Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8808C904118411F1806BC4B8DAE4EC9C.roa
File: 8808C904118411F1806BC4B8DAE4EC9C.roa (raw, json)
Hash identifier: LUSiImLezvYxMv2MrtANWAI0S20hmgJ344dJaesI0JU=
Subject key identifier: 6F:65:BF:91:91:64:68:45:86:9C:4D:21:14:B5:04:ED:76:53:68:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB70
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8808C904118411F1806BC4B8DAE4EC9C.roa
Signing time: Tue 24 Feb 2026 13:27:14 +0000
ROA not before: Tue 24 Feb 2026 13:27:10 +0000
ROA not after: Mon 30 Mar 2026 13:27:10 +0000
asID: 401696
IP address blocks: 154.201.64.0/19 maxlen: 24
154.201.94.0/23 maxlen: 24
154.201.94.0/24 maxlen: 24
154.201.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113520 (0x1bb70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 13:27:10 2026 GMT
Not After : Mar 30 13:27:10 2026 GMT
Subject: CN=699da732-3629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fb:1b:20:50:1f:5e:be:17:8a:07:5a:f2:52:
6e:ad:f0:1f:d5:13:33:1d:aa:95:d7:0f:ec:2b:11:
f3:a5:47:34:38:b0:0c:42:50:14:a5:d8:bc:e1:1d:
12:29:7c:dd:3a:9e:70:be:a0:16:15:e4:ff:2f:75:
d7:3a:23:2b:bb:d9:91:b6:07:48:33:29:ff:ec:5f:
b3:0d:de:66:5a:f6:0d:9f:61:54:ce:55:85:90:0b:
2f:95:6c:f4:d3:9f:85:97:b0:24:09:a0:1a:d5:62:
81:01:6b:f4:d4:b2:b1:77:84:eb:1b:bd:de:4e:af:
02:3f:87:7d:d8:f2:df:ed:18:a2:44:ac:28:2f:20:
8f:77:e9:37:de:5d:c8:cc:64:44:8d:a9:37:bc:44:
15:92:6c:85:87:a8:14:03:f5:d0:41:0a:13:4d:4c:
60:f6:09:ab:63:cc:1d:15:16:67:9f:c1:c2:a7:e4:
b2:b2:e6:c2:f7:e0:cc:7d:d0:b8:62:6b:ae:ac:0b:
7c:41:6b:e0:f3:01:ac:8e:b7:88:32:2b:dc:28:e6:
db:bf:64:59:25:da:b6:45:2e:f7:fa:75:d0:b3:9d:
d0:4d:9f:62:b1:bd:33:77:30:75:63:ce:a6:b8:89:
7f:13:e0:31:9f:90:15:59:a5:58:f2:f0:17:73:72:
85:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:65:BF:91:91:64:68:45:86:9C:4D:21:14:B5:04:ED:76:53:68:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8808C904118411F1806BC4B8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
70:8e:ee:22:08:f0:5c:80:3f:3f:4e:33:a3:e3:be:d9:7d:d2:
98:82:6a:ba:24:be:05:48:74:93:bd:03:c1:0c:9a:8d:73:1e:
08:ca:61:4e:b4:d5:f8:eb:e8:d5:41:75:7f:50:17:2d:2c:f6:
6d:16:45:b6:b9:f1:fd:6b:e6:c8:99:6d:53:1e:47:c1:b4:22:
4d:5a:6c:8a:12:b0:c9:7a:48:a6:33:74:ad:ec:c2:64:04:07:
b2:5d:ba:9a:37:73:c1:a0:97:42:1d:9c:72:ff:88:c3:21:28:
4f:13:fa:4f:57:59:89:be:2e:56:69:e9:d7:4a:f5:54:a4:78:
c5:53:4f:3d:63:df:0b:48:f4:20:86:a1:3b:21:90:be:15:1e:
f1:97:ab:e1:4e:c8:28:72:2f:a0:a0:9a:61:f9:16:74:27:de:
73:37:a1:73:75:ba:43:d0:a6:8d:9f:e4:25:c2:c8:92:44:eb:
4d:57:4f:7d:21:0e:3e:95:51:68:7c:61:79:3f:4a:cf:59:26:
d5:1c:f6:d2:62:22:7c:59:fd:d2:3b:92:aa:b1:b7:2e:a3:2c:
fc:bb:af:3b:75:f1:a5:f7:7e:ec:92:f7:bd:c1:4c:47:f5:7f:
66:c8:ae:9a:b8:0e:5b:af:9d:82:e4:b4:f4:44:c7:29:7e:c5:
df:56:a4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:52:29 2026 by rpki-client