Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB1B840A098311F18DF8068EDAE4EC9C.roa
File: DB1B840A098311F18DF8068EDAE4EC9C.roa (raw, json)
Hash identifier: B6HUspGldDJtEhkNwBsBoaQFQdU6leNkra/qWYQ6OMA=
Subject key identifier: E1:AF:40:FC:74:D6:8F:4B:D6:F0:D4:5D:24:B4:30:8D:03:97:01:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B95D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB1B840A098311F18DF8068EDAE4EC9C.roa
Signing time: Sat 14 Feb 2026 09:02:15 +0000
ROA not before: Sat 14 Feb 2026 09:02:10 +0000
ROA not after: Wed 25 Mar 2026 09:02:10 +0000
asID: 401615
IP address blocks: 154.85.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112989 (0x1b95d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 14 09:02:10 2026 GMT
Not After : Mar 25 09:02:10 2026 GMT
Subject: CN=69903a17-e51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:90:3a:e0:96:2f:fa:35:5a:4b:a0:33:1a:a2:
3e:18:74:c0:59:60:65:2c:0e:43:34:0f:bd:dd:d5:
82:a9:13:c2:c9:e1:9e:75:f2:74:ec:b9:06:61:10:
69:2b:fe:dd:25:36:b5:ea:92:8f:3d:12:95:88:7b:
13:8f:f0:c2:08:1a:f7:94:85:8f:73:50:a6:4f:67:
b4:22:da:79:23:b4:23:da:54:4c:73:d8:65:08:f5:
3b:36:97:26:f4:32:6d:79:e9:9a:9a:6d:9c:e9:42:
db:99:91:c5:e6:a5:24:a7:98:8d:75:cb:1f:55:a8:
32:f8:b9:1e:78:d3:d9:75:a3:d7:16:21:32:8c:53:
20:57:7d:bd:d0:f1:c4:bb:bb:f0:e8:59:2b:46:05:
4e:e3:ef:dc:bf:8c:bf:d2:eb:59:b8:5c:82:1f:26:
79:2a:1c:b9:bb:b2:bc:e5:a1:4b:18:0e:8a:28:8d:
98:9f:b5:14:3b:fd:4c:d4:7c:a4:5d:a1:09:2d:4b:
0f:9c:c8:41:4d:9d:bb:16:30:93:d3:9b:29:58:71:
76:4f:ff:60:40:b5:ae:46:84:e3:89:8b:b8:f6:57:
2b:fc:32:a5:8d:e3:f7:da:a1:e4:f8:e5:5e:1e:52:
eb:67:6d:08:6c:d8:fd:1a:32:e1:bf:b1:83:ad:f8:
41:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AF:40:FC:74:D6:8F:4B:D6:F0:D4:5D:24:B4:30:8D:03:97:01:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB1B840A098311F18DF8068EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.20.0/24
Signature Algorithm: sha256WithRSAEncryption
76:60:73:88:d9:0b:93:21:7f:ee:22:f3:fa:f6:f0:6a:9e:b0:
0b:ec:5e:f3:a3:ab:dd:8f:40:b3:92:0c:09:12:d8:0b:06:b9:
04:e1:aa:e3:09:b5:2d:7b:76:8f:d1:e9:e8:ba:b4:f7:7e:3b:
6e:fd:19:f7:d9:b0:5f:98:60:66:96:e7:9b:d2:50:15:7a:4b:
31:11:89:bf:b7:bd:32:40:51:bf:f3:2c:89:d9:e0:b9:94:22:
47:78:80:54:97:1f:d2:71:42:2b:36:10:0b:a8:e8:c5:32:36:
4a:ac:83:86:0f:5f:3d:62:15:e1:88:09:32:ad:01:a3:b3:cb:
e9:d2:6a:aa:ff:d4:ec:15:2e:77:d9:c1:81:81:56:e7:6e:84:
4c:a3:f0:71:c7:84:d3:82:f8:b3:70:54:cd:a6:9d:62:7e:3d:
4d:88:5a:2a:31:d2:87:e1:42:4e:9c:e7:4d:7d:00:2c:3f:f8:
7e:be:7b:72:d0:c6:b1:2c:1a:4b:8e:b0:52:51:64:c7:b1:4c:
34:d2:d0:15:d1:a5:a1:90:27:83:34:48:a5:95:0d:c3:a0:9d:
01:86:27:3b:ec:51:03:0d:23:2d:72:03:7e:ea:39:d9:06:ad:
9a:ce:de:96:99:a8:38:d4:03:0b:71:56:5a:4e:fb:7a:5b:51:
45:ab:b8:4e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbldMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjE0MDkwMjEwWhcNMjYwMzI1MDkwMjEwWjAYMRYw
FAYDVQQDEw02OTkwM2ExNy1lNTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxpA64JYv+jVaS6AzGqI+GHTAWWBlLA5DNA+93dWCqRPCyeGedfJ07LkG
YRBpK/7dJTa16pKPPRKViHsTj/DCCBr3lIWPc1CmT2e0Itp5I7Qj2lRMc9hlCPU7
Npcm9DJteemamm2c6ULbmZHF5qUkp5iNdcsfVagy+LkeeNPZdaPXFiEyjFMgV329
0PHEu7vw6FkrRgVO4+/cv4y/0utZuFyCHyZ5Khy5u7K85aFLGA6KKI2Yn7UUO/1M
1HykXaEJLUsPnMhBTZ27FjCT05spWHF2T/9gQLWuRoTjiYu49lcr/DKljeP32qHk
+OVeHlLrZ20IbNj9GjLhv7GDrfhBOwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOGv
QPx01o9L1vDUXSS0MI0DlwFKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQjFCODQwQTA5ODMxMUYxOERGODA2OEVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlUUMA0GCSqGSIb3DQEB
CwUAA4IBAQB2YHOI2QuTIX/uIvP69vBqnrAL7F7zo6vdj0CzkgwJEtgLBrkE4arj
CbUte3aP0enourT3fjtu/Rn32bBfmGBmlueb0lAVeksxEYm/t70yQFG/8yyJ2eC5
lCJHeIBUlx/ScUIrNhALqOjFMjZKrIOGD189YhXhiAkyrQGjs8vp0mqq/9TsFS53
2cGBgVbnboRMo/Bxx4TTgvizcFTNpp1ifj1NiFoqMdKH4UJOnOdNfQAsP/h+vnty
0MaxLBpLjrBSUWTHsUw00tAV0aWhkCeDNEillQ3DoJ0Bhic77FEDDSMtcgN+6jnZ
Bq2azt6Wmag41AMLcVZaTvt6W1FFq7hO
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:07 2026 by rpki-client