Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9D7EAC8117911F18A9C2C79DAE4EC9C.roa
File: C9D7EAC8117911F18A9C2C79DAE4EC9C.roa (raw, json)
Hash identifier: dx1vF0ni1Qpe4pwxYaMtl1ONTO7AO+Ao3hw2EIK15Oo=
Subject key identifier: FE:CD:BC:B4:8B:C5:64:F0:BD:B9:FF:66:15:15:80:F9:A1:2B:2E:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB5C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9D7EAC8117911F18A9C2C79DAE4EC9C.roa
Signing time: Tue 24 Feb 2026 12:10:20 +0000
ROA not before: Tue 24 Feb 2026 12:10:15 +0000
ROA not after: Tue 31 Mar 2026 12:10:15 +0000
asID: 62240
IP address blocks: 154.194.73.0/24 maxlen: 24
154.194.74.0/24 maxlen: 24
154.194.89.0/24 maxlen: 24
154.194.92.0/24 maxlen: 24
154.194.93.0/24 maxlen: 24
154.194.98.0/24 maxlen: 24
154.196.18.0/24 maxlen: 24
154.196.22.0/24 maxlen: 24
154.196.50.0/24 maxlen: 24
154.196.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113500 (0x1bb5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 12:10:15 2026 GMT
Not After : Mar 31 12:10:15 2026 GMT
Subject: CN=699d952c-d23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:97:26:b8:d1:9d:be:12:a2:d3:f1:7a:c3:
47:84:38:b4:be:70:02:c2:28:43:02:7f:4b:88:69:
c0:45:fc:84:23:ee:35:de:8f:09:28:57:fe:0f:ec:
fa:f5:f4:5a:75:05:8b:6c:65:6d:03:bc:64:d7:ea:
37:1e:c9:b2:af:f0:20:17:3d:32:93:ed:94:43:6a:
53:ff:58:7b:eb:c0:34:88:3b:7e:fd:c0:a4:93:9c:
8e:83:c4:0b:62:b7:4d:f7:1d:43:93:14:1a:04:7b:
a4:94:c1:9a:9f:e1:7c:3a:b4:37:8a:77:0c:d6:8e:
28:ff:8b:1d:30:84:d5:b5:b7:b5:09:50:e5:9d:13:
23:5c:06:80:35:ca:6d:0c:1b:b4:a2:1b:03:1e:9f:
43:4f:01:0c:aa:9f:24:8a:1c:1f:e8:d4:cf:7c:94:
f1:41:52:31:98:38:04:10:c9:55:b5:c0:da:dd:6c:
6d:c0:48:fa:24:92:06:30:13:19:2f:da:2e:67:ed:
b6:0d:78:9c:ff:7d:6b:47:6e:97:8c:d6:22:8c:a0:
08:0a:72:b8:ab:9d:43:81:e9:51:e1:1f:1b:24:5e:
cf:03:55:11:0b:55:4f:1d:d5:fb:34:6c:a3:00:07:
f7:98:3f:27:7e:5f:68:74:ac:32:46:2e:c6:59:cb:
c1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CD:BC:B4:8B:C5:64:F0:BD:B9:FF:66:15:15:80:F9:A1:2B:2E:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9D7EAC8117911F18A9C2C79DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.73.0-154.194.74.255
154.194.89.0/24
154.194.92.0/23
154.194.98.0/24
154.196.18.0/24
154.196.22.0/24
154.196.50.0/24
154.196.54.0/24
Signature Algorithm: sha256WithRSAEncryption
46:22:94:6e:53:01:40:4d:c3:83:64:d6:d1:a2:80:8a:42:f5:
2d:b5:df:80:f6:28:fd:a4:31:99:e7:f5:a2:09:46:91:03:41:
27:32:f1:ce:48:dc:a8:34:f3:e2:c6:ca:7e:e4:62:08:27:41:
88:ee:3c:89:f0:14:0b:62:16:c4:ba:f2:f6:18:cd:7c:98:c6:
76:cd:2b:47:fa:21:f0:48:a6:62:0d:d4:60:f2:c4:30:8a:af:
0b:16:2c:79:ac:a4:c9:44:64:ea:2f:28:33:35:15:1f:47:59:
0f:fa:2d:2b:06:61:2d:75:08:e6:62:09:db:1a:35:61:ea:ce:
f9:15:18:23:29:14:99:fa:0b:9c:a1:32:0b:43:4b:0e:ab:ae:
dc:cc:4e:ef:a1:02:0a:90:e3:01:2b:a2:76:8d:27:1a:cc:4b:
f8:fd:52:68:7e:b0:fb:34:1f:12:8b:a8:8f:8e:cc:93:9f:4c:
40:31:08:ab:2d:57:d4:16:27:86:74:b8:50:70:12:a1:28:e6:
5e:95:aa:fa:4f:c0:1f:91:b1:73:27:f0:7c:6d:41:42:6c:4a:
cf:4c:27:7d:88:50:2e:66:e5:8d:b3:f2:00:3a:88:2d:fb:dd:
ec:96:a8:8d:10:d6:d4:da:64:dc:af:fc:93:ea:7a:d1:1a:70:
b7:41:90:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:21 2026 by rpki-client