Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/890E9A78040E11F1A824AE83DAE4EC9C.roa
File: 890E9A78040E11F1A824AE83DAE4EC9C.roa (raw, json)
Hash identifier: xis+VB+hoZNkAYtfhpikdeGs23DUUXG9xRRKHUw6SSU=
Subject key identifier: 62:04:90:DE:56:57:06:07:84:7E:BC:54:F1:F1:DA:AD:F3:20:19:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B8DC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/890E9A78040E11F1A824AE83DAE4EC9C.roa
Signing time: Sat 07 Feb 2026 10:19:50 +0000
ROA not before: Sat 07 Feb 2026 10:19:46 +0000
ROA not after: Fri 13 Mar 2026 10:19:46 +0000
asID: 14315
IP address blocks: 154.84.132.0/23 maxlen: 24
154.89.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112860 (0x1b8dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 7 10:19:46 2026 GMT
Not After : Mar 13 10:19:46 2026 GMT
Subject: CN=698711c6-6d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ec:ee:04:d6:71:3a:01:3e:f3:f5:e2:bf:25:
52:8f:16:ce:b0:8c:d0:8f:dc:ed:e0:e7:85:82:e6:
6b:8c:3c:98:43:05:0e:40:49:12:25:cf:cc:5f:4d:
01:41:c6:4b:6e:5a:a2:61:49:0d:2f:41:a6:22:06:
d2:38:38:e8:41:9e:f2:13:76:0e:02:8f:d0:cc:07:
d4:ab:e6:7d:b5:5a:49:69:e0:cc:84:36:e5:ab:da:
ff:e1:3b:c1:cf:d7:e1:af:b2:6e:46:a9:a9:ea:4d:
6b:d5:39:8c:eb:4b:68:21:d2:70:23:8a:43:d3:8c:
64:c3:a2:fd:1c:0f:7b:17:ba:ae:f5:c7:d6:9a:e5:
9f:8f:db:98:88:8c:d0:27:74:c3:51:97:61:42:06:
43:52:de:3e:cd:5c:08:5f:61:c2:db:ff:9e:d3:27:
4a:8d:55:75:cf:ea:da:9a:31:d3:77:b3:b4:e5:73:
cd:36:bf:3e:c6:83:00:bb:a8:c6:e5:1f:6f:76:d0:
80:56:68:8c:c8:2c:57:28:5a:8a:a8:69:42:a8:89:
01:f3:63:e8:df:05:b4:c3:b5:27:96:2a:69:a0:4b:
d3:4b:ba:74:4d:81:b3:f9:01:83:31:c3:9c:81:89:
c4:40:46:7e:20:44:00:bf:8c:aa:60:ca:94:46:81:
e9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:04:90:DE:56:57:06:07:84:7E:BC:54:F1:F1:DA:AD:F3:20:19:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/890E9A78040E11F1A824AE83DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.132.0/23
154.89.1.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:2d:9d:c2:01:e5:3c:10:63:f9:25:d0:20:15:6e:28:43:ab:
13:91:3d:54:42:c7:69:8a:83:74:ca:6a:93:ad:32:77:3a:6e:
06:73:1c:5e:df:92:5a:81:bf:72:7d:f3:22:8e:ad:f5:f3:4d:
f6:b3:ee:34:59:6c:0a:c4:74:b5:09:2e:57:61:93:a0:d7:cc:
f0:a3:d4:bc:37:08:04:ff:f9:e7:3b:da:28:c1:bf:fc:01:ac:
1d:89:23:bf:dc:43:cc:ae:80:bc:54:15:68:94:21:48:e1:71:
ec:62:be:7b:16:bb:1d:e6:54:1e:d0:66:0d:f9:82:be:fe:1b:
46:28:0b:b2:53:1c:95:e3:49:0a:fb:c2:d5:3a:9e:18:6d:a3:
01:89:68:2e:1e:01:0c:5e:4a:88:f7:b3:25:c5:5d:da:71:3f:
82:e1:66:77:1f:9b:65:ff:a9:6c:a1:b5:a3:31:97:ab:39:c4:
5f:75:3a:dd:df:a2:26:59:23:52:96:44:68:58:af:e1:36:ee:
a2:b6:63:25:e6:2c:1e:27:80:54:66:69:91:54:16:52:89:03:
64:fd:0a:4e:07:70:9b:db:32:66:06:8e:68:f5:70:22:df:27:
a5:69:f0:90:be:61:3f:06:72:f4:45:22:e5:01:06:c8:01:9b:
fd:59:b2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:40:48 2026 by rpki-client