Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80FC194CFC3D11F09CCCD678DAE4EC9C.roa
File: 80FC194CFC3D11F09CCCD678DAE4EC9C.roa (raw, json)
Hash identifier: /7gKqybr0XedezyV0OuBzKi9xJEZ+ko9oMFiOpnLfcI=
Subject key identifier: 9C:04:73:C0:F1:8D:22:27:6C:51:7A:84:1B:87:DC:8C:A2:2B:AE:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B71F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80FC194CFC3D11F09CCCD678DAE4EC9C.roa
Signing time: Wed 28 Jan 2026 11:35:54 +0000
ROA not before: Wed 28 Jan 2026 11:35:47 +0000
ROA not after: Tue 10 Mar 2026 11:35:47 +0000
asID: 272092
IP address blocks: 154.83.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112415 (0x1b71f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 11:35:47 2026 GMT
Not After : Mar 10 11:35:47 2026 GMT
Subject: CN=6979f49a-c26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:94:63:9d:57:84:d6:09:d5:f1:65:6b:a7:59:
78:4d:cd:57:c4:f5:90:1b:18:d9:62:17:35:2e:32:
81:08:76:e3:d9:6e:fa:c5:04:13:da:a4:49:f9:31:
80:79:5e:d6:9d:cf:92:27:a4:1e:49:3e:c8:55:c0:
eb:dc:59:e1:3e:fb:5f:50:4f:36:f6:5c:a2:1f:5c:
6b:fa:86:31:6f:4a:18:ae:06:0a:46:5a:e4:a9:ff:
5d:d4:4b:81:66:62:b8:f1:36:e3:68:8b:f4:68:50:
87:5a:fc:dd:32:85:39:5a:4d:ef:20:8b:4f:66:9f:
aa:de:7e:13:3a:4a:dd:4c:b7:c2:8e:1a:f8:71:09:
dd:8d:38:ee:d5:cc:80:23:93:41:b1:85:10:b1:2c:
37:cc:d2:c5:a3:4e:bd:71:7e:6e:6f:78:e7:94:e4:
44:d2:5c:84:5c:fd:e0:b4:d5:48:d3:58:36:0c:10:
43:e5:d5:b0:33:02:97:04:44:d6:d9:45:e8:0c:8c:
f7:69:a8:b3:ac:03:7b:67:e0:6f:b4:96:b4:43:ce:
18:d8:cc:4a:95:78:20:4d:22:49:a3:44:f9:5b:f3:
3a:19:af:78:46:a2:6b:f3:98:d3:7d:78:37:f7:63:
40:66:68:d6:2d:96:4f:d3:15:16:d5:c0:51:2e:d8:
e9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:04:73:C0:F1:8D:22:27:6C:51:7A:84:1B:87:DC:8C:A2:2B:AE:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80FC194CFC3D11F09CCCD678DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.29.0/24
Signature Algorithm: sha256WithRSAEncryption
09:12:48:81:91:12:85:cf:ab:22:4a:e8:be:36:02:27:a2:69:
cd:42:d9:13:da:02:3e:cc:d3:bf:3e:3e:a6:fa:8a:e5:3e:fa:
cd:41:2d:5d:1a:3f:55:18:87:f4:aa:68:73:7b:03:db:3e:7e:
74:e6:8c:af:2d:ed:4f:11:e2:9d:a0:16:00:56:b2:1b:8b:5b:
30:dc:2a:49:68:ff:0a:c4:30:02:c9:77:e1:48:ea:d6:8e:f5:
d8:ce:dd:28:9f:aa:d0:3a:26:75:cc:df:f2:7c:9e:0f:19:9e:
56:a0:b7:b9:4b:aa:a3:d2:ac:39:4f:7f:1d:6d:28:5a:9f:74:
5c:11:a5:67:bf:24:f5:2d:51:e1:19:9c:58:9a:e2:55:a7:33:
b4:5e:0b:c0:b5:ec:9c:f9:f4:4c:15:5a:82:26:93:00:a5:e9:
9b:4c:62:34:cb:10:2e:15:87:16:48:ec:bf:1f:ac:87:5f:eb:
9f:1a:7f:8f:31:a1:89:c6:d5:13:cc:84:e9:a7:c8:ad:b7:3c:
a8:08:4a:e4:4c:fc:b7:d1:13:1f:06:3c:2b:fe:a1:e5:d8:15:
fc:40:1a:fb:41:79:6a:65:c7:92:75:7b:90:8c:26:a0:15:3c:
0f:d9:95:2f:02:95:32:aa:72:ba:f3:1e:92:10:18:d8:c6:8a:
c6:47:b3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:04:35 2026 by rpki-client