Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79A617F8FE8411F0928F58F6DAE4EC9C.roa
File: 79A617F8FE8411F0928F58F6DAE4EC9C.roa (raw, json)
Hash identifier: vR+xPgZIvNayE+0nRvgbt5fCZb74o+P4Wad/Our27r8=
Subject key identifier: 1C:B9:77:0E:BC:2D:83:FE:7A:C1:C3:4C:52:72:EB:64:97:F9:60:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B7D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79A617F8FE8411F0928F58F6DAE4EC9C.roa
Signing time: Sat 31 Jan 2026 09:08:58 +0000
ROA not before: Sat 31 Jan 2026 09:08:53 +0000
ROA not after: Sun 08 Mar 2026 09:08:53 +0000
asID: 202656
IP address blocks: 154.222.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112594 (0x1b7d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 09:08:53 2026 GMT
Not After : Mar 8 09:08:53 2026 GMT
Subject: CN=697dc6aa-56f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:30:ab:c4:0f:ed:e9:dc:e2:cd:9d:d6:80:
13:eb:a4:8a:ae:a8:6a:84:c2:7d:0e:75:0c:9a:61:
0e:d3:13:5b:77:ed:a1:7c:4a:73:4b:21:82:41:4f:
74:df:40:5b:bf:25:d9:15:31:93:0a:8f:0e:9c:f9:
3b:ba:1c:7a:86:2c:bb:31:88:ca:f2:93:ca:4e:86:
c1:c6:34:85:c0:74:ac:d3:ba:79:8c:b2:c6:d1:ef:
69:38:45:3c:c3:17:5b:0f:20:10:ba:87:2f:2d:f7:
a2:61:e1:84:5c:8a:d9:7d:d9:b5:9e:80:6f:9b:f0:
0d:ba:71:4d:b6:71:c4:2f:2b:ef:bc:0a:c1:42:f1:
b1:3d:30:17:3e:46:ef:5d:4e:29:70:af:3b:ea:c6:
89:d8:68:54:bd:66:5c:81:f3:d6:07:af:eb:51:ed:
73:1b:64:5c:e7:89:8c:3a:c2:38:dc:99:2b:e1:fc:
f2:a5:f7:51:cf:c1:d8:ea:49:46:94:95:a3:8d:d9:
10:ac:0b:41:f3:24:b9:a0:5a:5f:03:9a:68:3c:6d:
ac:16:0e:f0:7e:c0:44:00:d4:43:6a:8e:a8:e5:ea:
05:99:48:2f:6a:da:1f:f3:43:1c:e8:d1:a1:b4:0c:
cb:d5:43:50:9a:d7:49:95:dd:fd:f8:96:c7:41:18:
c0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B9:77:0E:BC:2D:83:FE:7A:C1:C3:4C:52:72:EB:64:97:F9:60:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79A617F8FE8411F0928F58F6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.206.0/24
Signature Algorithm: sha256WithRSAEncryption
59:98:f1:3a:e6:de:51:af:66:99:d2:1c:a5:0e:07:d6:03:9b:
87:9f:65:7d:e0:bb:5b:eb:6b:ab:60:87:11:9c:d0:5c:32:13:
63:9f:b0:2f:a6:b1:a7:7f:a1:88:55:37:58:a7:58:70:5f:d1:
7e:fc:d0:aa:e1:7f:9e:20:77:a9:da:8a:86:1e:2a:28:1a:aa:
d6:48:bc:33:c9:ae:12:11:be:e2:70:be:b3:2b:f0:68:e1:82:
5c:55:5d:cf:c6:a0:db:c7:a7:ca:35:10:52:0f:48:c6:d4:5f:
38:a3:95:77:9f:9a:87:15:72:e5:e6:6f:6e:5e:86:74:6d:63:
3c:8b:04:ae:5b:1c:26:ca:be:13:37:dc:a4:d7:6a:b1:00:43:
eb:57:4e:30:e6:c1:5a:0d:de:f5:53:47:da:11:44:c3:94:d4:
c5:ee:6d:1e:b3:3d:18:a3:48:3b:f6:8a:40:85:80:6b:d1:b4:
3f:cf:dd:15:09:ce:4e:f4:3c:48:84:f0:e5:3b:61:0b:a5:7d:
9d:55:e9:5b:16:72:d8:40:11:e0:ff:55:8d:bb:bf:8e:dc:17:
72:cc:67:2a:c2:ca:2a:58:66:e7:51:ad:2f:0d:8a:ec:f0:69:
e8:d6:5a:07:07:77:20:3d:72:f8:fb:76:0c:c8:a2:0e:f5:fd:
a0:cb:8e:04
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbfSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMTMxMDkwODUzWhcNMjYwMzA4MDkwODUzWjAYMRYw
FAYDVQQDEw02OTdkYzZhYS01NmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvzkwq8QP7enc4s2d1oAT66SKrqhqhMJ9DnUMmmEO0xNbd+2hfEpzSyGC
QU9030BbvyXZFTGTCo8OnPk7uhx6hiy7MYjK8pPKTobBxjSFwHSs07p5jLLG0e9p
OEU8wxdbDyAQuocvLfeiYeGEXIrZfdm1noBvm/ANunFNtnHELyvvvArBQvGxPTAX
PkbvXU4pcK876saJ2GhUvWZcgfPWB6/rUe1zG2Rc54mMOsI43Jkr4fzypfdRz8HY
6klGlJWjjdkQrAtB8yS5oFpfA5poPG2sFg7wfsBEANRDao6o5eoFmUgvatof80Mc
6NGhtAzL1UNQmtdJld39+JbHQRjA8QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBy5
dw68LYP+esHDTFJy62SX+WBXMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83OUE2MTdGOEZFODQxMUYwOTI4RjU4RjZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt7OMA0GCSqGSIb3DQEB
CwUAA4IBAQBZmPE65t5Rr2aZ0hylDgfWA5uHn2V94Ltb62urYIcRnNBcMhNjn7Av
prGnf6GIVTdYp1hwX9F+/NCq4X+eIHep2oqGHiooGqrWSLwzya4SEb7icL6zK/Bo
4YJcVV3PxqDbx6fKNRBSD0jG1F84o5V3n5qHFXLl5m9uXoZ0bWM8iwSuWxwmyr4T
N9yk12qxAEPrV04w5sFaDd71U0faEUTDlNTF7m0esz0Yo0g79opAhYBr0bQ/z90V
Cc5O9DxIhPDlO2ELpX2dVelbFnLYQBHg/1WNu7+O3BdyzGcqwsoqWGbnUa0vDYrs
8Gno1loHB3cgPXL4+3YMyKIO9f2gy44E
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:31 2026 by rpki-client