Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88C445ACFE7F11F0B92A8DD8DAE4EC9C.roa
File: 88C445ACFE7F11F0B92A8DD8DAE4EC9C.roa (raw, json)
Hash identifier: 3UhXlswIBoWYeCS2igcK9mlL0SGzyiDshVBl2YqvVnE=
Subject key identifier: D2:B0:2D:BF:53:4D:B9:D8:B4:7A:70:31:0F:ED:C5:A7:B0:9E:1D:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B7C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88C445ACFE7F11F0B92A8DD8DAE4EC9C.roa
Signing time: Sat 31 Jan 2026 08:33:36 +0000
ROA not before: Sat 31 Jan 2026 08:33:30 +0000
ROA not after: Sun 08 Mar 2026 08:33:30 +0000
asID: 202656
IP address blocks: 154.219.192.0/24 maxlen: 24
154.219.195.0/24 maxlen: 24
154.219.201.0/24 maxlen: 24
154.219.202.0/24 maxlen: 24
154.219.203.0/24 maxlen: 24
154.219.208.0/24 maxlen: 24
154.219.209.0/24 maxlen: 24
154.219.210.0/24 maxlen: 24
154.219.212.0/24 maxlen: 24
154.219.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112582 (0x1b7c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 08:33:30 2026 GMT
Not After : Mar 8 08:33:30 2026 GMT
Subject: CN=697dbe60-e060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:95:08:bd:e6:76:34:b4:4b:de:f8:84:36:9e:
e8:39:ca:6e:37:c8:ad:a8:e8:6e:40:59:d5:48:70:
3d:2a:00:e2:c0:70:51:d5:65:b1:55:fe:04:76:71:
94:2c:24:9d:df:fd:3c:e5:14:53:68:9b:5c:22:f8:
c5:08:4d:47:71:5a:58:95:a5:2c:45:3f:04:0b:01:
61:f0:8d:de:a2:20:7a:0a:50:89:56:04:c9:ed:3b:
ef:26:f0:73:ad:a0:11:63:0f:57:83:aa:90:c5:d6:
90:68:8e:e7:9a:dd:3f:a6:31:53:4c:be:34:72:5e:
a4:95:dd:8c:bb:70:39:54:33:18:7e:68:a6:bf:86:
2a:d2:09:94:2a:cf:3f:f5:48:4b:1f:9a:82:d3:78:
87:f6:a4:b2:fc:8b:10:7c:e9:d7:17:32:f7:2b:a4:
a0:f2:1d:81:6a:7c:13:ec:ab:81:8d:f2:ba:a6:d8:
63:04:ed:00:a4:fe:4c:b5:e2:37:de:e1:d4:93:4d:
c2:70:dd:8f:f2:28:4f:db:8d:b3:8c:4c:32:44:30:
c8:63:4f:82:83:e1:e0:fe:4d:69:2c:2a:3e:b5:2c:
85:ff:5e:9f:d9:88:f2:3f:e1:c1:d8:0c:51:0e:de:
8c:ad:46:9b:de:84:af:73:79:7b:4e:78:cb:ca:b5:
31:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B0:2D:BF:53:4D:B9:D8:B4:7A:70:31:0F:ED:C5:A7:B0:9E:1D:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88C445ACFE7F11F0B92A8DD8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.192.0/24
154.219.195.0/24
154.219.201.0-154.219.203.255
154.219.208.0-154.219.210.255
154.219.212.0/23
Signature Algorithm: sha256WithRSAEncryption
14:13:04:3d:08:ef:41:42:2d:12:18:e1:a8:ea:a3:d8:0c:7f:
f8:e7:36:66:3b:68:a1:6b:ab:a9:84:74:66:ff:f6:e8:37:51:
cd:f1:cb:2b:a6:6a:5e:4c:60:43:06:d2:f6:5b:01:4a:4e:9e:
87:a9:f1:b9:7a:2d:1d:fb:51:8b:0d:2e:ba:d5:6a:b7:d6:ca:
c7:b0:f3:3d:52:eb:6b:4d:10:52:dd:b2:54:50:1a:68:05:36:
5c:c4:81:c9:7e:42:7d:62:71:9f:94:65:b8:6a:69:85:9b:a6:
5c:10:25:ed:4e:6e:31:78:68:ec:b9:e3:77:8c:d6:c8:84:ea:
b4:2a:a9:4b:a8:05:82:f0:d6:32:c2:30:d8:25:dc:8e:95:e7:
00:ed:1c:18:ae:88:f6:84:2a:da:f6:f5:e7:49:ee:35:b0:f5:
05:b0:3a:b5:5a:e3:44:08:74:d3:6b:a5:95:28:83:34:d7:1e:
4a:ac:a0:c4:09:59:44:13:63:6f:25:95:6f:cd:df:e3:ad:a1:
65:4d:c5:2c:5d:d7:d6:e4:a3:41:ff:35:34:56:6e:a4:a0:94:
0d:b0:69:5c:12:1c:94:f3:c8:a4:8a:f9:b5:9d:68:da:19:1e:
6d:01:59:92:fd:1b:f0:c3:83:a3:21:a9:66:42:fb:91:b9:e7:
e5:a0:b7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:23 2026 by rpki-client