Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C96CBEDC0B1211F1AE6E04A1DAE4EC9C.roa
File: C96CBEDC0B1211F1AE6E04A1DAE4EC9C.roa (raw, json)
Hash identifier: 6LItJt/q/zWm5PRvZT72CrMYws9arkBXpyw+Vy+XNEY=
Subject key identifier: 29:9B:22:F9:27:31:B3:97:15:BC:48:C8:8C:66:7A:39:77:B9:AD:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B9B6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C96CBEDC0B1211F1AE6E04A1DAE4EC9C.roa
Signing time: Mon 16 Feb 2026 08:37:54 +0000
ROA not before: Mon 16 Feb 2026 08:37:50 +0000
ROA not after: Wed 25 Mar 2026 08:37:50 +0000
asID: 20326
IP address blocks: 154.193.132.0/24 maxlen: 24
154.193.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113078 (0x1b9b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 08:37:50 2026 GMT
Not After : Mar 25 08:37:50 2026 GMT
Subject: CN=6992d762-79f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bd:79:12:75:d0:b8:a7:7a:d6:08:c7:e2:e4:
e8:02:50:6f:37:09:b3:b9:56:1b:8a:b8:46:1d:66:
c8:30:de:60:ec:48:86:62:28:8d:de:7d:26:95:26:
6c:33:aa:41:65:10:92:ca:fc:1c:60:5e:46:96:63:
83:f8:88:0f:6a:20:09:7a:59:34:37:6e:b4:df:30:
ee:86:83:b8:4c:76:e1:a6:64:90:ef:7d:b8:5e:17:
49:7d:1f:44:8d:51:dc:d1:0d:49:83:08:ea:4f:6d:
fd:81:b3:6d:bb:53:1c:38:04:e5:a5:3c:de:1b:49:
ca:ec:89:1d:82:83:a7:92:87:65:75:06:16:a2:d4:
20:04:9b:f4:e8:f9:49:be:ad:4b:19:ed:d9:23:90:
41:69:b4:73:cf:b9:85:44:e3:dd:df:17:fb:91:4b:
4e:55:83:9a:84:8c:65:63:35:3a:64:fd:c0:09:97:
77:14:2d:fd:ce:ee:25:88:cf:95:b9:69:e4:77:38:
45:cc:36:30:05:2d:ea:1e:02:58:f7:18:e8:df:1e:
31:12:e1:18:8c:3c:22:26:9e:9c:b5:fb:45:17:a3:
5f:0a:38:b4:88:9a:dc:f6:36:af:d0:44:c4:21:25:
c2:1a:5d:73:3d:18:8e:b1:93:a2:a0:da:a1:4b:9c:
c8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9B:22:F9:27:31:B3:97:15:BC:48:C8:8C:66:7A:39:77:B9:AD:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C96CBEDC0B1211F1AE6E04A1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.132.0/24
154.193.164.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:fc:10:d2:81:03:88:2f:95:8d:42:06:37:28:da:f0:3c:b6:
3a:0a:8b:45:eb:6d:28:f5:72:e7:6d:62:bf:0f:b5:57:fc:58:
15:a4:b6:8a:43:19:dd:6b:a6:23:b7:42:b7:45:9c:6a:31:f9:
96:6d:be:31:5c:ef:76:ee:6a:9f:f3:6c:aa:c8:09:b6:59:39:
31:4a:2a:06:4f:38:ea:b2:87:a5:5c:4c:a9:e2:d9:a5:cb:0a:
15:a6:3c:01:f0:a1:83:5a:41:26:6b:28:1b:6d:ec:2f:00:fe:
22:d1:48:7f:79:4d:76:06:20:0c:09:07:12:dc:fa:34:30:6b:
ea:e0:b6:4b:3b:57:79:9b:d7:8d:46:52:c9:55:e0:95:97:8e:
57:e0:19:ee:72:8f:a6:2c:65:02:ce:f4:43:a9:5a:ce:9e:5f:
12:db:22:d8:58:fc:b7:c7:6a:ac:70:c7:d7:f7:26:43:6f:cb:
f5:09:a7:2e:92:13:75:ce:9b:cd:90:4c:43:19:29:de:87:67:
58:85:1d:dd:6b:a0:ce:07:e2:56:95:f7:71:a8:16:c5:15:1e:
a4:89:9d:1a:4f:b8:d0:9e:04:70:86:79:c3:c5:80:a3:db:59:
ff:b7:3a:e2:53:03:23:2e:53:57:7b:03:6a:07:78:76:25:74:
d3:8e:09:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:36:24 2026 by rpki-client