Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C29FF5C20A5B11F1B7348CB8DAE4EC9C.roa
File: C29FF5C20A5B11F1B7348CB8DAE4EC9C.roa (raw, json)
Hash identifier: Zz4gQU/gxzgTleEn3sAdbUqZwHyxiddH0EjiZYKxVKw=
Subject key identifier: 9E:5F:75:CE:BF:A2:58:FB:D7:AE:9B:24:25:E2:6E:28:4C:19:91:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B976
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C29FF5C20A5B11F1B7348CB8DAE4EC9C.roa
Signing time: Sun 15 Feb 2026 10:47:45 +0000
ROA not before: Sun 15 Feb 2026 10:47:39 +0000
ROA not after: Thu 15 Feb 2029 10:47:39 +0000
asID: 17561
IP address blocks: 154.91.204.0/24 maxlen: 24
154.91.205.0/24 maxlen: 24
154.91.206.0/24 maxlen: 24
154.91.207.0/24 maxlen: 24
154.91.208.0/24 maxlen: 24
154.91.209.0/24 maxlen: 24
154.91.210.0/24 maxlen: 24
154.91.211.0/24 maxlen: 24
154.91.212.0/24 maxlen: 24
154.91.213.0/24 maxlen: 24
154.91.214.0/24 maxlen: 24
154.91.215.0/24 maxlen: 24
154.91.216.0/24 maxlen: 24
154.91.217.0/24 maxlen: 24
154.91.218.0/24 maxlen: 24
154.91.219.0/24 maxlen: 24
154.91.220.0/24 maxlen: 24
154.91.221.0/24 maxlen: 24
154.91.222.0/24 maxlen: 24
154.91.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113014 (0x1b976)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 15 10:47:39 2026 GMT
Not After : Feb 15 10:47:39 2029 GMT
Subject: CN=6991a451-c21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:85:e4:d5:f6:be:7f:5f:4e:02:09:90:4a:92:
8b:58:47:b4:02:c0:71:11:d3:4b:33:20:6f:96:fd:
5f:d5:8d:22:94:a0:aa:6e:d3:d9:6f:1b:8c:9b:50:
d7:65:89:ac:5b:33:62:84:5c:34:99:87:65:7b:54:
73:61:02:be:ca:cd:89:06:9d:d9:2e:89:a2:ad:e0:
8f:cf:c8:93:e8:32:92:b6:13:3a:9d:f5:fe:da:a9:
59:ee:ea:81:b0:be:2e:c9:5b:5b:0e:f9:59:53:fc:
c2:98:b5:82:d8:10:47:33:48:eb:9a:b0:98:06:af:
33:eb:4e:b6:57:52:92:f6:65:53:73:dd:dd:fa:e6:
17:53:b3:a4:32:ec:8c:2f:93:43:94:b9:d4:54:12:
80:70:10:31:15:7e:d7:a9:42:6e:7b:09:b3:b1:31:
2c:84:92:d2:5b:83:eb:f3:d3:f2:7c:55:61:88:3d:
5b:f0:c8:f6:be:3e:25:a9:b8:02:84:cb:86:03:24:
7b:d6:27:1b:c7:d7:1e:e6:93:98:2e:3a:0f:d0:37:
d2:60:e1:01:46:fd:50:61:7e:e1:7f:6c:de:d6:7f:
1a:86:bb:85:18:b6:2a:7d:a5:6c:ca:10:ec:ca:d2:
fc:ed:a3:a5:d6:26:bf:63:47:0f:69:cb:0a:3c:9b:
bb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5F:75:CE:BF:A2:58:FB:D7:AE:9B:24:25:E2:6E:28:4C:19:91:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C29FF5C20A5B11F1B7348CB8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.204.0-154.91.223.255
Signature Algorithm: sha256WithRSAEncryption
6b:69:c1:6f:95:cb:e9:21:39:ba:6a:c3:ae:67:17:bf:20:66:
56:1f:1b:70:9e:0f:41:aa:e4:e5:3d:cd:0d:6f:dc:bf:90:1b:
3c:9d:80:9c:db:fe:1d:cb:bf:dc:8f:c3:17:45:6f:e5:39:d7:
56:cd:02:a2:77:8e:fa:c5:17:81:f7:0f:2e:eb:6d:7b:42:2a:
a3:3d:19:c0:de:38:9c:60:f5:73:11:ad:4b:14:fb:39:eb:70:
99:3b:46:5a:34:98:82:9e:c7:84:d9:98:2f:78:e8:b4:81:89:
64:4f:0e:58:45:a1:11:1d:fd:62:73:4c:18:78:ed:ed:06:45:
88:79:8f:e9:68:0c:aa:b9:1a:a1:0b:99:7e:0f:65:0f:04:c5:
d5:a0:b4:d8:f4:ba:40:86:53:4f:32:b4:d0:82:74:bd:bd:dd:
e0:0f:55:bf:7c:59:87:51:58:28:39:ff:71:20:ec:90:5d:ba:
94:1e:d3:a8:11:96:81:3a:f6:e8:87:67:e3:db:7f:41:f5:3d:
9f:d7:8d:2a:fb:ea:6a:10:2b:61:70:ec:8c:3b:0b:1b:48:10:
a4:0f:0d:5e:ed:97:e3:83:c2:50:02:a9:b7:27:88:43:2f:ed:
f5:c0:32:79:f8:05:cc:c7:c2:55:69:1c:75:6f:6b:ab:4b:55:
45:f3:ca:58
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAbl2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjE1MTA0NzM5WhcNMjkwMjE1MTA0NzM5WjAYMRYw
FAYDVQQDEw02OTkxYTQ1MS1jMjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwoXk1fa+f19OAgmQSpKLWEe0AsBxEdNLMyBvlv1f1Y0ilKCqbtPZbxuM
m1DXZYmsWzNihFw0mYdle1RzYQK+ys2JBp3ZLomireCPz8iT6DKSthM6nfX+2qlZ
7uqBsL4uyVtbDvlZU/zCmLWC2BBHM0jrmrCYBq8z6062V1KS9mVTc93d+uYXU7Ok
MuyML5NDlLnUVBKAcBAxFX7XqUJuewmzsTEshJLSW4Pr89PyfFVhiD1b8Mj2vj4l
qbgChMuGAyR71icbx9ce5pOYLjoP0DfSYOEBRv1QYX7hf2ze1n8ahruFGLYqfaVs
yhDsytL87aOl1ia/Y0cPacsKPJu73QIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFJ5f
dc6/olj7166bJCXibihMGZHAMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMjlGRjVDMjBBNUIxMUYxQjczNDhDQjhEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKaW8wDBAWaW8AwDQYJ
KoZIhvcNAQELBQADggEBAGtpwW+Vy+khObpqw65nF78gZlYfG3CeD0Gq5OU9zQ1v
3L+QGzydgJzb/h3Lv9yPwxdFb+U511bNAqJ3jvrFF4H3Dy7rbXtCKqM9GcDeOJxg
9XMRrUsU+znrcJk7Rlo0mIKex4TZmC946LSBiWRPDlhFoREd/WJzTBh47e0GRYh5
j+loDKq5GqELmX4PZQ8ExdWgtNj0ukCGU08ytNCCdL293eAPVb98WYdRWCg5/3Eg
7JBdupQe06gRloE69uiHZ+Pbf0H1PZ/XjSr76moQK2Fw7Iw7CxtIEKQPDV7tl+OD
wlACqbcniEMv7fXAMnn4BczHwlVpHHVva6tLVUXzylg=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:47 2026 by rpki-client