Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7F589C212DC11F1B890FE80DAE4EC9C.roa
File: C7F589C212DC11F1B890FE80DAE4EC9C.roa (raw, json)
Hash identifier: +1jtmvkwPZ2F+faeKR87Fp4eH17wfgYEte/TxhbcHhY=
Subject key identifier: 0C:92:A5:02:C9:FC:EF:9F:F2:CD:1F:67:A7:51:A3:9C:AC:3F:26:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BBD4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7F589C212DC11F1B890FE80DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 06:31:28 +0000
ROA not before: Thu 26 Feb 2026 06:31:24 +0000
ROA not after: Sun 29 Mar 2026 06:31:24 +0000
asID: 214143
IP address blocks: 154.82.174.0/23 maxlen: 24
154.82.176.0/23 maxlen: 24
154.82.178.0/23 maxlen: 24
154.82.180.0/24 maxlen: 24
154.93.1.0/24 maxlen: 24
154.93.3.0/24 maxlen: 24
154.93.26.0/24 maxlen: 24
154.94.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113620 (0x1bbd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 26 06:31:24 2026 GMT
Not After : Mar 29 06:31:24 2026 GMT
Subject: CN=699fe8c0-3ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:90:8f:27:d1:97:9c:b5:0c:53:e1:23:ee:6b:
7c:0c:74:53:07:68:11:1d:bd:a7:91:4b:44:e5:61:
f0:be:5f:78:14:9c:7b:18:2a:7f:3a:4d:5e:f8:e8:
ef:3d:44:97:f5:db:74:45:90:19:55:31:2d:24:01:
fc:5f:08:c4:d0:22:35:97:20:4e:2c:07:6c:cb:9f:
10:82:3c:4a:1b:c1:06:1d:1f:9f:a9:e2:28:7c:2b:
a7:98:f1:32:23:11:de:0f:4c:f3:2c:ba:f1:43:f5:
3d:71:34:2f:8a:d6:38:14:1c:ad:02:16:e6:50:76:
7f:9e:9a:cf:9b:10:b4:70:66:84:51:5c:f6:c7:0f:
05:32:d3:b2:de:35:6e:cd:98:89:31:59:d9:3a:49:
93:eb:f9:2f:0f:32:1b:2b:da:8d:33:f2:b3:34:48:
df:82:f4:88:7f:fe:80:b9:f5:fc:d8:0d:c6:60:8f:
b6:1c:8c:4b:59:f4:48:bd:61:3d:ce:db:18:29:48:
2d:40:0e:d6:3a:0a:b9:f9:30:a1:59:c8:7a:82:2f:
b3:a3:92:b5:3a:25:1d:d8:8c:d4:1f:fb:63:8a:d5:
2b:d0:6d:e9:2a:c7:a3:95:48:9a:25:34:dc:e6:82:
1f:db:b8:45:9a:17:c2:5e:f1:24:55:05:3b:26:39:
d5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:92:A5:02:C9:FC:EF:9F:F2:CD:1F:67:A7:51:A3:9C:AC:3F:26:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7F589C212DC11F1B890FE80DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.174.0-154.82.180.255
154.93.1.0/24
154.93.3.0/24
154.93.26.0/24
154.94.35.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:15:a7:d5:a6:df:1a:2a:9b:72:f3:95:ef:98:a3:19:73:9a:
d2:a0:4a:ea:6e:59:43:39:c6:ae:da:91:34:e8:b2:c4:7b:8f:
13:5a:32:45:58:b6:08:f8:90:cd:fd:de:70:c3:c8:d0:9a:f1:
62:ff:14:16:92:c2:06:58:06:04:41:35:2d:4d:24:6e:ec:0e:
c5:ca:79:6a:4e:79:c2:23:98:a6:0a:30:53:68:c6:34:05:05:
71:2f:17:8f:8a:24:e7:64:5b:93:0e:bf:65:31:c6:d5:a7:44:
93:0c:e8:ad:54:73:aa:1a:11:5f:bd:e0:e4:2e:ca:ea:2b:86:
c4:dc:28:72:18:7a:0f:f2:26:03:54:74:d7:80:62:39:f4:d0:
1a:8d:41:10:61:ad:1b:5f:0d:d7:28:69:18:44:95:0c:11:dc:
dc:f8:45:81:87:f7:7f:d1:ab:50:6b:ec:1a:9f:0d:e0:ee:ad:
91:ab:b8:b1:81:3a:b5:be:a7:f0:bb:34:f6:c4:e1:62:50:b3:
b2:79:20:bf:6c:cb:04:1d:d3:5b:46:85:31:5a:63:41:0d:8d:
91:f2:a8:63:02:6a:d3:5d:29:14:67:84:fe:c9:bd:27:5a:a4:
99:33:72:0e:90:54:41:8e:7b:04:2f:0f:f7:85:71:70:93:9d:
56:c1:df:6e
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgIDAbvUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjI2MDYzMTI0WhcNMjYwMzI5MDYzMTI0WjAYMRYw
FAYDVQQDEw02OTlmZThjMC0zYWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0pCPJ9GXnLUMU+Ej7mt8DHRTB2gRHb2nkUtE5WHwvl94FJx7GCp/Ok1e
+OjvPUSX9dt0RZAZVTEtJAH8XwjE0CI1lyBOLAdsy58QgjxKG8EGHR+fqeIofCun
mPEyIxHeD0zzLLrxQ/U9cTQvitY4FBytAhbmUHZ/nprPmxC0cGaEUVz2xw8FMtOy
3jVuzZiJMVnZOkmT6/kvDzIbK9qNM/KzNEjfgvSIf/6AufX82A3GYI+2HIxLWfRI
vWE9ztsYKUgtQA7WOgq5+TChWch6gi+zo5K1OiUd2IzUH/tjitUr0G3pKsejlUia
JTTc5oIf27hFmhfCXvEkVQU7JjnVNQIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFAyS
pQLJ/O+f8s0fZ6dRo5ysPyaoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DN0Y1ODlDMjEyREMxMUYxQjg5MEZFODBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBAGaUq4DBACaUrQDBACa
XQEDBACaXQMDBACaXRoDBACaXiMwDQYJKoZIhvcNAQELBQADggEBAMQVp9Wm3xoq
m3Lzle+YoxlzmtKgSupuWUM5xq7akTTossR7jxNaMkVYtgj4kM393nDDyNCa8WL/
FBaSwgZYBgRBNS1NJG7sDsXKeWpOecIjmKYKMFNoxjQFBXEvF4+KJOdkW5MOv2Ux
xtWnRJMM6K1Uc6oaEV+94OQuyuorhsTcKHIYeg/yJgNUdNeAYjn00BqNQRBhrRtf
DdcoaRhElQwR3Nz4RYGH93/Rq1Br7BqfDeDurZGruLGBOrW+p/C7NPbE4WJQs7J5
IL9sywQd01tGhTFaY0ENjZHyqGMCatNdKRRnhP7JvSdapJkzcg6QVEGOewQvD/eF
cXCTnVbB324=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:46 2026 by rpki-client