Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98BA04C0059011F1BE95A5C6DAE4EC9C.roa
File: 98BA04C0059011F1BE95A5C6DAE4EC9C.roa (raw, json)
Hash identifier: 04tM94a42ZkC3PvG1b4Ej5bPESKt2bavSY5X8zECFgc=
Subject key identifier: D5:3B:21:28:54:02:29:CC:B9:27:40:AE:C8:ED:B8:92:9A:83:97:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B8F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98BA04C0059011F1BE95A5C6DAE4EC9C.roa
Signing time: Mon 09 Feb 2026 08:23:23 +0000
ROA not before: Mon 09 Feb 2026 08:23:13 +0000
ROA not after: Tue 10 Mar 2026 08:23:13 +0000
asID: 40779
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112884 (0x1b8f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 9 08:23:13 2026 GMT
Not After : Mar 10 08:23:13 2026 GMT
Subject: CN=6989997a-8ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:48:96:76:8b:12:01:2c:dd:43:cd:8d:16:86:
0d:25:92:b5:99:7f:08:ae:80:20:1d:54:d5:ed:37:
19:e9:eb:83:10:55:ff:b7:15:d9:75:98:12:ff:e5:
cb:f9:a7:d8:cf:bf:e6:28:8e:3b:ca:40:73:27:28:
00:07:90:7e:b6:b2:a3:29:b2:5f:33:5e:a3:52:ac:
c9:39:85:6d:f6:0f:47:d1:25:20:32:1e:47:18:da:
c8:21:79:15:24:e4:86:b8:ab:40:24:b5:18:50:74:
e7:c6:8c:1c:2a:61:69:7c:ff:67:64:16:af:cc:eb:
13:dd:d8:d0:b6:e2:09:4f:36:d9:2b:18:0f:27:49:
f9:9e:81:b8:d7:11:7d:f8:40:10:9d:7d:9e:57:6b:
8c:60:df:f3:5d:34:69:eb:be:90:09:6b:84:75:67:
2f:de:24:e3:0d:d1:2e:ee:95:67:40:27:f4:61:43:
9d:06:f8:f3:9f:62:d3:27:11:4e:2d:1d:a9:e4:91:
a1:6c:74:87:9e:58:4f:7c:23:07:d4:98:d3:62:c7:
98:12:82:3c:84:a4:9f:ab:e9:d8:6e:f5:68:a3:ce:
af:ef:c3:80:7d:05:0a:f0:a7:4f:b6:fa:eb:6f:24:
6f:b3:a1:d3:a2:7c:d0:ed:c1:f4:9a:05:70:05:3f:
a2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3B:21:28:54:02:29:CC:B9:27:40:AE:C8:ED:B8:92:9A:83:97:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98BA04C0059011F1BE95A5C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
09:25:b2:5e:86:c5:e0:0d:1c:4c:c4:13:80:4f:e5:a6:9e:f2:
f1:90:fe:9a:f0:6e:40:06:76:61:31:fb:b2:5b:ed:c7:b8:a8:
28:66:ee:d8:1f:f7:6f:e9:c6:ed:1f:fe:e8:79:0b:90:7a:d4:
c5:c6:d3:80:d7:32:11:87:2d:05:fe:20:e5:55:e4:0e:ae:b0:
9e:ce:29:8d:58:b6:92:c9:97:cd:bf:d1:92:45:39:12:d9:4b:
e7:ce:6d:82:ce:af:e7:d4:1c:27:be:9b:59:c8:b0:9f:cb:08:
5c:f8:42:0b:5d:ae:b0:7e:6b:fa:7e:e8:8b:03:ee:23:2a:75:
a1:09:78:63:ae:96:f3:3d:68:11:8d:3a:cc:d9:f7:ee:55:60:
9a:47:fe:56:b8:9c:e8:0b:d2:87:48:91:a2:a4:b2:33:e3:42:
33:17:95:10:cf:e2:45:c5:73:f9:72:5a:42:7f:de:2d:bc:25:
91:a0:4f:7d:cd:a0:1d:43:4a:c6:16:93:30:8a:68:98:86:a2:
d8:aa:2f:6a:ed:41:a8:75:f9:24:ce:f3:5f:3b:d1:54:95:52:
a7:81:30:08:a4:22:92:e1:9e:39:c1:02:a8:8b:35:40:40:8f:
d1:d8:2c:7f:5e:a3:93:f1:2a:3b:ab:42:f1:2d:4c:f4:29:e9:
6a:91:ff:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:14:50 2026 by rpki-client