Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCFDA7FC0F9811F1857639F2DAE4EC9C.roa
File: CCFDA7FC0F9811F1857639F2DAE4EC9C.roa (raw, json)
Hash identifier: ari+eLVaFzXcBpe2BPyhjxSB9h8diLFg8Va3lJQbZD4=
Subject key identifier: 4C:C0:8D:13:40:21:5A:16:68:F1:85:93:D3:AD:D8:69:34:25:33:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BAFC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCFDA7FC0F9811F1857639F2DAE4EC9C.roa
Signing time: Sun 22 Feb 2026 02:47:17 +0000
ROA not before: Sun 22 Feb 2026 02:47:12 +0000
ROA not after: Tue 31 Mar 2026 02:47:12 +0000
asID: 14315
IP address blocks: 154.194.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113404 (0x1bafc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 22 02:47:12 2026 GMT
Not After : Mar 31 02:47:12 2026 GMT
Subject: CN=699a6e35-d0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8c:42:f9:51:63:1a:31:13:f8:6f:ad:15:e8:
38:bf:be:18:ec:2f:3e:97:35:c6:50:d5:5e:54:a9:
20:a2:f7:60:95:de:df:e3:52:b6:a7:25:a5:dd:da:
a6:6f:92:85:0c:4c:c3:69:ac:0b:8a:a5:3e:c3:ef:
c4:aa:db:eb:34:70:a7:8e:68:e5:77:51:5b:b6:ca:
3b:e6:2f:9b:30:53:b8:67:90:1d:57:21:1f:5d:18:
f4:91:9a:e7:6c:3e:89:3c:4a:6c:26:22:de:2f:ed:
0a:39:a4:30:bb:75:3e:94:8d:1c:37:b1:d5:2a:0b:
ab:bf:28:7b:f5:d4:0c:ca:1d:e8:da:45:b1:92:8a:
28:fb:ce:3e:65:08:5a:ce:a3:03:79:f2:32:ef:46:
ba:78:0b:50:b7:5f:b0:87:fc:95:40:39:0c:ab:45:
7d:dc:a5:33:b0:e1:3a:6a:d8:04:77:08:2e:49:72:
04:fe:6b:36:ba:79:ad:51:e9:8f:b8:7c:e8:27:d7:
eb:3c:36:13:c7:58:e8:e9:ad:3f:73:43:ff:66:e1:
b9:5a:0f:2c:46:18:e6:72:35:48:dc:c0:e5:aa:72:
9c:03:79:5b:71:a7:69:5b:1e:57:43:4d:60:c3:e6:
fd:fe:21:6e:e6:ba:55:4f:e3:ab:48:3a:a6:6a:cb:
ba:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C0:8D:13:40:21:5A:16:68:F1:85:93:D3:AD:D8:69:34:25:33:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCFDA7FC0F9811F1857639F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.50.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:d5:ff:3d:23:94:13:ab:48:7e:ce:f5:7e:3b:d2:02:6b:7c:
5b:72:3d:e7:f4:09:49:ef:61:ab:a0:b5:09:0d:ba:09:ae:f1:
c1:9b:95:88:9a:19:94:3f:02:ff:f9:32:6b:43:17:66:a8:9e:
1e:32:9a:67:3a:5f:de:ba:16:78:8f:8d:b0:aa:a2:79:73:c8:
46:04:79:2b:37:d5:43:53:32:09:7e:18:c6:2d:f8:33:03:42:
fc:d9:89:13:bf:b1:74:97:e4:5c:24:1d:0f:62:b4:3c:d1:3a:
f1:d1:3a:af:68:75:7e:3b:de:01:9d:71:13:f0:56:e8:d2:e3:
3b:d3:9e:c8:34:3c:7a:cd:f3:5c:4d:aa:fb:28:15:52:2f:5d:
ae:d1:3e:e0:a9:52:15:a7:7f:e9:a6:43:ab:f8:f1:11:7c:29:
0f:94:79:20:2d:9b:fd:50:22:a6:4c:09:4e:d4:39:8c:ec:f1:
91:db:e1:05:2d:87:3b:48:11:c3:db:00:8d:dd:2f:2c:14:62:
00:3c:e6:d8:03:8a:d2:10:7c:d9:6c:0b:0b:bc:d7:aa:f3:d0:
86:c2:38:61:c4:9b:93:3b:44:60:2d:7d:47:db:8b:04:a5:02:
7c:6e:47:60:46:ac:c6:14:46:16:3d:30:30:76:8b:a3:f4:ca:
de:8c:ba:1d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbr8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjIyMDI0NzEyWhcNMjYwMzMxMDI0NzEyWjAYMRYw
FAYDVQQDEw02OTlhNmUzNS1kMGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyIxC+VFjGjET+G+tFeg4v74Y7C8+lzXGUNVeVKkgovdgld7f41K2pyWl
3dqmb5KFDEzDaawLiqU+w+/EqtvrNHCnjmjld1Fbtso75i+bMFO4Z5AdVyEfXRj0
kZrnbD6JPEpsJiLeL+0KOaQwu3U+lI0cN7HVKgurvyh79dQMyh3o2kWxkooo+84+
ZQhazqMDefIy70a6eAtQt1+wh/yVQDkMq0V93KUzsOE6atgEdwguSXIE/ms2unmt
UemPuHzoJ9frPDYTx1jo6a0/c0P/ZuG5Wg8sRhjmcjVI3MDlqnKcA3lbcadpWx5X
Q01gw+b9/iFu5rpVT+OrSDqmasu6JwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEzA
jRNAIVoWaPGFk9Ot2Gk0JTPhMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQ0ZEQTdGQzBGOTgxMUYxODU3NjM5RjJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsIyMA0GCSqGSIb3DQEB
CwUAA4IBAQCs1f89I5QTq0h+zvV+O9ICa3xbcj3n9AlJ72GroLUJDboJrvHBm5WI
mhmUPwL/+TJrQxdmqJ4eMppnOl/euhZ4j42wqqJ5c8hGBHkrN9VDUzIJfhjGLfgz
A0L82YkTv7F0l+RcJB0PYrQ80Trx0TqvaHV+O94BnXET8Fbo0uM7057INDx6zfNc
Tar7KBVSL12u0T7gqVIVp3/ppkOr+PERfCkPlHkgLZv9UCKmTAlO1DmM7PGR2+EF
LYc7SBHD2wCN3S8sFGIAPObYA4rSEHzZbAsLvNeq89CGwjhhxJuTO0RgLX1H24sE
pQJ8bkdgRqzGFEYWPTAwdouj9MrejLod
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:32:53 2026 by rpki-client