Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1D56EEA0BDB11F1AC6E91F5DAE4EC9C.roa
File: A1D56EEA0BDB11F1AC6E91F5DAE4EC9C.roa (raw, json)
Hash identifier: MvkGLvz6riMWbbsubJtsAYaNTt0K4wemjcOGa/wq7fw=
Subject key identifier: 96:F7:18:E2:F4:B5:F6:D9:11:03:4E:95:B6:C7:90:7C:D8:3C:65:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B9FD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1D56EEA0BDB11F1AC6E91F5DAE4EC9C.roa
Signing time: Tue 17 Feb 2026 08:35:37 +0000
ROA not before: Tue 17 Feb 2026 08:35:30 +0000
ROA not after: Tue 24 Mar 2026 08:35:30 +0000
asID: 214432
IP address blocks: 154.89.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113149 (0x1b9fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 17 08:35:30 2026 GMT
Not After : Mar 24 08:35:30 2026 GMT
Subject: CN=69942859-9678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d3:a2:66:b8:0e:b0:b5:77:3d:92:87:7d:87:
48:e0:02:2b:b2:b1:59:b9:7d:95:60:42:0a:9d:f9:
a2:1f:6f:be:cd:c6:4a:f2:1e:66:85:36:e7:d1:e8:
ed:8e:53:a5:88:a4:8d:e8:67:80:28:89:b2:9a:59:
f6:54:bf:ea:4e:db:ec:ef:84:6e:86:0f:00:9b:44:
fb:07:8a:20:80:4e:8b:03:57:93:94:b9:bd:54:f3:
eb:04:53:52:16:51:fe:0d:66:72:98:63:ec:e4:02:
41:4b:4e:a4:c4:ff:62:8d:3b:79:15:56:01:4b:17:
7e:85:af:4a:6f:c3:1e:7f:c5:ef:ed:2d:02:7e:77:
12:76:a9:92:d7:30:dd:89:71:f3:20:b7:ff:1b:aa:
90:c8:42:5d:b5:32:9b:ef:80:ec:ba:e3:8c:95:60:
25:a6:d9:9d:03:ad:53:68:2e:33:b2:48:4f:b1:82:
5b:e5:c9:a6:fb:f7:c4:c8:ba:c3:f8:a1:58:bd:fa:
39:93:90:06:5a:ab:65:02:8c:c9:82:e2:2b:cc:ab:
f4:7c:fc:a9:75:34:1a:97:f3:ff:7c:f7:c4:16:82:
e6:c4:35:eb:75:5e:4e:c3:9f:4d:dc:11:de:b5:ff:
43:2b:89:29:04:fb:4c:4e:31:11:77:8f:2d:b1:83:
58:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F7:18:E2:F4:B5:F6:D9:11:03:4E:95:B6:C7:90:7C:D8:3C:65:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1D56EEA0BDB11F1AC6E91F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.194.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:3d:08:5d:cc:cf:11:ad:c3:f9:f8:45:19:ba:23:e1:11:3f:
0b:79:12:27:ca:1d:82:af:70:83:d9:cc:17:e9:6d:b4:77:54:
3a:9c:00:61:d6:9e:2d:ad:ff:1f:f7:f3:eb:f3:68:9b:c9:a3:
e3:01:ab:76:4c:af:6c:dd:a2:93:42:e9:f4:1c:d4:8a:61:a3:
8b:c7:08:9e:88:85:53:ff:dd:40:ec:55:b7:78:de:21:4d:38:
52:67:2b:0f:51:eb:01:c2:07:a6:ef:46:04:99:11:3b:7b:4d:
5c:49:1a:0e:0a:4b:ab:70:47:9d:e6:9f:5c:62:09:1e:ba:26:
cb:b8:36:0f:81:4d:1f:58:31:85:7f:7c:68:3a:12:f8:de:77:
e1:da:2f:e4:61:20:4f:2a:9a:14:b8:07:fa:15:20:42:bc:29:
17:c5:ac:30:f1:f3:f4:96:32:59:e2:45:2a:61:d8:ad:78:30:
e2:6e:e6:35:ce:8f:3c:83:11:0f:e0:b2:c7:08:6a:e3:41:1a:
9a:71:9b:27:7b:63:f0:32:0c:bc:a6:58:60:c4:78:d8:6d:f0:
3b:98:a1:24:d7:4d:9c:04:67:98:c9:c2:e9:c0:31:2b:e7:77:
a8:f0:f4:b2:93:65:86:4f:c0:a0:aa:58:c9:02:10:8d:0a:fa:
51:c5:ae:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:37 2026 by rpki-client