Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B920BD2C058F11F1A6777BC2DAE4EC9C.roa
File: B920BD2C058F11F1A6777BC2DAE4EC9C.roa (raw, json)
Hash identifier: mz3fnG8/S6RNgBcGnAoj0GnFWPi3XzAxJcZ8ykP4kvQ=
Subject key identifier: 0A:2D:8C:7D:D7:54:3B:2C:BF:39:A2:FC:74:12:7A:BC:63:77:0A:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B8F2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B920BD2C058F11F1A6777BC2DAE4EC9C.roa
Signing time: Mon 09 Feb 2026 08:17:07 +0000
ROA not before: Mon 09 Feb 2026 08:16:58 +0000
ROA not after: Tue 10 Mar 2026 08:16:58 +0000
asID: 401696
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112882 (0x1b8f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 9 08:16:58 2026 GMT
Not After : Mar 10 08:16:58 2026 GMT
Subject: CN=69899803-30a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c9:6e:d7:22:15:91:e0:9b:1f:d9:05:9c:34:
95:21:d2:31:6b:de:b7:4c:ed:a0:5c:50:65:95:44:
68:ac:ca:37:8a:c6:ff:df:ad:f9:a8:44:e2:05:19:
9b:b7:5f:1d:2e:22:62:4b:db:f6:2a:15:e8:1b:4f:
50:7b:c3:63:42:31:95:7d:35:2f:bd:33:9d:9b:1c:
26:e1:1d:94:7e:2e:2c:e0:fa:27:3d:86:eb:bd:0e:
0b:23:70:08:91:b4:66:33:86:fb:5b:e1:a8:39:45:
84:5b:10:b2:0f:f3:26:0d:c5:54:d9:d3:2c:22:cb:
3e:8c:12:35:05:ee:10:38:54:e7:1c:ab:a8:75:d4:
37:5d:0d:4b:67:3b:88:79:dc:ad:75:7a:94:db:87:
fe:c2:68:7f:76:83:1d:e8:64:46:6e:9f:18:dc:8c:
45:60:b0:2f:74:48:fa:82:3c:e6:45:1a:a4:cb:8f:
0e:a5:79:6c:71:1e:9c:7b:e9:a4:3a:48:a2:c8:57:
0c:db:2f:64:60:2f:69:bc:6c:1c:0c:ab:4c:b2:5c:
2a:e6:61:3a:1b:e4:e0:1b:6a:56:9a:bf:82:98:f6:
8c:4f:73:20:3d:d2:24:a4:a0:86:95:ec:6e:02:24:
d7:d1:2c:ed:80:32:99:46:b2:77:e3:92:c5:39:f9:
99:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2D:8C:7D:D7:54:3B:2C:BF:39:A2:FC:74:12:7A:BC:63:77:0A:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B920BD2C058F11F1A6777BC2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
d3:09:2d:20:fc:4a:a6:81:84:da:46:d7:7f:b2:09:e1:4f:09:
de:0e:79:7c:d7:2c:40:27:79:26:19:6d:b3:e2:f3:1e:f1:b9:
b2:a8:f5:66:f7:d9:7b:0e:17:bb:16:83:53:68:00:7f:a0:dd:
86:88:74:23:a5:f0:ec:38:59:fd:f5:1f:de:2c:60:8e:9f:6a:
c5:37:b9:9b:c9:20:bf:ff:cf:51:ea:4b:3b:bf:3e:9c:58:65:
a0:27:af:66:27:8f:71:22:97:f7:49:2d:c3:fd:69:58:34:42:
e5:e6:c1:5c:4c:b7:67:99:df:9c:b4:d1:17:a2:81:06:ba:15:
8d:08:d9:b1:d1:01:dc:15:30:e0:89:e1:79:e0:0a:ed:d8:18:
3b:09:92:0c:8b:08:2b:3f:e1:29:63:97:18:fa:25:d2:49:b4:
65:21:23:9f:e2:65:30:f7:2e:ce:72:f8:7e:8d:2d:13:bc:59:
ca:77:d2:29:ad:cb:d1:23:d6:91:1f:91:ae:6d:53:67:02:65:
42:8e:03:e8:48:5e:7d:b8:38:59:0c:dd:f4:9c:49:3a:dd:07:
12:20:46:d0:a9:07:73:a7:48:5c:f0:39:73:df:c3:b6:35:15:
d2:86:7a:6e:3b:2c:5a:c1:0e:7c:5d:da:58:8a:7a:bb:9b:b7:
8d:69:b8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:52:36 2026 by rpki-client