Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E6B2ABE0EFD11F1BAE80BBDDAE4EC9C.roa
File: 8E6B2ABE0EFD11F1BAE80BBDDAE4EC9C.roa (raw, json)
Hash identifier: hwbErUjBbopU+uESEUQPXrUZjL8w0XJGdHOW9r3nvlc=
Subject key identifier: 12:0B:BA:BC:25:FD:F1:5F:87:3A:DD:8B:84:FE:97:92:8D:F2:3D:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BACF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E6B2ABE0EFD11F1BAE80BBDDAE4EC9C.roa
Signing time: Sat 21 Feb 2026 08:16:00 +0000
ROA not before: Sat 21 Feb 2026 08:15:56 +0000
ROA not after: Mon 09 Mar 2026 08:15:56 +0000
asID: 54801
IP address blocks: 154.198.9.0/24 maxlen: 24
154.198.10.0/24 maxlen: 24
154.200.241.0/24 maxlen: 24
154.200.242.0/24 maxlen: 24
154.200.248.0/23 maxlen: 24
154.201.7.0/24 maxlen: 24
154.201.8.0/22 maxlen: 24
154.201.40.0/23 maxlen: 24
154.213.176.0/20 maxlen: 24
154.213.211.0/24 maxlen: 24
154.213.212.0/24 maxlen: 24
154.222.77.0/24 maxlen: 24
154.222.78.0/24 maxlen: 24
154.222.136.0/23 maxlen: 24
154.222.146.0/23 maxlen: 24
154.223.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113359 (0x1bacf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 21 08:15:56 2026 GMT
Not After : Mar 9 08:15:56 2026 GMT
Subject: CN=699969c0-af3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fb:ce:fc:de:e3:d6:3d:a5:d4:dd:51:6d:12:
45:05:d8:b3:5c:2b:74:d5:c2:32:22:2d:1e:72:a3:
d4:7c:49:20:b8:7c:2e:2e:f9:15:69:58:ac:6f:60:
c6:e1:2e:70:1e:c6:3a:b2:a1:61:76:e9:4c:e1:32:
7c:f1:e8:f1:cf:c8:b9:a8:8c:94:7f:ac:da:1c:f0:
16:07:e2:96:8c:40:c7:74:1f:f3:9b:90:11:67:5e:
73:2d:22:ed:8a:f0:38:c7:74:e3:2f:25:ac:d1:53:
7f:50:0e:f7:6b:99:01:fe:ee:cd:d4:e2:e2:85:33:
30:ad:c8:76:4d:90:b3:a2:97:78:b3:f7:33:dc:57:
7b:0f:13:32:69:93:47:c3:95:0f:24:33:92:5a:59:
44:64:e9:4a:41:6f:73:d9:7e:40:2c:07:25:56:93:
d3:93:bb:eb:13:41:75:1d:f9:d1:3d:86:ff:63:c9:
d4:28:5b:a4:7e:2a:83:69:76:6a:1d:6d:b1:17:8a:
29:ae:9a:fc:43:54:b6:cf:e7:06:60:01:da:03:99:
dc:4f:cc:1f:de:3f:5a:49:c3:40:4b:9c:59:30:d5:
01:6c:26:85:e5:d3:bf:cb:15:37:30:bd:54:3d:2d:
3d:d7:fd:82:dd:95:ce:b6:0d:40:70:78:e1:4f:39:
44:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0B:BA:BC:25:FD:F1:5F:87:3A:DD:8B:84:FE:97:92:8D:F2:3D:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E6B2ABE0EFD11F1BAE80BBDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.9.0-154.198.10.255
154.200.241.0-154.200.242.255
154.200.248.0/23
