Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF44CAFA13D611F1BF994E7BDAE4EC9C.roa
File: AF44CAFA13D611F1BF994E7BDAE4EC9C.roa (raw, json)
Hash identifier: m753lCOKWobNKlzGLsfHDhVamcRkEKfaidBh6R9VU08=
Subject key identifier: 13:D9:A3:DA:E5:9A:57:67:D4:F2:2F:0A:10:E3:37:B8:F2:09:BB:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC52
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF44CAFA13D611F1BF994E7BDAE4EC9C.roa
Signing time: Fri 27 Feb 2026 12:20:21 +0000
ROA not before: Fri 27 Feb 2026 12:20:15 +0000
ROA not after: Sat 14 Mar 2026 12:20:15 +0000
asID: 54801
IP address blocks: 154.198.9.0/24 maxlen: 24
154.198.10.0/24 maxlen: 24
154.200.241.0/24 maxlen: 24
154.222.146.0/23 maxlen: 24
154.223.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113746 (0x1bc52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 12:20:15 2026 GMT
Not After : Mar 14 12:20:15 2026 GMT
Subject: CN=69a18c05-27db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3f:1f:4e:c4:9d:70:14:f4:a1:e6:5a:2d:85:
ab:de:27:2e:c0:32:ef:31:01:f9:29:23:bd:b7:12:
54:5d:ed:40:af:b4:49:ac:36:c4:ae:e0:c0:49:14:
38:4b:df:ed:7b:5d:d8:68:5f:95:1e:5e:e8:99:4e:
36:5d:df:a7:99:3d:6b:b1:75:a7:a0:64:09:35:fd:
07:98:cf:86:3f:3d:a1:39:8d:6b:04:d4:45:de:6d:
eb:eb:7d:a8:47:0e:b3:4c:b7:47:2e:b1:2b:de:3f:
07:a1:a0:ef:f6:4d:6c:fe:fc:1a:81:b5:88:3d:95:
d3:39:76:95:4e:18:fd:be:21:21:6a:2f:1e:23:15:
ae:d6:6b:12:50:c1:5f:41:9e:f4:c6:7a:ed:9e:67:
d4:2f:74:93:b0:c6:59:59:fb:0d:36:c0:6b:76:62:
e9:67:78:b6:e4:70:a9:c6:96:b2:61:11:df:bd:f3:
fe:e6:07:d1:21:ce:72:a6:d7:63:17:e5:49:43:63:
cd:34:b3:0b:6c:01:2c:55:00:29:76:41:df:83:a6:
ed:02:f4:39:05:9b:ed:24:14:e7:02:f1:a8:1d:e9:
9f:2e:18:2f:57:72:7f:af:2f:e7:79:ac:65:28:f1:
3a:9c:82:2c:c2:c4:8a:22:69:71:f1:fd:b5:fd:5d:
e0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D9:A3:DA:E5:9A:57:67:D4:F2:2F:0A:10:E3:37:B8:F2:09:BB:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF44CAFA13D611F1BF994E7BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.9.0-154.198.10.255
154.200.241.0/24
154.222.146.0/23
154.223.230.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:b8:ff:dc:e3:db:98:2f:9b:a4:e4:8c:62:b8:14:4d:4b:1c:
9f:9d:96:19:10:c6:79:b2:23:55:2a:c6:c3:f0:a8:94:0c:84:
5e:25:0d:9f:16:45:43:d7:b5:74:3d:e7:ae:d6:c9:7d:4f:d7:
01:4f:a4:b8:b9:db:1c:00:6d:e0:3a:c8:ee:a1:5b:42:e4:66:
0a:b7:66:a1:5e:84:18:d2:30:6d:d3:80:4c:71:22:11:39:6b:
f9:9b:e2:50:18:e2:01:1f:bf:84:eb:d1:b9:76:88:8a:40:fd:
c3:de:ae:e7:b2:f7:e7:97:de:c9:a6:0b:be:7f:14:bd:86:a7:
23:df:25:89:5a:e9:e9:37:45:1c:41:50:7d:a6:74:04:b3:86:
db:48:62:ff:86:7c:38:3b:12:23:b0:c3:3e:96:6c:de:0b:1a:
7e:e3:b7:64:78:77:72:2d:25:2f:12:34:0f:87:ba:cc:b2:07:
d1:87:ba:be:ad:b7:d2:aa:76:49:06:d7:fa:7d:04:53:83:0c:
10:4a:53:bf:b1:0d:94:44:f7:94:1d:d2:51:5f:7f:c9:84:bb:
40:18:3f:e7:a7:5d:b7:f2:c4:cf:7d:bc:70:67:6d:04:1b:35:
96:d7:e7:24:94:d3:8c:95:19:3e:be:65:8b:fb:6c:4f:f3:b9:
bd:82:21:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:52 2026 by rpki-client