Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/898812EE0E6911F184D3AFA8DAE4EC9C.roa
File: 898812EE0E6911F184D3AFA8DAE4EC9C.roa (raw, json)
Hash identifier: QM+70zHqea28wudggoH3CPWeXdGaVD9mxD+39qsMN64=
Subject key identifier: 2C:15:2D:AF:2F:A0:27:4F:FF:A6:B1:09:7A:9A:4C:A1:FC:44:DB:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA8C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/898812EE0E6911F184D3AFA8DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 14:36:27 +0000
ROA not before: Fri 20 Feb 2026 14:36:19 +0000
ROA not after: Thu 04 Jun 2026 14:36:19 +0000
asID: 150008
IP address blocks: 154.206.31.0/24 maxlen: 24
154.209.252.0/24 maxlen: 24
154.209.253.0/24 maxlen: 24
154.209.254.0/24 maxlen: 24
154.209.255.0/24 maxlen: 24
154.210.213.0/24 maxlen: 24
154.210.224.0/24 maxlen: 24
154.210.225.0/24 maxlen: 24
154.210.226.0/24 maxlen: 24
154.210.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113292 (0x1ba8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 14:36:19 2026 GMT
Not After : Jun 4 14:36:19 2026 GMT
Subject: CN=6998716b-e3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c9:8d:1a:12:ba:3c:bf:b3:eb:28:ba:c5:cf:
8b:83:d7:e0:b2:26:a0:64:07:14:44:68:d4:6f:ed:
ad:37:a9:ca:8f:3d:84:25:71:89:5b:e4:ef:47:da:
e4:28:44:4c:e9:5f:3c:8d:9b:ef:3c:9e:65:76:bc:
cd:a5:58:9e:15:b0:ae:63:1e:4f:56:9a:88:06:50:
0b:67:22:5f:b5:eb:f6:6e:2d:93:58:37:4b:3c:5b:
34:e5:55:88:55:cd:61:aa:6b:3a:18:30:33:b0:bf:
d6:4e:d9:8d:bc:4a:f3:3d:e0:70:67:06:43:ee:0f:
0a:98:8b:6d:b6:b0:cb:ad:43:74:73:5f:da:23:47:
d7:3c:33:19:2c:df:4b:67:b7:db:01:79:c8:44:99:
a2:8c:18:1b:00:b5:1e:11:26:90:6b:7d:1f:cc:ca:
45:e5:79:9b:fb:71:bd:b2:b3:ce:e6:3b:a0:bb:d1:
fb:b1:e1:f6:37:3c:9d:74:21:15:ad:3a:ac:67:be:
9e:1f:6d:19:c0:28:7f:18:2c:1a:91:d0:b5:6e:2a:
0c:fb:23:9a:ff:f4:af:22:26:3a:52:89:0f:97:da:
75:34:6c:85:60:d8:da:a4:72:d2:10:b8:23:77:2e:
8c:b5:44:35:3b:50:05:1e:f2:bb:a4:c5:29:52:33:
72:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:15:2D:AF:2F:A0:27:4F:FF:A6:B1:09:7A:9A:4C:A1:FC:44:DB:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/898812EE0E6911F184D3AFA8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.31.0/24
154.209.252.0/22
154.210.213.0/24
154.210.224.0/22
Signature Algorithm: sha256WithRSAEncryption
81:7b:a8:79:ae:b0:73:21:48:b4:50:a5:aa:0a:bb:7b:03:20:
ac:f0:c2:d7:98:00:4e:32:3f:41:89:22:55:77:67:5b:7c:4b:
b9:6f:83:f1:28:48:1a:64:a7:51:30:9b:32:74:96:f5:b7:1c:
17:e0:65:5a:0f:ed:00:94:4a:79:26:a1:4a:d0:78:70:b8:92:
a7:2d:d1:e3:d9:6a:a3:01:92:92:5e:84:79:ef:9f:9a:86:e3:
fe:9d:f2:f0:35:a9:ae:6f:53:d3:1e:fd:b8:81:92:43:90:76:
d7:15:88:e1:d5:2d:be:6c:12:38:b3:39:ec:4c:19:99:50:0c:
38:69:b6:45:d0:f1:f9:56:9c:0d:c4:40:8d:c5:fc:99:c3:f5:
15:32:a6:c1:bb:ff:d7:ab:8d:51:f0:35:be:cd:77:6f:bb:e9:
79:4a:24:8e:28:42:e9:59:99:6f:9b:33:40:18:e1:57:4b:f6:
4a:17:00:e6:4a:0d:6b:10:e0:97:39:dd:68:2c:b6:c4:8a:5c:
82:4a:dd:4a:35:1d:b3:d6:36:96:43:03:2f:aa:a3:fe:32:8e:
7b:f2:f5:d4:c4:1a:0a:27:92:0c:54:ea:05:ec:f3:8e:b5:00:
11:78:32:c8:88:49:b1:c6:67:c1:c9:55:e8:e0:b9:a5:0b:e9:
03:94:cb:49
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgIDAbqMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjIwMTQzNjE5WhcNMjYwNjA0MTQzNjE5WjAYMRYw
FAYDVQQDEw02OTk4NzE2Yi1lM2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2cmNGhK6PL+z6yi6xc+Lg9fgsiagZAcURGjUb+2tN6nKjz2EJXGJW+Tv
R9rkKERM6V88jZvvPJ5ldrzNpVieFbCuYx5PVpqIBlALZyJftev2bi2TWDdLPFs0
5VWIVc1hqms6GDAzsL/WTtmNvErzPeBwZwZD7g8KmItttrDLrUN0c1/aI0fXPDMZ
LN9LZ7fbAXnIRJmijBgbALUeESaQa30fzMpF5Xmb+3G9srPO5jugu9H7seH2Nzyd
dCEVrTqsZ76eH20ZwCh/GCwakdC1bioM+yOa//SvIiY6UokPl9p1NGyFYNjapHLS
ELgjdy6MtUQ1O1AFHvK7pMUpUjNy3wIDAQABo4ICtzCCArMwHQYDVR0OBBYEFCwV
La8voCdP/6axCXqaTKH8RNsaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84OTg4MTJFRTBFNjkxMUYxODREM0FGQThEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAms4fAwQCmtH8AwQAmtLV
AwQCmtLgMA0GCSqGSIb3DQEBCwUAA4IBAQCBe6h5rrBzIUi0UKWqCrt7AyCs8MLX
mABOMj9BiSJVd2dbfEu5b4PxKEgaZKdRMJsydJb1txwX4GVaD+0AlEp5JqFK0Hhw
uJKnLdHj2WqjAZKSXoR575+ahuP+nfLwNamub1PTHv24gZJDkHbXFYjh1S2+bBI4
sznsTBmZUAw4abZF0PH5VpwNxECNxfyZw/UVMqbBu//Xq41R8DW+zXdvu+l5SiSO
KELpWZlvmzNAGOFXS/ZKFwDmSg1rEOCXOd1oLLbEilyCSt1KNR2z1jaWQwMvqqP+
Mo578vXUxBoKJ5IMVOoF7POOtQAReDLIiEmxxmfByVXo4LmlC+kDlMtJ
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:51:07 2026 by rpki-client