Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/993124F812DB11F1AA1E5878DAE4EC9C.roa
File: 993124F812DB11F1AA1E5878DAE4EC9C.roa (raw, json)
Hash identifier: nu1nMp909xvLdKtVNOysPPJ7yQZZS0mnbiTZmqzAT0c=
Subject key identifier: 7A:6A:B6:5C:F6:E4:6F:E0:59:FE:00:62:BA:8D:C6:8B:A3:4F:BF:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BBCE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/993124F812DB11F1AA1E5878DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 06:23:00 +0000
ROA not before: Thu 26 Feb 2026 06:22:56 +0000
ROA not after: Sat 28 Mar 2026 06:22:56 +0000
asID: 200758
IP address blocks: 154.83.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113614 (0x1bbce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 26 06:22:56 2026 GMT
Not After : Mar 28 06:22:56 2026 GMT
Subject: CN=699fe6c4-7cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:32:ed:cf:5b:53:c4:13:49:0c:ac:9f:81:ae:
03:0c:40:da:02:6b:a5:b6:c4:c5:71:02:5f:d1:ae:
80:76:7b:39:f7:e9:ea:c1:fe:af:24:a9:22:32:b4:
f0:21:84:b3:fd:4c:90:ac:fa:a6:6a:b5:45:b3:90:
1d:a9:3b:7a:60:a5:b0:54:32:dc:9a:a0:12:e2:9d:
01:b9:1e:7c:0d:f4:81:dc:87:9a:d1:72:84:9c:41:
43:2c:7f:b0:87:bf:73:08:29:75:e8:4b:be:f1:f9:
7a:b3:c5:9f:e1:f9:df:cb:d0:5d:f2:d6:4c:b0:9c:
0e:a2:c4:e4:f5:54:a0:49:9a:6d:b2:40:98:9e:1b:
55:95:48:6d:db:01:e5:08:1d:d3:1f:ad:01:e3:1d:
d6:37:0a:f6:07:69:52:0b:ec:a1:21:5e:22:89:65:
2d:3d:02:79:7d:30:02:57:5a:e6:05:ae:66:5f:94:
c0:aa:46:04:08:5b:fb:60:07:38:1a:f6:13:62:1e:
ee:d6:39:e5:3b:70:d9:6c:f1:00:52:86:7b:23:39:
5b:22:6a:60:86:3e:d8:31:06:0a:5f:c7:7f:b7:aa:
50:02:d5:90:4c:fe:33:04:cc:c3:ba:fc:d8:cf:a0:
c7:09:cc:d5:dc:9e:21:51:5c:24:4a:ac:18:45:98:
aa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6A:B6:5C:F6:E4:6F:E0:59:FE:00:62:BA:8D:C6:8B:A3:4F:BF:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/993124F812DB11F1AA1E5878DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.140.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:ce:a3:dc:fa:02:2b:e6:fa:63:b4:a7:49:63:7e:ab:2c:a4:
57:86:f4:b5:1b:81:54:d8:d7:9c:79:09:e4:78:2d:23:8d:da:
14:8d:02:f5:67:ba:f1:91:4a:50:6a:d7:31:0d:06:d9:c0:54:
09:28:77:4d:4f:75:f3:5f:10:c0:9d:97:be:e6:91:ee:8c:dd:
22:4c:73:4e:a3:71:ba:ab:cb:96:4e:3d:44:92:76:89:5b:dd:
b4:c6:27:7d:a3:99:35:73:b1:7a:72:b8:da:e7:e7:49:a0:0c:
c7:ca:2b:8d:ed:9d:c5:e1:af:f6:5e:47:19:7a:a9:0a:f0:54:
d6:b6:ea:4f:57:a1:67:60:13:7d:b9:02:42:5a:59:28:b6:9a:
07:b7:76:10:f1:0c:7a:e3:8d:5b:f9:37:67:57:a4:86:0f:4e:
3a:bb:d6:ab:4d:2c:c0:f3:c7:d2:8f:44:84:f5:a9:d8:79:06:
4a:da:91:8e:67:85:21:3f:c7:bc:d5:0b:e5:14:88:aa:9a:2c:
e8:43:0d:12:20:ff:9d:b1:18:5d:b0:98:14:34:56:37:01:fa:
77:72:b4:88:22:ed:be:31:cd:b8:ee:4a:6c:8b:7a:72:ed:79:
f0:db:6b:0f:7d:bd:e6:45:20:0b:3b:8d:13:c0:47:83:b3:3b:
e3:8c:bc:dd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbvOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjI2MDYyMjU2WhcNMjYwMzI4MDYyMjU2WjAYMRYw
FAYDVQQDEw02OTlmZTZjNC03Y2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7DLtz1tTxBNJDKyfga4DDEDaAmultsTFcQJf0a6Adns59+nqwf6vJKki
MrTwIYSz/UyQrPqmarVFs5AdqTt6YKWwVDLcmqAS4p0BuR58DfSB3Iea0XKEnEFD
LH+wh79zCCl16Eu+8fl6s8Wf4fnfy9Bd8tZMsJwOosTk9VSgSZptskCYnhtVlUht
2wHlCB3TH60B4x3WNwr2B2lSC+yhIV4iiWUtPQJ5fTACV1rmBa5mX5TAqkYECFv7
YAc4GvYTYh7u1jnlO3DZbPEAUoZ7IzlbImpghj7YMQYKX8d/t6pQAtWQTP4zBMzD
uvzYz6DHCczV3J4hUVwkSqwYRZiqowIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHpq
tlz25G/gWf4AYrqNxoujT7/YMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85OTMxMjRGODEyREIxMUYxQUExRTU4NzhEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlOMMA0GCSqGSIb3DQEB
CwUAA4IBAQAdzqPc+gIr5vpjtKdJY36rLKRXhvS1G4FU2NeceQnkeC0jjdoUjQL1
Z7rxkUpQatcxDQbZwFQJKHdNT3XzXxDAnZe+5pHujN0iTHNOo3G6q8uWTj1EknaJ
W920xid9o5k1c7F6crja5+dJoAzHyiuN7Z3F4a/2XkcZeqkK8FTWtupPV6FnYBN9
uQJCWlkotpoHt3YQ8Qx6441b+TdnV6SGD046u9arTSzA88fSj0SE9anYeQZK2pGO
Z4UhP8e81QvlFIiqmizoQw0SIP+dsRhdsJgUNFY3Afp3crSIIu2+Mc247kpsi3py
7Xnw22sPfb3mRSALO40TwEeDszvjjLzd
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:29 2026 by rpki-client