Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92E5F400121A11F1ADBAFADADAE4EC9C.roa
File: 92E5F400121A11F1ADBAFADADAE4EC9C.roa (raw, json)
Hash identifier: 3n19nGVcLL8+9ZRnR3CKUPDIW2h7LcPFv+OtP4+wLXo=
Subject key identifier: D4:73:0E:C5:FB:E5:CF:69:7E:3A:CB:A5:3E:75:A9:EF:92:0A:C4:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB87
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92E5F400121A11F1ADBAFADADAE4EC9C.roa
Signing time: Wed 25 Feb 2026 07:21:17 +0000
ROA not before: Wed 25 Feb 2026 07:21:12 +0000
ROA not after: Fri 27 Mar 2026 07:21:12 +0000
asID: 6079
IP address blocks: 154.81.200.0/21 maxlen: 24
154.83.48.0/20 maxlen: 24
154.90.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113543 (0x1bb87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 07:21:12 2026 GMT
Not After : Mar 27 07:21:12 2026 GMT
Subject: CN=699ea2ed-800d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e2:3e:65:16:d1:28:7e:a5:0c:27:1e:ff:76:
01:73:65:a5:77:ea:77:90:0c:6e:a1:74:c2:d4:4c:
20:db:36:af:26:0c:38:be:aa:9f:ea:db:bb:55:2e:
a1:75:11:f9:0c:e0:ac:8a:d2:4d:d4:ad:d5:53:6c:
cb:b5:a1:2e:c9:fd:ed:66:de:21:53:21:3b:ed:14:
8f:dd:32:66:37:05:62:75:9d:8b:d4:4b:e0:93:7b:
a8:3d:00:33:4d:25:80:80:85:ab:35:a8:8b:e1:15:
a2:cd:96:42:d8:0c:d6:2e:b6:30:84:61:bf:0a:0e:
47:c2:4e:3a:01:bb:07:cb:67:ca:dc:19:d1:22:8e:
7d:27:95:b1:bd:b4:df:bb:7d:5f:9e:8a:bc:8d:1d:
c2:43:07:34:c0:d1:7b:d3:13:44:71:00:b5:1c:1b:
50:4b:86:b7:26:32:e1:3c:fb:1d:78:91:4a:36:d6:
2f:66:78:a2:4d:88:c6:3f:58:22:7c:e4:d0:93:89:
06:36:39:85:ce:a1:6e:ad:2d:fb:61:ba:b9:f6:ec:
12:6f:1f:7a:7a:11:cc:0a:7e:bc:58:be:c6:c2:4b:
73:7f:62:10:5c:ea:ae:d1:77:1b:32:7c:17:37:6a:
9f:3d:cb:c2:f6:df:fa:5e:e4:d4:04:06:d7:0f:cb:
73:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:73:0E:C5:FB:E5:CF:69:7E:3A:CB:A5:3E:75:A9:EF:92:0A:C4:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92E5F400121A11F1ADBAFADADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.200.0/21
154.83.48.0/20
154.90.0.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:50:f9:cd:1c:d7:2c:b1:04:c1:80:70:03:d8:01:29:0c:db:
b4:1f:50:5b:3c:4c:6b:2b:85:de:92:62:01:c9:02:c5:b6:3d:
f6:c5:80:55:52:a0:3d:5b:66:cb:d5:08:28:8d:30:45:38:10:
05:dc:78:8e:33:96:f6:7c:6b:a9:7b:14:c7:80:69:63:77:3c:
31:db:a0:cc:18:95:b6:e6:37:ca:31:a6:83:48:07:c4:85:7c:
29:e0:89:a0:70:c4:05:19:0d:e7:e9:91:e3:c0:da:0f:7d:ac:
55:32:e1:38:0e:f7:0c:6a:6f:be:4e:7b:3d:0f:03:b3:f5:ff:
cc:c6:fd:95:78:9a:4d:d9:8a:70:17:3e:93:1b:64:99:90:b1:
d1:1f:c4:2c:65:7f:33:ea:16:51:c8:2a:25:ef:dd:07:d4:f3:
8a:e9:0d:52:da:90:27:f8:41:7f:d7:32:31:7e:ad:01:b1:28:
96:83:0f:b9:c7:aa:b9:aa:d4:c6:8e:bc:cb:42:92:d1:1a:84:
52:9f:a0:b7:04:b4:ea:7b:f5:98:01:f8:53:97:28:51:80:b8:
65:5c:b8:75:8c:ee:5e:dc:ab:c4:bb:64:2f:2e:01:08:6d:f5:
e7:2c:d7:4e:01:5c:d3:2c:4d:94:a7:73:db:fc:85:c5:fd:79:
0e:0b:97:ee
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAbuHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjI1MDcyMTEyWhcNMjYwMzI3MDcyMTEyWjAYMRYw
FAYDVQQDEw02OTllYTJlZC04MDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7uI+ZRbRKH6lDCce/3YBc2Wld+p3kAxuoXTC1Ewg2zavJgw4vqqf6tu7
VS6hdRH5DOCsitJN1K3VU2zLtaEuyf3tZt4hUyE77RSP3TJmNwVidZ2L1Evgk3uo
PQAzTSWAgIWrNaiL4RWizZZC2AzWLrYwhGG/Cg5Hwk46AbsHy2fK3BnRIo59J5Wx
vbTfu31fnoq8jR3CQwc0wNF70xNEcQC1HBtQS4a3JjLhPPsdeJFKNtYvZniiTYjG
P1gifOTQk4kGNjmFzqFurS37Ybq59uwSbx96ehHMCn68WL7Gwktzf2IQXOqu0Xcb
MnwXN2qfPcvC9t/6XuTUBAbXD8tzoQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFNRz
DsX75c9pfjrLpT51qe+SCsR8MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MkU1RjQwMDEyMUExMUYxQURCQUZBREFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDmlHIAwQEmlMwAwQAmloA
MA0GCSqGSIb3DQEBCwUAA4IBAQAaUPnNHNcssQTBgHAD2AEpDNu0H1BbPExrK4Xe
kmIByQLFtj32xYBVUqA9W2bL1QgojTBFOBAF3HiOM5b2fGupexTHgGljdzwx26DM
GJW25jfKMaaDSAfEhXwp4ImgcMQFGQ3n6ZHjwNoPfaxVMuE4DvcMam++Tns9DwOz
9f/Mxv2VeJpN2YpwFz6TG2SZkLHRH8QsZX8z6hZRyCol790H1POK6Q1S2pAn+EF/
1zIxfq0BsSiWgw+5x6q5qtTGjrzLQpLRGoRSn6C3BLTqe/WYAfhTlyhRgLhlXLh1
jO5e3KvEu2QvLgEIbfXnLNdOAVzTLE2Up3Pb/IXF/XkOC5fu
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:04 2026 by rpki-client