Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2D26BE8124C11F19DCC3F8BDAE4EC9C.roa
File: D2D26BE8124C11F19DCC3F8BDAE4EC9C.roa (raw, json)
Hash identifier: mvgGHbbFuYwKxUaIbYogJOFfviQO1IDzvRO5cJJCWCI=
Subject key identifier: 9B:7F:71:22:10:6B:C7:50:9C:7A:A0:BE:F8:B1:99:32:4C:1E:A9:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BBC3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2D26BE8124C11F19DCC3F8BDAE4EC9C.roa
Signing time: Wed 25 Feb 2026 13:20:59 +0000
ROA not before: Wed 25 Feb 2026 13:20:55 +0000
ROA not after: Fri 06 Mar 2026 13:20:55 +0000
asID: 8796
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113603 (0x1bbc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 13:20:55 2026 GMT
Not After : Mar 6 13:20:55 2026 GMT
Subject: CN=699ef73b-a2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ac:39:80:79:8c:6b:d1:24:4c:25:f8:d1:28:
d9:05:26:d7:e0:ea:b9:1b:96:4b:02:24:31:fa:39:
32:1e:b9:59:97:03:fb:95:4f:c1:63:df:21:73:24:
0b:80:64:68:af:3b:a2:f1:bd:7a:e0:98:4c:83:2c:
f6:85:c9:81:21:25:31:af:73:6b:8a:b2:be:c9:a3:
66:7b:c9:a9:64:a6:7a:55:2d:a4:b8:8a:c2:5b:32:
eb:f1:64:2d:57:42:3b:09:ab:7f:ba:de:af:f3:b0:
4f:0f:3b:41:c1:42:20:e1:87:ec:2d:c6:91:76:44:
2b:ca:ad:cf:aa:bc:9f:a3:76:8d:11:2d:1c:f7:7a:
cf:c1:75:be:50:96:4b:3f:49:8b:0f:7f:80:61:70:
ef:fb:47:62:7c:d4:22:6b:77:f6:53:4a:c6:6e:d0:
f9:ba:2f:7e:d7:27:06:19:2a:d3:72:7b:a4:3f:37:
57:9c:83:1e:78:52:1f:7f:ae:54:b8:6e:c9:8c:18:
b4:9b:c8:d3:bf:17:86:4d:03:07:32:20:aa:0e:48:
6f:b8:1c:59:57:23:a5:c5:e2:2c:e0:7d:58:09:22:
2f:b4:3d:7d:1c:da:25:f2:5b:fd:d4:21:01:4e:ba:
0c:2c:8c:76:24:9f:3c:dc:4d:ef:f9:ec:c6:ba:9a:
58:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7F:71:22:10:6B:C7:50:9C:7A:A0:BE:F8:B1:99:32:4C:1E:A9:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2D26BE8124C11F19DCC3F8BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
be:1a:8c:73:bf:9d:d0:d6:9d:3c:6c:3d:e6:bc:16:84:b7:c6:
6a:a0:3e:e7:e2:9e:cb:c4:8c:12:ff:19:4d:41:43:53:09:dd:
f5:79:96:0e:d8:55:ba:86:59:6f:84:a4:c6:8c:f8:d5:dc:e6:
e7:03:f1:c9:be:3d:e7:86:d5:a9:d8:47:2a:b3:74:4f:c7:31:
22:66:43:6d:49:92:04:2e:39:d4:d0:49:c1:a9:09:03:a1:a8:
f0:79:8e:02:84:45:6a:2c:3f:bd:38:da:b5:8a:ea:3e:0d:13:
86:64:dd:91:bc:56:d3:78:e4:23:46:bc:2f:08:58:3f:84:49:
6b:e2:9c:e2:31:7b:2d:e8:46:08:88:88:63:f2:00:5c:85:dd:
81:d5:72:6f:e2:9b:af:f4:ff:65:4d:0a:a9:f8:48:a6:7a:ab:
4b:cf:38:63:bc:c6:ec:73:86:5f:5f:c7:bf:10:49:ee:c2:54:
13:d4:60:7c:5b:de:57:e3:47:71:dc:30:0a:48:15:31:21:fe:
5f:5c:7f:51:9b:63:2a:a1:f9:f7:7d:e8:71:de:2f:dc:ca:52:
34:c4:ab:8e:e9:52:27:c3:79:80:ec:2c:09:49:d4:64:20:ca:
e2:d8:31:d4:a5:d9:b1:4a:38:2c:35:ed:d2:34:34:f0:a3:66:
dd:40:67:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:27 2026 by rpki-client