33:46:fd:bd:77:2b:ec:32:bf:09:5b:03:cc:ca:d0:cc:45:ea:
54:01:a4:39:2e:58:20:41:5c:bc:df:13:8f:87:28:4f:65:7b:
a1:06:4f:4e:42:40:81:58:a6:37:3f:70:25:08:6b:0f:b2:65:
cf:0d:2b:b8:1a:b3:cb:c2:5b:df:c6:8e:41:13:8c:eb:66:03:
67:03:33:75:26:fa:25:2e:2c:c7:d8:d0:57:f4:ae:16:69:f9:
d7:a3:01:ac:c8:39:88:47:87:5c:83:bf:b4:f1:08:1c:c2:6a:
39:57:96:34:ac:00:5e:0c:c9:b4:d1:f0:05:e9:f7:79:0a:cb:
fc:4b:d5:2b:7e:fe:d0:97:d2:7f:01:fc:e9:fe:41:78:d9:46:
31:99:fa:e8:72:9e:cf:60:07:14:45:eb:a8:95:27:9f:55:0e:
e4:c2:30:cc:1d:34:99:b9:51:1d:77:2c:74:2e:0b:da:b3:86:
2a:99:d8:6f:b9:7c:10:2b:1a:e1:bf:8f:00:3d:fc:02:bc:3e:
1e:ee:56:09:76:f5:85:a2:85:17:09:d1:47:0c:b6:40:00:37:
69:42:66:b4:b7:d4:2d:1f:b9:cd:a4:9c:d0:96:4f:2d:f1:d7:
ca:31:57:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:07:22 2026 by rpki-client