Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B664CBA0E2D11F1BE42BDBEDAE4EC9C.roa
File: 9B664CBA0E2D11F1BE42BDBEDAE4EC9C.roa (raw, json)
Hash identifier: /7i4+k/IPPpzKOFOwuX5dQzQHmv6BhvoPjZ5k6Du9cY=
Subject key identifier: 8D:0F:08:9B:B8:40:90:39:64:B4:D3:C6:4E:22:8E:60:3E:EF:A7:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA3C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B664CBA0E2D11F1BE42BDBEDAE4EC9C.roa
Signing time: Fri 20 Feb 2026 07:27:27 +0000
ROA not before: Fri 20 Feb 2026 07:27:22 +0000
ROA not after: Fri 13 Mar 2026 07:27:22 +0000
asID: 25818
IP address blocks: 154.91.204.0/22 maxlen: 24
154.91.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113212 (0x1ba3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 07:27:22 2026 GMT
Not After : Mar 13 07:27:22 2026 GMT
Subject: CN=69980cdf-03cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b2:7d:1e:5b:ac:b2:05:1a:75:7a:4b:49:ca:
ac:12:17:5b:7d:e4:16:0b:ec:4c:1d:d3:91:3b:f1:
49:66:48:ae:33:4f:9a:fc:62:40:ea:97:2b:43:7f:
c1:c5:ba:d1:65:13:76:40:14:5b:86:66:c0:94:65:
45:cf:4b:2b:df:8a:96:0c:9a:ea:5a:2f:bb:54:64:
02:2a:8a:4c:97:19:be:b7:03:b9:fd:a7:d9:e8:77:
9e:a1:f9:95:0d:af:b6:17:50:42:ac:ed:05:12:5b:
ff:6b:ef:e5:58:3d:aa:d3:e3:4b:65:69:7f:b1:18:
1a:e4:81:37:ba:b1:7b:6a:c4:2b:28:6c:23:5c:9d:
a9:1a:7f:f4:6c:65:db:f0:7e:47:97:7e:1d:65:c5:
c8:e9:64:e8:77:0f:62:eb:2b:1f:d3:5c:60:e6:14:
5c:c5:f0:fd:1f:1e:b3:24:cb:24:d8:b5:64:f9:4d:
4b:01:bf:40:a9:fe:25:83:b8:ff:a3:42:d0:90:78:
6d:fa:c3:7d:8e:3e:8e:94:69:6b:e8:be:58:17:f2:
4e:1f:60:4d:0c:ae:3a:ad:33:e4:b3:3f:ed:44:73:
0a:71:b7:f3:59:bc:9a:87:73:e4:0d:3b:44:5d:46:
2e:c0:83:b2:8e:4b:a1:8a:1c:3b:3a:ed:e6:8a:af:
cf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0F:08:9B:B8:40:90:39:64:B4:D3:C6:4E:22:8E:60:3E:EF:A7:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B664CBA0E2D11F1BE42BDBEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.204.0-154.91.223.255
Signature Algorithm: sha256WithRSAEncryption
a9:3e:4f:58:b6:78:3a:c8:96:93:ad:03:15:04:c4:70:52:5d:
b2:96:ce:b1:84:f2:ca:b9:06:3b:02:69:2a:77:a1:62:3d:54:
e9:7a:46:64:19:40:81:7f:82:d1:5d:42:5b:cc:a9:a2:b9:52:
cb:ed:48:93:a5:21:76:b8:7a:97:9d:44:13:32:48:30:9c:36:
87:44:53:3d:4d:6d:e5:56:a4:14:73:ae:29:39:61:1c:cc:d4:
10:96:f0:c9:6e:1b:be:ee:bf:22:e6:b5:56:8a:78:5a:14:9a:
42:b5:bd:5c:b7:36:39:42:72:da:7b:47:df:5d:55:b2:b2:b2:
69:b1:05:c3:83:f3:a3:56:05:78:ef:92:51:57:6f:e9:4f:27:
22:7e:10:3c:fa:33:19:6a:10:19:d9:fe:f5:31:c0:d7:12:e9:
73:f6:51:4c:fd:45:e6:fc:35:e5:44:8b:dc:91:98:a1:ca:72:
42:db:87:99:8a:a6:a4:d2:0e:65:1a:8f:cc:e1:bd:34:0e:cc:
c5:32:6f:9b:b7:3e:cb:70:01:ef:29:59:fb:f9:a1:50:bc:85:
ad:80:f3:8d:e8:a5:f9:b2:c6:9a:e0:62:32:61:b1:43:27:f2:
3f:17:ba:fc:2f:62:8b:2d:51:71:5f:48:f3:0c:e3:6a:c6:06:
8e:2c:91:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:14 2026 by rpki-client