Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B0944BC0E6D11F1A9F937C1DAE4EC9C.roa
File: 9B0944BC0E6D11F1A9F937C1DAE4EC9C.roa (raw, json)
Hash identifier: y/hHHmWJR2f8QlGRYvvq/yk+hD+AA1ttCAHzL+HoVuw=
Subject key identifier: AA:AA:F6:C3:55:87:F9:D9:2F:C4:64:F5:1D:0F:9A:9D:F2:AE:7B:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA96
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B0944BC0E6D11F1A9F937C1DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 15:05:34 +0000
ROA not before: Fri 20 Feb 2026 15:05:30 +0000
ROA not after: Thu 04 Jun 2026 15:05:30 +0000
asID: 18229
IP address blocks: 154.210.145.0/24 maxlen: 24
154.210.146.0/24 maxlen: 24
154.210.147.0/24 maxlen: 24
154.210.148.0/24 maxlen: 24
154.210.149.0/24 maxlen: 24
154.210.150.0/24 maxlen: 24
154.210.151.0/24 maxlen: 24
154.210.152.0/24 maxlen: 24
154.210.153.0/24 maxlen: 24
154.210.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113302 (0x1ba96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 15:05:30 2026 GMT
Not After : Jun 4 15:05:30 2026 GMT
Subject: CN=6998783e-f270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7a:5e:13:c2:18:6d:ff:6b:16:f5:61:13:21:
03:cb:af:7a:35:08:fb:84:73:0c:d6:e3:84:e0:59:
e5:33:a9:af:59:5e:0c:39:16:09:7b:99:50:52:f9:
80:46:f7:02:bf:37:47:69:b5:50:c9:f2:a8:28:b4:
49:b6:ca:47:0b:b8:d6:5a:6b:e2:68:16:08:f9:f2:
74:b6:ca:5f:bb:3c:20:ba:e2:cb:31:91:c0:a4:7a:
73:02:3f:5d:37:e2:8c:0f:4a:83:70:71:bc:48:0c:
e1:82:8d:80:e9:20:b0:b9:19:62:86:61:78:29:98:
e4:02:ee:47:66:04:ae:ed:42:a9:5f:7f:dc:bd:e7:
15:e9:0a:73:80:e2:a8:7e:1d:76:3d:89:2a:5a:95:
de:2c:23:b2:f7:bf:ff:46:6e:8f:93:2d:15:47:f4:
fe:d7:7a:14:66:36:bc:c5:d3:53:9a:04:7d:ea:bf:
91:40:a7:3f:3b:0f:f1:aa:2d:05:a4:15:a5:68:ee:
9d:1d:8d:ac:2d:6f:28:70:9a:f6:45:43:0d:3a:cf:
37:88:9d:c6:4d:d6:d5:7f:7d:4d:a4:27:bd:1d:e1:
bf:27:4e:99:9a:64:fa:db:b7:1c:d6:99:e3:ab:bf:
19:db:ea:82:3f:6e:1b:da:fb:be:1f:4f:71:09:12:
4d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AA:F6:C3:55:87:F9:D9:2F:C4:64:F5:1D:0F:9A:9D:F2:AE:7B:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B0944BC0E6D11F1A9F937C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.145.0-154.210.154.255
Signature Algorithm: sha256WithRSAEncryption
1e:52:ba:e7:6c:12:69:08:b1:5f:ce:d1:28:82:59:0a:42:6c:
83:bd:80:5e:11:49:4f:77:0a:19:06:6e:a3:58:be:c9:46:4a:
7b:f1:de:65:07:ff:e6:d4:a9:5b:bb:7e:bb:4e:39:5c:d0:6e:
ee:67:0c:07:3c:38:ab:d4:ac:0f:33:c9:8c:e6:a7:a3:3d:d5:
00:16:95:1f:65:b4:28:32:87:a1:91:ec:53:ca:9f:de:3f:da:
3a:7c:aa:ea:a1:79:63:70:22:05:8c:a1:0a:ea:10:e5:85:1d:
78:4f:69:db:75:09:d7:51:08:fa:b8:45:e5:39:87:26:e1:0c:
40:e6:4b:41:01:a9:39:a3:63:66:ea:47:46:6e:f0:68:ea:00:
04:64:6a:69:be:f2:91:81:fa:2a:c3:ff:e3:94:05:ed:cd:93:
50:65:34:68:18:5f:24:8c:2d:33:42:cc:c9:71:0c:14:01:10:
83:32:e6:22:2f:ff:1e:87:11:56:82:f9:44:4c:f6:c6:83:11:
40:ca:99:16:62:3a:ba:d4:d3:63:29:22:29:6b:ba:b1:01:0b:
ad:03:1c:36:2e:23:56:67:91:16:56:d1:16:6e:cb:a6:e6:fd:
01:42:c9:09:fd:7d:d4:86:58:e6:e3:e6:1b:1b:24:73:a4:4f:
ac:5a:d1:ac
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAbqWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjIwMTUwNTMwWhcNMjYwNjA0MTUwNTMwWjAYMRYw
FAYDVQQDEw02OTk4NzgzZS1mMjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtnpeE8IYbf9rFvVhEyEDy696NQj7hHMM1uOE4FnlM6mvWV4MORYJe5lQ
UvmARvcCvzdHabVQyfKoKLRJtspHC7jWWmviaBYI+fJ0tspfuzwguuLLMZHApHpz
Aj9dN+KMD0qDcHG8SAzhgo2A6SCwuRlihmF4KZjkAu5HZgSu7UKpX3/cvecV6Qpz
gOKofh12PYkqWpXeLCOy97//Rm6Pky0VR/T+13oUZja8xdNTmgR96r+RQKc/Ow/x
qi0FpBWlaO6dHY2sLW8ocJr2RUMNOs83iJ3GTdbVf31NpCe9HeG/J06ZmmT627cc
1pnjq78Z2+qCP24b2vu+H09xCRJNewIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFKqq
9sNVh/nZL8Rk9R0Pmp3yrnuUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85QjA5NDRCQzBFNkQxMUYxQTlGOTM3QzFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACa0pEDBACa0powDQYJ
KoZIhvcNAQELBQADggEBAB5SuudsEmkIsV/O0SiCWQpCbIO9gF4RSU93ChkGbqNY
vslGSnvx3mUH/+bUqVu7frtOOVzQbu5nDAc8OKvUrA8zyYzmp6M91QAWlR9ltCgy
h6GR7FPKn94/2jp8quqheWNwIgWMoQrqEOWFHXhPadt1CddRCPq4ReU5hybhDEDm
S0EBqTmjY2bqR0Zu8GjqAARkamm+8pGB+irD/+OUBe3Nk1BlNGgYXySMLTNCzMlx
DBQBEIMy5iIv/x6HEVaC+URM9saDEUDKmRZiOrrU02MpIilrurEBC60DHDYuI1Zn
kRZW0RZuy6bm/QFCyQn9fdSGWObj5hsbJHOkT6xa0aw=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:43 2026 by rpki-client