Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A7EF5240D7C11F18FF7AFF5DAE4EC9C.roa
File: 9A7EF5240D7C11F18FF7AFF5DAE4EC9C.roa (raw, json)
Hash identifier: ALakmjxevY0lSyG17y61gLn7BXijHPq8EXxqYToBLEU=
Subject key identifier: 9A:35:26:CD:40:0F:76:95:04:7F:7D:06:D9:DB:18:51:70:0A:20:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA31
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A7EF5240D7C11F18FF7AFF5DAE4EC9C.roa
Signing time: Thu 19 Feb 2026 10:20:27 +0000
ROA not before: Thu 19 Feb 2026 10:20:19 +0000
ROA not after: Thu 09 Apr 2026 10:20:19 +0000
asID: 48678
IP address blocks: 154.196.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113201 (0x1ba31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 19 10:20:19 2026 GMT
Not After : Apr 9 10:20:19 2026 GMT
Subject: CN=6996e3eb-759f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d6:17:84:e8:7a:16:26:9b:bd:91:5e:4a:45:
4a:08:2e:c1:b7:d3:e2:3c:a6:ec:bc:ce:21:65:ac:
9f:eb:6f:63:3b:83:57:79:57:02:bb:77:cb:99:9d:
ce:fd:38:87:fd:e1:be:75:42:c8:6f:3b:06:59:b5:
95:e3:0b:9b:10:f7:1c:bd:c8:c6:76:ee:1f:26:e8:
ef:a2:e6:bf:f3:d1:e0:4f:82:54:85:cb:a1:7a:56:
bc:ee:08:8e:46:6c:cd:12:ce:b6:73:bf:bd:33:5d:
9d:73:17:4d:e6:a4:4e:0c:ab:a7:af:ab:75:e7:11:
a2:14:6d:bb:3c:4a:b8:32:b7:6a:fa:f8:cc:32:50:
d4:3f:13:1a:fd:8d:cb:6f:41:eb:02:92:e8:ea:37:
49:51:0c:bb:93:b1:dc:39:3c:f1:f6:ed:ec:75:78:
7f:ba:4a:96:bf:00:61:2f:72:70:ff:50:fb:26:bd:
c6:28:73:2a:7f:b3:6a:26:6a:6b:6f:ab:59:9a:e0:
4f:a6:77:ef:1f:cb:0f:76:f6:de:48:24:a9:a8:99:
f2:b1:c3:cf:8e:b0:e2:22:a8:76:39:ef:fb:e1:75:
4b:fa:94:ed:26:f7:1c:cf:16:49:41:8b:af:b7:f5:
04:fc:84:e6:13:6a:e3:94:0d:5c:7c:65:96:8e:82:
c6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:35:26:CD:40:0F:76:95:04:7F:7D:06:D9:DB:18:51:70:0A:20:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A7EF5240D7C11F18FF7AFF5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.1.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:38:5b:d2:fe:9f:51:14:ef:ea:f7:dc:15:fc:b9:e9:40:28:
bc:59:ec:df:b5:20:3b:8d:e7:b4:21:68:8a:07:66:2f:1a:42:
17:bd:f6:7d:97:64:8e:c1:f9:88:04:de:b5:7a:5f:b5:25:0e:
e5:65:ff:57:7c:11:de:f5:de:c1:49:57:35:80:f8:2f:58:69:
0e:50:2a:d2:df:5c:63:f2:46:29:cd:1a:fe:10:37:f5:3b:88:
88:a6:11:6f:ed:0e:4f:29:e7:11:c8:b8:d9:db:94:db:9d:0b:
b1:ae:a6:f1:06:1d:65:03:72:40:16:1f:87:35:ff:a8:cc:7e:
ac:5f:16:32:9d:8a:cc:f3:a7:c3:d2:ec:ab:de:d9:19:3d:e0:
e7:d2:45:fa:f5:87:fb:9e:4b:ad:31:ba:99:24:37:4e:1d:94:
df:61:4b:31:cf:41:64:eb:9d:fc:04:7f:25:28:7f:ab:1e:0e:
1f:16:63:b6:72:44:79:22:c2:b7:42:07:b8:c4:56:43:f9:e6:
4e:cb:bc:04:f7:ce:31:1f:ad:43:db:5c:ac:56:bd:90:25:e9:
75:26:3a:2f:7f:66:43:6d:ab:90:34:37:4e:7e:f9:aa:13:3a:
37:82:fc:89:19:ea:32:87:c3:ca:a2:ab:aa:91:ef:a2:72:42:
35:61:89:e6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAboxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjE5MTAyMDE5WhcNMjYwNDA5MTAyMDE5WjAYMRYw
FAYDVQQDEw02OTk2ZTNlYi03NTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9dYXhOh6FiabvZFeSkVKCC7Bt9PiPKbsvM4hZayf629jO4NXeVcCu3fL
mZ3O/TiH/eG+dULIbzsGWbWV4wubEPccvcjGdu4fJujvoua/89HgT4JUhcuhela8
7giORmzNEs62c7+9M12dcxdN5qRODKunr6t15xGiFG27PEq4Mrdq+vjMMlDUPxMa
/Y3Lb0HrApLo6jdJUQy7k7HcOTzx9u3sdXh/ukqWvwBhL3Jw/1D7Jr3GKHMqf7Nq
Jmprb6tZmuBPpnfvH8sPdvbeSCSpqJnyscPPjrDiIqh2Oe/74XVL+pTtJvcczxZJ
QYuvt/UE/ITmE2rjlA1cfGWWjoLG6QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJo1
Js1AD3aVBH99BtnbGFFwCiCCMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85QTdFRjUyNDBEN0MxMUYxOEZGN0FGRjVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsQBMA0GCSqGSIb3DQEB
CwUAA4IBAQC/OFvS/p9RFO/q99wV/LnpQCi8WezftSA7jee0IWiKB2YvGkIXvfZ9
l2SOwfmIBN61el+1JQ7lZf9XfBHe9d7BSVc1gPgvWGkOUCrS31xj8kYpzRr+EDf1
O4iIphFv7Q5PKecRyLjZ25TbnQuxrqbxBh1lA3JAFh+HNf+ozH6sXxYynYrM86fD
0uyr3tkZPeDn0kX69Yf7nkutMbqZJDdOHZTfYUsxz0Fk6538BH8lKH+rHg4fFmO2
ckR5IsK3Qge4xFZD+eZOy7wE984xH61D21ysVr2QJel1Jjovf2ZDbauQNDdOfvmq
Ezo3gvyJGeoyh8PKoquqke+ickI1YYnm
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:36:28 2026 by rpki-client