Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEC78FC80F0511F1827B53EFDAE4EC9C.roa
File: CEC78FC80F0511F1827B53EFDAE4EC9C.roa (raw, json)
Hash identifier: soBEs3QjCq7OO/5HNPgM8AXekkkvXmG2uzW9/d9OIQk=
Subject key identifier: 20:F3:42:FB:57:87:81:65:32:C1:80:B2:E5:00:13:F8:99:4B:D0:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BADC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEC78FC80F0511F1827B53EFDAE4EC9C.roa
Signing time: Sat 21 Feb 2026 09:15:04 +0000
ROA not before: Sat 21 Feb 2026 09:15:01 +0000
ROA not after: Sat 28 Mar 2026 09:15:01 +0000
asID: 48031
IP address blocks: 154.92.12.0/24 maxlen: 24
154.92.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113372 (0x1badc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 21 09:15:01 2026 GMT
Not After : Mar 28 09:15:01 2026 GMT
Subject: CN=69997798-e572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:92:80:ff:a8:e5:0e:78:61:5f:01:b5:ed:36:
ef:79:0e:e7:7d:12:ab:21:84:f6:34:6e:b9:8e:a3:
5f:a4:76:01:69:18:fc:5c:08:2b:47:d5:b6:11:ad:
b0:a1:6a:12:99:f9:1f:f8:6d:5c:3d:53:a4:fb:67:
be:db:ed:fb:da:c8:86:af:16:7d:ff:30:b8:7e:81:
9a:f6:c7:a5:9e:66:6b:e8:e0:bf:33:75:92:1c:62:
89:88:70:f7:d2:7b:57:b5:7b:02:a0:a6:dc:38:38:
1e:22:25:86:23:45:c9:f3:8e:44:52:4d:fa:32:20:
e7:6a:6f:6f:b6:ef:9f:3f:69:dd:7b:4b:e8:90:1a:
3d:ee:6c:5d:15:fc:f6:bd:eb:89:a0:ff:8b:25:2e:
c3:e8:da:80:bc:8c:67:5d:db:32:e5:4a:26:26:73:
d0:3e:d2:4b:6f:27:41:f7:8c:1f:af:eb:29:8e:07:
36:f5:b3:9a:b4:c3:3e:66:7c:dc:45:30:51:0a:5f:
9b:20:2d:8e:28:23:64:f9:da:3d:45:f1:20:4f:4c:
85:dc:11:7f:42:f4:1d:28:df:60:15:42:e9:72:ca:
44:1f:e5:a2:a7:e7:fc:9a:05:53:4f:cc:b1:4e:98:
8c:f1:4f:5a:87:4a:a0:a4:c6:b1:85:fc:c2:5f:9c:
a8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F3:42:FB:57:87:81:65:32:C1:80:B2:E5:00:13:F8:99:4B:D0:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEC78FC80F0511F1827B53EFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.12.0/23
Signature Algorithm: sha256WithRSAEncryption
00:bc:47:0e:97:44:8e:67:1d:17:d8:f8:05:9e:c4:3c:ac:5f:
f5:88:e7:04:77:46:25:c0:5a:db:c1:a5:b5:6e:40:f9:e7:83:
35:7d:af:2c:65:50:f7:1d:f1:a9:64:38:96:5c:fd:a5:a8:bf:
05:1b:1a:84:61:bb:c8:c9:97:68:e1:a9:8f:bf:df:41:70:95:
69:6e:31:80:0a:07:57:3f:ba:4b:fc:95:d1:eb:ec:57:6e:f0:
58:2f:a9:e7:da:1a:f2:f3:82:0e:5e:42:b1:1a:b6:c0:78:2b:
f3:64:43:f0:2e:49:ec:ca:72:31:92:2d:d1:61:84:3d:9e:3a:
de:cb:97:8c:b2:cb:ad:cf:7d:9a:c9:6f:60:dd:45:3d:d0:50:
a7:33:4e:d7:9a:e5:46:54:cf:e9:07:0d:dd:8e:b6:82:72:df:
be:99:55:b5:0e:b6:b1:90:eb:4d:ed:39:d7:60:08:02:d9:7c:
af:9c:43:2a:73:66:79:88:2a:31:81:ef:27:9b:fa:c0:7c:ef:
d9:b3:c8:ef:d6:8d:47:e4:30:3f:7a:6c:69:54:d9:c8:c3:27:
2e:9c:91:38:4d:d3:a6:53:83:2c:d8:89:0c:d1:2f:4a:98:72:
e9:7c:0b:0c:5e:bb:87:e7:d6:30:19:81:37:a8:2c:53:fe:27:
00:cb:2c:5c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbrcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjIxMDkxNTAxWhcNMjYwMzI4MDkxNTAxWjAYMRYw
FAYDVQQDEw02OTk5Nzc5OC1lNTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyJKA/6jlDnhhXwG17TbveQ7nfRKrIYT2NG65jqNfpHYBaRj8XAgrR9W2
Ea2woWoSmfkf+G1cPVOk+2e+2+372siGrxZ9/zC4foGa9selnmZr6OC/M3WSHGKJ
iHD30ntXtXsCoKbcODgeIiWGI0XJ845EUk36MiDnam9vtu+fP2nde0vokBo97mxd
Ffz2veuJoP+LJS7D6NqAvIxnXdsy5UomJnPQPtJLbydB94wfr+spjgc29bOatMM+
ZnzcRTBRCl+bIC2OKCNk+do9RfEgT0yF3BF/QvQdKN9gFULpcspEH+Wip+f8mgVT
T8yxTpiM8U9ah0qgpMaxhfzCX5yoiwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCDz
QvtXh4FlMsGAsuUAE/iZS9DpMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DRUM3OEZDODBGMDUxMUYxODI3QjUzRUZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlwMMA0GCSqGSIb3DQEB
CwUAA4IBAQAAvEcOl0SOZx0X2PgFnsQ8rF/1iOcEd0YlwFrbwaW1bkD554M1fa8s
ZVD3HfGpZDiWXP2lqL8FGxqEYbvIyZdo4amPv99BcJVpbjGACgdXP7pL/JXR6+xX
bvBYL6nn2hry84IOXkKxGrbAeCvzZEPwLknsynIxki3RYYQ9njrey5eMssutz32a
yW9g3UU90FCnM07XmuVGVM/pBw3djraCct++mVW1DraxkOtN7TnXYAgC2XyvnEMq
c2Z5iCoxge8nm/rAfO/Zs8jv1o1H5DA/emxpVNnIwycunJE4TdOmU4Ms2IkM0S9K
mHLpfAsMXruH59YwGYE3qCxT/icAyyxc
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:42 2026 by rpki-client