Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/914F5AC80BDA11F193B19EEDDAE4EC9C.roa
File: 914F5AC80BDA11F193B19EEDDAE4EC9C.roa (raw, json)
Hash identifier: KPZKeyWbFTZVnFPuRmbOa3kxYuG+T05Ix7IxeEcF3vw=
Subject key identifier: F4:17:7B:04:07:0A:A5:DD:3A:AF:9C:17:49:D7:52:07:D6:69:45:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B9F9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/914F5AC80BDA11F193B19EEDDAE4EC9C.roa
Signing time: Tue 17 Feb 2026 08:28:00 +0000
ROA not before: Tue 17 Feb 2026 08:27:55 +0000
ROA not after: Tue 24 Mar 2026 08:27:55 +0000
asID: 18013
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113145 (0x1b9f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 17 08:27:55 2026 GMT
Not After : Mar 24 08:27:55 2026 GMT
Subject: CN=69942690-8671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bf:14:7a:7e:f6:cf:74:84:7c:33:2f:23:24:
3a:ec:a4:a0:a3:ce:51:fe:3f:a6:f4:7f:55:be:03:
c0:99:ed:9b:99:eb:23:85:12:e4:6b:13:b5:95:3d:
ae:43:b1:f5:a0:a0:43:9d:22:90:1a:57:25:e5:47:
14:5d:b3:a3:67:f7:94:57:93:36:03:5e:c6:00:5f:
01:33:31:ed:f3:89:77:c3:85:3b:e3:f6:74:51:73:
61:5b:e2:73:17:ce:df:a0:69:01:16:31:57:3a:cd:
96:5f:33:f1:54:05:66:9b:12:1a:71:14:9a:ab:e7:
23:e8:63:fd:71:b8:ec:54:f8:4f:84:88:21:ea:55:
db:bb:6a:f1:bf:fd:d9:da:7f:d1:f5:58:42:ed:56:
cd:88:30:98:20:fe:cb:6e:57:83:4e:c0:86:20:a5:
de:6f:f3:6a:17:16:ee:50:58:86:2e:1b:44:91:0f:
d9:54:79:a7:01:ea:3a:c9:9f:f2:9f:d9:97:9f:3b:
bc:e3:df:8b:90:15:64:9e:b1:3c:bc:c3:65:f1:1f:
15:38:a5:ec:c1:63:c0:01:d2:7c:ca:a4:c4:46:9a:
93:27:ba:c4:82:4e:43:72:9d:12:1b:e7:15:d5:e3:
69:b4:92:d7:84:ba:8c:71:08:d6:e5:6b:47:b8:21:
ea:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:17:7B:04:07:0A:A5:DD:3A:AF:9C:17:49:D7:52:07:D6:69:45:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/914F5AC80BDA11F193B19EEDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.191.255
Signature Algorithm: sha256WithRSAEncryption
6e:7b:8f:9f:e5:ee:2f:5c:70:df:69:8d:d7:88:e3:c4:90:bb:
b5:f2:9d:3a:68:77:0a:fc:d0:3f:58:b7:bf:81:ce:ee:d5:f4:
8d:29:d6:1f:67:e6:96:48:1a:d2:85:40:fb:42:06:61:b3:63:
96:5f:14:6d:ee:53:96:3e:f7:78:dd:59:21:3c:b5:e6:fc:bc:
2c:7e:cf:8b:0e:b2:10:20:7d:88:f7:2d:46:2d:10:35:1f:bc:
b7:61:0e:8f:8c:3d:ce:70:f9:cf:d7:61:db:a5:8a:f5:2a:15:
72:38:f8:e4:b2:a9:90:b0:97:64:4b:6a:1d:40:41:2d:a8:51:
f1:aa:c4:74:54:fd:e5:e5:14:f0:43:00:11:34:ef:7f:53:d2:
b1:d3:73:63:dd:88:c3:45:58:f6:c1:fe:28:d2:64:4a:e6:ae:
4b:10:29:38:f8:c3:c4:6e:f1:9e:e9:84:c7:7b:c6:f9:66:c5:
c8:36:4b:43:30:85:f9:af:31:f8:ee:a2:0a:da:d4:40:1e:89:
0e:4b:39:2e:47:2c:b4:88:41:a4:61:9d:73:e0:c1:ef:76:86:
21:29:50:80:84:4a:e1:ec:68:c1:19:1a:22:f7:88:97:8c:9c:
0d:a2:9f:1e:3c:83:09:96:11:11:45:43:b5:da:dd:e3:a3:4a:
cb:ca:04:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:06 2026 by rpki-client