Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96A7CABA0BD411F184736CCBDAE4EC9C.roa
File: 96A7CABA0BD411F184736CCBDAE4EC9C.roa (raw, json)
Hash identifier: 9zxz5iZoRPl76SOwcBP5Ec8uMz5otObHqwGu8PS8jlw=
Subject key identifier: E6:EE:B6:1F:CD:96:BF:BD:BE:0E:E0:AD:9D:54:74:05:F5:DC:E4:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B9E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96A7CABA0BD411F184736CCBDAE4EC9C.roa
Signing time: Tue 17 Feb 2026 07:45:12 +0000
ROA not before: Tue 17 Feb 2026 07:45:07 +0000
ROA not after: Mon 23 Mar 2026 07:45:07 +0000
asID: 63969
IP address blocks: 154.89.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113127 (0x1b9e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 17 07:45:07 2026 GMT
Not After : Mar 23 07:45:07 2026 GMT
Subject: CN=69941c88-615f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b1:df:91:e0:0f:e3:f0:0c:ba:9d:15:52:db:
e3:be:2e:9e:00:d4:dd:e7:fb:b8:30:5d:83:13:83:
8e:88:8e:36:54:f8:26:27:72:79:1d:14:91:93:08:
f1:e3:4a:ea:7f:01:ab:c3:01:35:f3:c0:c9:98:fb:
65:9b:a1:fb:5e:4b:ef:53:1f:bf:54:90:e8:5b:57:
1b:70:5f:4a:32:a4:6a:c9:11:a6:bd:1b:48:8e:32:
f1:30:48:ec:05:ce:c5:02:65:db:42:ba:8b:ac:ff:
df:35:a4:b6:47:55:2b:d8:98:87:11:ce:90:e6:74:
03:1d:38:c9:cc:ec:d0:4b:76:7b:5b:bf:f5:5c:b1:
f5:9b:0d:05:a7:fc:b9:c6:7d:9b:46:cb:a7:6b:e2:
5f:59:3d:bb:a5:ff:d3:e2:a8:46:1a:30:e6:5e:ac:
68:67:a8:82:7d:94:03:7f:30:fe:c8:bd:91:19:21:
06:5d:1d:01:bb:10:f5:4e:0c:40:7f:db:60:2e:13:
e5:16:8f:35:73:3a:ac:3f:9c:06:07:de:f2:00:d2:
06:f5:d3:05:eb:d8:69:0e:6d:58:3c:22:7d:7f:b8:
0e:6e:41:ab:21:46:69:0a:c0:48:83:ef:9d:34:dd:
03:ea:d1:95:ae:af:6c:04:82:c0:34:48:f2:1f:76:
05:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:EE:B6:1F:CD:96:BF:BD:BE:0E:E0:AD:9D:54:74:05:F5:DC:E4:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96A7CABA0BD411F184736CCBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.7.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:4e:f5:be:d4:74:dc:91:03:49:4d:b4:ed:2c:ed:a2:aa:db:
87:d8:80:a3:04:f3:0a:6e:fd:35:76:24:06:24:ce:07:28:7a:
c2:46:6d:e7:a2:4b:30:19:67:58:c5:54:2a:e1:f9:35:cd:da:
df:4d:52:7f:bb:15:be:03:7b:eb:11:29:64:ca:d3:63:b0:f7:
d4:be:59:d0:7f:3d:38:79:d1:dc:b0:13:33:63:f0:ce:15:bf:
86:a9:4c:1f:fb:35:17:38:3b:56:56:fd:a1:df:96:ee:69:10:
96:19:d5:e2:2c:00:b2:06:30:e0:7b:1a:62:6f:ba:75:c2:da:
dd:7c:e8:8d:67:6e:f0:27:49:a6:09:40:cf:8a:c4:df:85:d6:
26:16:d1:a7:f6:21:47:b4:85:91:24:e5:00:a6:b3:1d:bd:e3:
28:41:23:8e:93:2e:ab:6f:a2:a1:c4:2a:d0:99:10:89:70:7e:
34:02:24:73:99:e7:4f:49:6a:46:15:83:9c:56:d3:9a:17:24:
61:ae:da:ba:c1:aa:e6:9a:f2:22:b3:15:48:ed:f5:f9:81:fb:
00:06:a1:bb:5d:7e:c4:2d:31:c7:da:23:f1:f4:e8:f9:c5:7d:
b0:84:01:35:9a:d2:76:77:62:f2:ec:b8:54:f1:d3:8f:7a:a2:
07:39:60:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:54:07 2026 by rpki-client