Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B96FD6F4FC3011F0BBC94CAADAE4EC9C.roa
File: B96FD6F4FC3011F0BBC94CAADAE4EC9C.roa (raw, json)
Hash identifier: 4rGdDGiZLDlwiVIQZofL5rK7KofQz9+ArNgAS4HG2/Q=
Subject key identifier: EA:1F:67:BD:F9:8E:B0:1A:C8:A4:2A:70:40:08:1C:31:79:FD:3A:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B711
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B96FD6F4FC3011F0BBC94CAADAE4EC9C.roa
Signing time: Wed 28 Jan 2026 10:04:25 +0000
ROA not before: Wed 28 Jan 2026 10:04:20 +0000
ROA not after: Wed 04 Mar 2026 10:04:20 +0000
asID: 395793
IP address blocks: 154.200.2.0/23 maxlen: 24
154.200.4.0/23 maxlen: 24
154.200.6.0/23 maxlen: 24
154.200.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112401 (0x1b711)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 10:04:20 2026 GMT
Not After : Mar 4 10:04:20 2026 GMT
Subject: CN=6979df29-79de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ef:fb:9c:9f:19:b0:80:53:bb:d1:d5:fb:4e:
c5:24:c8:d8:1f:fc:30:8b:0e:25:05:c8:e8:80:5c:
cf:d8:8d:a0:9b:76:1a:cb:11:b8:4b:0d:37:30:9d:
40:89:37:3c:15:de:ff:8a:da:2d:fe:16:90:32:02:
d7:1f:13:8d:fb:29:dd:1a:0c:8c:e9:49:fd:c2:b8:
3a:2f:fa:b0:3e:08:8e:95:5e:71:30:ec:a4:7b:99:
b1:b2:1b:be:92:52:2f:5c:82:1f:58:df:21:83:24:
49:0d:14:21:0a:d5:a7:e6:c8:5c:76:fd:76:0b:9e:
5a:86:ea:4b:df:2b:3e:c7:50:88:c5:ab:f0:01:3e:
cc:4f:bf:90:02:90:c0:b7:7f:05:68:1b:a8:c1:15:
8f:f9:ce:16:82:79:ab:72:95:d3:84:21:03:9a:d8:
fe:46:fd:27:8d:83:76:20:a5:c8:19:83:b0:97:b9:
67:13:03:0c:1c:bb:e5:b5:17:98:b8:97:df:74:9f:
55:8d:67:be:6a:64:f8:fa:28:fe:b1:f5:b9:5e:8e:
ea:5c:1a:a8:c1:eb:34:0d:f8:96:0b:6c:19:c7:eb:
89:a5:5c:d5:8e:3b:06:1f:fe:a5:02:be:b4:f2:55:
5c:d0:e2:c9:6a:49:02:33:4e:5d:56:2e:5a:0c:e8:
e4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1F:67:BD:F9:8E:B0:1A:C8:A4:2A:70:40:08:1C:31:79:FD:3A:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B96FD6F4FC3011F0BBC94CAADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.2.0-154.200.7.255
154.200.104.0/22
Signature Algorithm: sha256WithRSAEncryption
68:90:f7:bf:ac:29:07:7c:81:d1:d6:e1:3f:70:ed:d8:8c:4d:
ea:a7:f1:70:ea:c5:7b:f0:d3:60:01:99:46:d7:03:b6:25:1e:
e2:32:17:8e:d5:91:42:02:3f:e1:31:24:30:51:51:0e:9b:07:
2d:e4:86:d4:2a:93:3b:81:10:72:65:1f:e1:73:71:a8:22:75:
6c:77:47:c6:ac:e9:28:24:ea:cb:5d:69:27:d8:4b:9c:aa:d0:
94:80:15:aa:63:40:56:a5:14:60:ec:7b:46:98:04:3e:07:cb:
11:9d:66:c5:1c:b3:13:8a:ac:4b:38:98:ec:47:e8:02:c7:a0:
03:08:1e:af:0e:bf:ed:66:ed:05:b6:09:8f:4b:37:57:14:48:
1f:80:40:b9:af:8c:23:34:77:9d:80:b2:d5:4e:3e:e7:07:16:
e9:5e:a4:6e:53:81:da:7d:a9:56:7a:17:fa:c8:0c:94:24:c7:
b1:22:68:9e:20:82:f5:de:e0:60:77:a4:49:a0:d9:06:31:47:
d4:ab:9a:1a:34:7c:34:ac:14:ac:60:56:a4:7c:48:db:52:2a:
95:ea:26:e2:d2:47:00:ca:ab:31:ea:77:0c:e8:ed:d7:54:84:
55:84:1f:cf:e4:92:fc:7c:c2:5a:e2:6a:fd:b9:b0:d9:bc:8c:
fe:cd:4b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:04:37 2026 by rpki-client