Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88664D2A121C11F185D56DE7DAE4EC9C.roa
File: 88664D2A121C11F185D56DE7DAE4EC9C.roa (raw, json)
Hash identifier: hfC+wlTXJxI//bYNLqLfNaPdMNqqdXd3VbAI7g++aoE=
Subject key identifier: DE:BC:24:12:0C:CC:73:94:85:4C:9B:6D:AC:B7:7F:FA:33:65:3D:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB89
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88664D2A121C11F185D56DE7DAE4EC9C.roa
Signing time: Wed 25 Feb 2026 07:35:18 +0000
ROA not before: Wed 25 Feb 2026 07:35:14 +0000
ROA not after: Sun 29 Mar 2026 07:35:14 +0000
asID: 135983
IP address blocks: 154.200.32.0/24 maxlen: 24
154.200.33.0/24 maxlen: 24
154.200.35.0/24 maxlen: 24
154.200.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113545 (0x1bb89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 07:35:14 2026 GMT
Not After : Mar 29 07:35:14 2026 GMT
Subject: CN=699ea636-a873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a4:2b:d4:37:df:52:e4:aa:7b:1b:e5:77:a0:
bf:39:9c:39:a3:f2:c6:1d:1d:64:da:f3:ef:98:98:
76:bc:3e:4e:bd:07:57:02:e3:d5:96:4f:b8:be:c7:
ff:01:fa:92:df:a2:29:1f:f5:9e:d1:df:16:8b:96:
dc:64:bf:95:20:1d:d3:36:0a:a5:b3:80:25:af:2e:
57:1b:f2:39:12:5c:5c:69:76:9b:b3:d5:82:5e:f6:
63:fe:65:e5:34:7a:4b:de:8a:b6:e0:55:97:39:ff:
6c:d3:d7:09:93:ce:35:b2:c3:d0:5b:66:59:4e:9a:
f7:6e:34:02:c1:36:be:c1:f8:c4:dc:39:09:05:d3:
fa:14:13:2e:d2:2f:fb:43:53:48:54:cf:9d:6f:bd:
e4:28:a7:d3:ec:7f:02:d1:20:78:ef:d3:f3:6b:89:
65:90:bf:75:ea:65:bf:87:6c:56:ba:1f:61:99:9f:
85:f8:80:9e:02:95:f5:9c:7a:d6:69:19:2f:3c:95:
05:20:8f:ca:1d:d2:70:f9:ec:5b:4e:a3:b4:6e:d8:
2a:48:79:e9:59:5a:de:45:d9:4d:0d:19:7a:db:8f:
61:fc:3c:16:4a:ec:f3:a3:8b:51:65:fc:39:7f:1a:
d5:84:45:cd:a5:24:e2:f6:5f:c6:cd:4a:a4:de:36:
51:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BC:24:12:0C:CC:73:94:85:4C:9B:6D:AC:B7:7F:FA:33:65:3D:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88664D2A121C11F185D56DE7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.32.0/23
154.200.35.0-154.200.36.255
Signature Algorithm: sha256WithRSAEncryption
48:1f:54:01:74:33:03:df:db:55:4f:93:3b:50:b0:12:31:5f:
54:9e:5b:e2:40:f6:1d:bf:96:a9:80:6e:80:73:50:45:c8:16:
9c:1e:a2:da:df:5c:27:3e:e7:ad:e9:9d:9d:ba:1b:27:8b:06:
0c:92:34:77:dd:8e:be:ac:92:2a:3a:2d:b1:50:72:d9:4a:de:
83:96:0b:0a:96:50:cb:15:5b:56:12:9a:9e:5a:e9:30:3c:4e:
25:be:32:10:83:b9:a3:65:0d:50:1e:7b:cd:03:a9:dc:c5:2e:
d4:24:cc:91:0a:a8:6e:38:58:e2:1c:14:3d:5f:31:b8:fa:a9:
b7:d5:97:27:76:af:ce:99:66:31:1c:5b:cb:87:f4:28:63:c7:
ab:5a:c6:a0:a8:23:64:a5:f5:b6:6a:03:f2:b1:88:25:29:cd:
eb:e2:8a:d7:79:08:6e:fa:ad:fe:87:6e:9b:ed:82:12:fc:1a:
86:7d:44:98:e8:bb:c6:57:fa:99:01:88:20:cf:24:bb:74:58:
d4:a3:0a:b7:18:44:77:ad:e8:47:a0:5d:80:40:ac:43:ec:8a:
b8:98:b7:ed:4d:78:af:b6:5c:0e:90:66:2b:9c:ee:be:6a:98:
6b:3a:f5:52:ed:d5:1f:76:6a:b4:55:bd:68:a1:cb:6a:a5:3c:
eb:37:4a:a6
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAbuJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjI1MDczNTE0WhcNMjYwMzI5MDczNTE0WjAYMRYw
FAYDVQQDEw02OTllYTYzNi1hODczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtqQr1DffUuSqexvld6C/OZw5o/LGHR1k2vPvmJh2vD5OvQdXAuPVlk+4
vsf/AfqS36IpH/We0d8Wi5bcZL+VIB3TNgqls4Alry5XG/I5ElxcaXabs9WCXvZj
/mXlNHpL3oq24FWXOf9s09cJk841ssPQW2ZZTpr3bjQCwTa+wfjE3DkJBdP6FBMu
0i/7Q1NIVM+db73kKKfT7H8C0SB479Pza4llkL916mW/h2xWuh9hmZ+F+ICeApX1
nHrWaRkvPJUFII/KHdJw+exbTqO0btgqSHnpWVreRdlNDRl6249h/DwWSuzzo4tR
Zfw5fxrVhEXNpSTi9l/GzUqk3jZRDQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFN68
JBIMzHOUhUybbay3f/ozZT29MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84ODY2NEQyQTEyMUMxMUYxODVENTZERTdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBmsggMAwDBACayCMDBACa
yCQwDQYJKoZIhvcNAQELBQADggEBAEgfVAF0MwPf21VPkztQsBIxX1SeW+JA9h2/
lqmAboBzUEXIFpweotrfXCc+563pnZ26GyeLBgySNHfdjr6skio6LbFQctlK3oOW
CwqWUMsVW1YSmp5a6TA8TiW+MhCDuaNlDVAee80DqdzFLtQkzJEKqG44WOIcFD1f
Mbj6qbfVlyd2r86ZZjEcW8uH9Chjx6taxqCoI2Sl9bZqA/KxiCUpzeviitd5CG76
rf6HbpvtghL8GoZ9RJjou8ZX+pkBiCDPJLt0WNSjCrcYRHet6EegXYBArEPsiriY
t+1NeK+2XA6QZiuc7r5qmGs69VLt1R92arRVvWihy2qlPOs3SqY=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:56:22 2026 by rpki-client