154.201.7.0-154.201.11.255
154.201.40.0/23
154.213.176.0/20
154.213.211.0-154.213.212.255
154.222.77.0-154.222.78.255
154.222.136.0/23
154.222.146.0/23
154.223.230.0/23
Signature Algorithm: sha256WithRSAEncryption
84:e7:43:34:8d:b9:8e:2f:0a:f2:3e:59:a5:e1:cd:b6:72:8a:
48:aa:30:51:1b:fa:9d:71:20:1d:06:cf:fc:d1:0b:35:f8:a1:
bd:8a:35:55:37:83:d5:7f:17:db:47:2d:79:26:7d:e7:6e:c3:
9f:52:ae:1b:21:12:7b:53:20:c3:a6:94:b2:9f:bf:72:75:4f:
71:a8:6e:81:1e:65:a2:4d:9e:2c:8d:87:45:50:8f:0e:7e:d1:
ea:4e:07:7f:9f:f7:21:aa:fa:43:03:0f:75:13:a2:23:00:dd:
93:00:f1:84:0f:9c:ce:ee:5e:69:d2:db:29:8d:30:6f:63:42:
29:11:3e:df:c0:35:39:68:15:f5:f6:8d:30:50:de:2b:a1:e0:
e8:1f:4a:ca:6f:56:2d:82:01:d2:ab:f2:a9:ec:a5:54:77:22:
a8:7f:ee:33:84:07:88:6f:d0:fe:a0:4e:bc:70:2b:60:c7:8a:
3b:36:f7:74:7d:49:7e:7e:da:ae:84:0a:95:3d:b9:87:62:f9:
c2:5a:9a:38:a1:12:93:22:32:15:46:cd:f7:d0:98:13:66:be:
cb:07:e3:b6:83:d5:9c:e3:05:f8:5e:e8:0f:c0:7c:06:3a:4e:
e9:c0:1a:2b:6c:20:8a:51:21:6a:64:0f:82:71:9f:8b:2f:e4:
71:4f:80:e4
-----BEGIN CERTIFICATE-----
MIIF6TCCBNGgAwIBAgIDAbrPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjIxMDgxNTU2WhcNMjYwMzA5MDgxNTU2WjAYMRYw
FAYDVQQDEw02OTk5NjljMC1hZjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyfvO/N7j1j2l1N1RbRJFBdizXCt01cIyIi0ecqPUfEkguHwuLvkVaVis
b2DG4S5wHsY6sqFhdulM4TJ88ejxz8i5qIyUf6zaHPAWB+KWjEDHdB/zm5ARZ15z
LSLtivA4x3TjLyWs0VN/UA73a5kB/u7N1OLihTMwrch2TZCzopd4s/cz3Fd7DxMy
aZNHw5UPJDOSWllEZOlKQW9z2X5ALAclVpPTk7vrE0F1HfnRPYb/Y8nUKFukfiqD
aXZqHW2xF4oprpr8Q1S2z+cGYAHaA5ncT8wf3j9aScNAS5xZMNUBbCaF5dO/yxU3
ML1UPS091/2C3ZXOtg1AcHjhTzlEjQIDAQABo4IDCjCCAwYwHQYDVR0OBBYEFBIL
urwl/fFfhzrdi4T+l5KN8j09MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84RTZCMkFCRTBFRkQxMUYxQkFFODBCQkREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwajAMAwQAmsYJAwQAmsYKMAwD
BACayPEDBACayPIDBAGayPgwDAMEAJrJBwMEAprJCAMEAZrJKAMEBJrVsDAMAwQA
mtXTAwQAmtXUMAwDBACa3k0DBACa3k4DBAGa3ogDBAGa3pIDBAGa3+YwDQYJKoZI
hvcNAQELBQADggEBAITnQzSNuY4vCvI+WaXhzbZyikiqMFEb+p1xIB0Gz/zRCzX4
ob2KNVU3g9V/F9tHLXkmfeduw59SrhshEntTIMOmlLKfv3J1T3GoboEeZaJNniyN
h0VQjw5+0epOB3+f9yGq+kMDD3UToiMA3ZMA8YQPnM7uXmnS2ymNMG9jQikRPt/A
NTloFfX2jTBQ3iuh4OgfSspvVi2CAdKr8qnspVR3Iqh/7jOEB4hv0P6gTrxwK2DH
ijs293R9SX5+2q6ECpU9uYdi+cJamjihEpMiMhVGzffQmBNmvssH47aD1ZzjBfhe
6A/AfAY6TunAGitsIIpRIWpkD4Jxn4sv5HFPgOQ=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:24 2026 by rpki-client