Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8711B7600D111F1BBA0F0A3DAE4EC9C.roa
File: D8711B7600D111F1BBA0F0A3DAE4EC9C.roa (raw, json)
Hash identifier: s6z4tVAzx5aoWRb3/GtbjXQD5+zY8UB0rXBNcs/t/4w=
Subject key identifier: FC:17:F1:45:FB:A4:39:3A:C4:B7:E0:69:FC:E8:39:4D:11:9A:EE:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B864
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8711B7600D111F1BBA0F0A3DAE4EC9C.roa
Signing time: Tue 03 Feb 2026 07:27:51 +0000
ROA not before: Tue 03 Feb 2026 07:27:46 +0000
ROA not after: Sun 08 Mar 2026 07:27:46 +0000
asID: 45194
IP address blocks: 154.84.206.0/24 maxlen: 24
154.84.207.0/24 maxlen: 24
154.84.208.0/24 maxlen: 24
154.84.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112740 (0x1b864)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 3 07:27:46 2026 GMT
Not After : Mar 8 07:27:46 2026 GMT
Subject: CN=6981a377-5d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:78:a2:7e:af:3c:83:04:78:8f:83:68:fa:69:
00:53:85:ee:95:6b:9f:35:f1:af:31:c9:e2:5f:46:
ef:3d:12:92:4a:43:7b:5f:ec:e8:15:08:1c:19:3f:
c4:61:a3:f9:10:75:5a:e1:b9:2a:66:b4:fc:6f:a8:
89:1f:3a:32:fe:10:17:36:cd:b9:20:c6:5d:bf:ff:
88:05:49:0d:b7:3c:ca:f2:e7:cb:44:8f:ed:66:8f:
08:9b:91:29:3c:c2:c6:28:67:52:40:e7:46:67:f8:
6a:be:1f:3b:72:9c:cc:71:b2:03:f2:1a:4f:70:20:
58:db:8e:4a:06:dd:e2:46:a7:55:c4:21:16:57:a3:
3b:ff:03:7d:ee:f3:0f:26:eb:e3:03:cc:77:b3:aa:
3d:94:99:b2:f3:65:02:c4:3c:ce:0d:68:84:e2:92:
11:01:65:b7:c6:66:4c:38:2b:51:4e:d0:0f:ff:8e:
88:44:a8:92:50:6f:43:70:5e:e6:fb:ee:cc:f6:b4:
3f:3a:a4:d7:99:47:9d:75:eb:ba:d1:5c:45:a3:62:
16:db:1d:37:71:e3:59:0d:41:24:1b:58:25:eb:a1:
6c:9b:ad:ae:66:64:3f:c8:35:62:ee:a0:11:be:ef:
10:ae:6f:a7:d0:82:01:94:a5:66:8b:f5:d9:28:e5:
0b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:17:F1:45:FB:A4:39:3A:C4:B7:E0:69:FC:E8:39:4D:11:9A:EE:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8711B7600D111F1BBA0F0A3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.206.0-154.84.208.255
154.84.213.0/24
Signature Algorithm: sha256WithRSAEncryption
21:a8:73:6a:25:92:c9:aa:4b:0a:c5:7a:99:f8:01:8a:52:f1:
64:66:ea:58:66:9d:f7:c9:72:87:c8:d8:59:17:ba:dc:2e:01:
7a:65:38:0d:41:51:4c:f7:93:3a:70:98:2b:33:1f:7d:7c:92:
a4:89:ec:6f:8c:61:9f:ff:3e:5f:6d:db:ae:f2:2c:e3:a4:a3:
c6:fd:32:f5:ef:17:31:dd:de:78:dd:2c:11:83:be:2a:24:68:
de:3a:23:b8:ca:27:55:8b:7d:8f:24:ca:df:30:96:a2:93:03:
30:56:83:8a:f8:49:c6:a7:0f:18:56:0f:67:e2:0f:a8:75:68:
07:25:ad:ad:82:f8:8c:86:5f:c4:66:a7:6e:ab:8b:82:9d:4b:
93:75:64:a7:82:6e:7a:65:57:75:8a:5b:ce:2f:00:f4:07:dc:
97:20:38:cf:c4:62:4b:2a:42:bb:78:30:0c:fc:6c:79:8f:96:
8e:98:e4:95:6b:1f:27:65:f3:f9:0a:0b:88:4f:0e:9c:47:f1:
c9:4c:a1:a1:e3:0f:4a:70:bf:df:8c:ff:8e:8a:b8:70:8d:f9:
34:57:0f:1d:31:6c:3f:ec:14:e7:03:53:61:ff:2b:23:5e:ae:
56:7b:0b:37:f3:41:00:90:14:48:bd:ee:9e:4a:e9:3f:da:53:
d2:ae:1e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:17 2026 by rpki-client