Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CBC178A00CB11F1B0F5B57DDAE4EC9C.roa
File: 9CBC178A00CB11F1B0F5B57DDAE4EC9C.roa (raw, json)
Hash identifier: cnudG9PDz7Xmt0sr6dYh/U/clN7wupQ2e3IrymnF5xQ=
Subject key identifier: 1E:51:23:6B:5F:2D:C7:37:2A:BD:63:F0:11:3A:65:50:DE:1B:63:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B858
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CBC178A00CB11F1B0F5B57DDAE4EC9C.roa
Signing time: Tue 03 Feb 2026 06:43:14 +0000
ROA not before: Tue 03 Feb 2026 06:43:09 +0000
ROA not after: Sun 08 Mar 2026 06:43:09 +0000
asID: 45194
IP address blocks: 154.84.214.0/24 maxlen: 24
154.84.215.0/24 maxlen: 24
154.84.216.0/24 maxlen: 24
154.84.217.0/24 maxlen: 24
154.84.218.0/24 maxlen: 24
154.84.219.0/24 maxlen: 24
154.84.220.0/24 maxlen: 24
154.84.221.0/24 maxlen: 24
154.84.222.0/24 maxlen: 24
154.84.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112728 (0x1b858)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 3 06:43:09 2026 GMT
Not After : Mar 8 06:43:09 2026 GMT
Subject: CN=69819901-7389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7a:56:8d:30:10:d4:cf:b0:a0:67:b1:68:58:
34:f4:e2:89:bb:f7:a8:c5:d5:f3:cb:22:54:77:00:
6a:c6:55:90:6e:eb:ba:bf:52:7d:b4:66:96:96:8f:
01:39:99:a7:bf:59:a3:00:97:26:b8:ea:6a:f6:d0:
f4:6d:8e:59:07:f8:3c:7b:be:65:89:80:93:41:8f:
da:d9:45:38:c4:b1:d4:c5:ef:3c:a2:ec:c3:7b:86:
59:38:f2:93:46:56:26:b8:a5:3e:61:02:76:67:97:
5a:5c:e2:5f:b1:66:5e:4f:80:78:fd:f2:26:f4:d8:
ea:8c:0e:81:e4:0c:fb:de:43:da:07:4b:67:92:e4:
52:de:a9:8e:81:dc:3d:38:6c:5a:d9:aa:08:2c:e1:
c5:d8:48:0d:99:02:60:91:0e:91:53:cf:ae:72:59:
ae:f3:4d:57:d1:90:c4:ff:0c:47:48:39:2c:9e:dd:
c3:9d:93:2f:c5:f3:80:3a:f4:40:26:5a:54:16:c7:
1e:99:59:ce:17:e0:1c:1d:a7:b9:5e:53:45:f8:6e:
f2:71:53:ab:67:ba:20:de:b8:e8:a5:69:ba:e9:71:
5b:d0:11:29:22:a9:e5:46:b1:69:a1:e4:0b:5d:8e:
ca:2c:95:73:78:59:7d:4b:4a:da:fb:fd:7d:b9:10:
a3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:51:23:6B:5F:2D:C7:37:2A:BD:63:F0:11:3A:65:50:DE:1B:63:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CBC178A00CB11F1B0F5B57DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.214.0-154.84.222.255
154.84.224.0/24
Signature Algorithm: sha256WithRSAEncryption
65:42:fa:0f:e3:96:8e:1d:b7:ab:3a:6d:9d:8c:bf:28:a9:eb:
ac:00:0a:d7:d2:cc:ad:92:31:31:59:6d:07:c2:08:0e:bf:5e:
e2:db:6e:6b:5c:d4:5a:16:03:ce:f1:67:76:fb:fe:f1:73:e6:
db:4c:dd:47:51:f1:97:89:f3:8d:3c:2f:f9:6d:10:83:27:70:
d6:f3:8d:78:04:0d:62:31:c9:50:29:9b:33:9a:2d:c0:7c:b5:
55:7d:d8:49:ab:53:96:9a:d7:2f:24:9c:09:80:e7:07:dd:ad:
c6:1f:a3:82:54:bc:c7:15:1b:bb:64:51:c4:77:12:84:8c:c3:
f5:00:12:5a:6f:95:6d:15:39:64:97:17:03:3c:4f:65:7d:cd:
20:f8:7b:da:05:03:1f:c2:4b:e2:5e:b3:af:19:94:ba:bc:d9:
bf:a5:27:d6:79:1b:eb:55:52:ca:a1:05:ee:bb:94:d3:34:75:
6f:57:3a:ef:72:60:0e:84:14:bd:75:c0:47:30:8d:12:af:2e:
f7:9e:9e:78:d1:86:50:0d:ed:e9:d2:08:df:a6:31:ee:68:3b:
27:d5:18:75:ae:1f:5e:7b:14:be:9b:5c:78:a5:59:f8:99:ab:
d8:b4:5e:00:58:85:cc:91:7e:77:74:e2:a4:2c:d6:eb:15:ed:
62:f1:76:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:29 2026 by rpki-client