Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/806114800E6011F1867D65F1DAE4EC9C.roa
File: 806114800E6011F1867D65F1DAE4EC9C.roa (raw, json)
Hash identifier: tS6/px7tWKnVfvkyPuaNvx79K6RpKTG6vdDi7duksTA=
Subject key identifier: CF:EE:49:61:60:B7:88:C9:F8:F2:D3:00:78:D9:90:FE:CE:8D:C0:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA7C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/806114800E6011F1867D65F1DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 13:31:46 +0000
ROA not before: Fri 20 Feb 2026 13:31:39 +0000
ROA not after: Fri 27 Mar 2026 13:31:39 +0000
asID: 138915
IP address blocks: 154.93.109.0/24 maxlen: 24
154.93.110.0/24 maxlen: 24
154.93.111.0/24 maxlen: 24
154.93.114.0/24 maxlen: 24
154.93.115.0/24 maxlen: 24
154.93.116.0/22 maxlen: 24
154.93.120.0/24 maxlen: 24
154.93.121.0/24 maxlen: 24
154.93.122.0/24 maxlen: 24
154.93.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113276 (0x1ba7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 13:31:39 2026 GMT
Not After : Mar 27 13:31:39 2026 GMT
Subject: CN=69986242-7728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e6:52:13:1d:4a:a1:cc:ef:2c:51:ff:e6:79:
1e:d0:c5:ce:b0:62:5c:5d:19:0b:6c:37:1b:b5:c3:
9a:cd:ce:33:ab:96:37:06:60:52:34:b4:c0:e8:dd:
3f:fb:12:ba:a2:80:0a:d0:4f:c4:48:ef:a7:91:ad:
b2:57:df:3b:9f:e6:a8:84:7d:62:88:d8:5c:28:c4:
3e:78:60:f2:db:64:cb:5e:7a:0d:4e:ff:d5:73:65:
75:98:ff:12:62:2f:19:da:df:07:76:66:10:80:78:
c3:19:23:5a:05:3c:df:9e:98:a5:d1:af:bb:1d:eb:
d8:8c:32:58:2d:85:0d:fb:e2:42:62:bf:43:51:95:
c4:76:bf:57:e7:63:62:40:06:2d:15:37:6d:33:28:
0d:78:8a:85:ab:d4:8a:11:35:a8:73:a0:e1:ec:08:
67:7a:ff:7e:11:36:d8:50:f8:84:9a:92:f0:28:5f:
12:d7:af:02:55:67:0f:ba:02:b1:8d:53:64:20:e4:
44:50:63:86:9a:32:6f:ee:99:f6:7d:0b:18:fb:5b:
7b:23:51:76:d4:4e:2d:e9:4e:f4:bd:bd:fd:cf:7c:
cb:ac:48:a5:bd:ba:da:ac:ee:73:cb:58:1b:70:d8:
b6:fc:54:d2:e8:f8:11:77:5e:48:1e:fb:ef:9f:23:
ab:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EE:49:61:60:B7:88:C9:F8:F2:D3:00:78:D9:90:FE:CE:8D:C0:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/806114800E6011F1867D65F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.109.0-154.93.111.255
154.93.114.0-154.93.122.255
154.93.124.0/23
Signature Algorithm: sha256WithRSAEncryption
64:d6:68:4b:25:f0:fb:c2:dd:f9:64:27:1f:cf:5a:b5:33:eb:
ed:e3:2e:25:60:26:f4:9b:46:49:03:d3:00:59:5b:91:8c:cb:
4e:72:99:26:31:59:31:39:1e:e1:fc:db:ea:d8:f5:34:e0:b4:
fe:e2:16:d4:be:8e:bd:16:cc:41:85:a1:40:fe:11:d3:10:ad:
05:4f:d3:69:30:05:6c:4f:d1:87:c6:36:1d:64:fc:11:8e:c7:
0e:e9:83:df:01:38:39:91:e2:6b:ed:13:08:f2:3c:31:35:09:
2e:ba:a1:d0:55:7f:ee:ac:58:86:c3:2d:e0:7d:3f:31:ef:5d:
99:f9:a6:e5:14:af:60:f7:a2:44:fd:6a:62:15:33:a3:78:d3:
1c:7c:b0:04:98:ba:5c:17:36:46:37:eb:28:c1:5b:c7:a5:22:
70:b0:16:47:8f:55:ca:5c:9c:78:bd:e2:90:6a:eb:16:ba:5f:
8d:d5:ac:ab:bc:48:98:6e:c1:7a:a5:df:61:28:aa:32:84:dc:
a7:d1:06:22:f9:6a:2f:a7:fa:9f:2a:b1:80:c8:4a:85:96:04:
c9:15:76:be:e6:50:62:a3:f9:b3:58:6f:a0:bb:d8:2f:10:3b:
bd:c0:ed:6a:7f:1f:0c:c0:bb:1b:f2:1c:75:29:33:e3:b0:71:
3d:0a:0d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:56:24 2026 by rpki-client