Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB5B4FD40E9411F18C1710ACDAE4EC9C.roa
File: DB5B4FD40E9411F18C1710ACDAE4EC9C.roa (raw, json)
Hash identifier: oMMhdn/oSsms/8Hi8CFvcUisj54jIqTRjzFiZh+bADs=
Subject key identifier: 38:46:D0:A8:DF:EE:18:70:9E:F3:B0:81:23:E7:BD:D2:D0:CA:DB:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BAAE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB5B4FD40E9411F18C1710ACDAE4EC9C.roa
Signing time: Fri 20 Feb 2026 19:46:32 +0000
ROA not before: Fri 20 Feb 2026 19:46:27 +0000
ROA not after: Thu 04 Jun 2026 19:46:27 +0000
asID: 18229
IP address blocks: 154.210.195.0/24 maxlen: 24
154.210.196.0/24 maxlen: 24
154.210.197.0/24 maxlen: 24
154.210.198.0/24 maxlen: 24
154.210.199.0/24 maxlen: 24
154.210.200.0/24 maxlen: 24
154.210.201.0/24 maxlen: 24
154.210.202.0/24 maxlen: 24
154.210.204.0/24 maxlen: 24
154.210.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113326 (0x1baae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 19:46:27 2026 GMT
Not After : Jun 4 19:46:27 2026 GMT
Subject: CN=6998ba18-c30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a4:df:d5:04:1d:77:16:8f:32:62:58:ce:98:
96:60:ae:f2:ad:03:c8:35:69:2e:b0:10:82:ac:4a:
da:15:f2:95:d9:af:36:c6:41:60:f2:5f:24:80:98:
41:5c:78:8b:b8:c4:09:0f:c5:b1:af:8c:61:3b:85:
12:19:7c:99:b5:56:c5:fe:32:85:55:74:2c:f5:9f:
11:51:12:ec:9b:54:b2:08:93:47:b3:c3:26:ae:46:
55:84:bc:1a:78:7a:2a:9f:31:5b:fe:e9:c0:cc:6b:
32:c5:a7:2f:b6:c1:64:f0:dd:f4:d5:ff:95:71:23:
be:60:a9:e5:bd:de:32:48:44:e4:66:82:f6:b1:7f:
23:59:47:23:c2:bd:56:a7:ad:a5:24:d8:8c:28:0e:
60:80:8f:1b:1e:1f:6a:bc:cd:4e:d3:09:23:42:fd:
94:6b:3b:a8:5f:13:a2:b7:0d:0a:29:3b:78:98:b2:
bd:14:67:79:06:a2:08:41:39:df:45:9d:94:00:08:
8b:6f:b6:33:f7:28:c8:e3:7b:28:e6:32:f9:25:66:
ab:53:f4:47:f3:4d:92:c3:9c:ec:27:b0:b1:14:70:
46:3c:8e:16:f9:f1:92:f9:e2:3f:a1:80:2d:04:10:
77:0f:e7:79:5e:4c:e2:7e:bf:61:bb:2d:98:93:f0:
f4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:46:D0:A8:DF:EE:18:70:9E:F3:B0:81:23:E7:BD:D2:D0:CA:DB:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB5B4FD40E9411F18C1710ACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.195.0-154.210.202.255
154.210.204.0/23
Signature Algorithm: sha256WithRSAEncryption
24:45:ec:6e:b0:06:9b:bf:ac:8b:b7:e8:b4:50:da:0b:a2:1f:
da:bb:03:9c:7b:b9:a2:80:7e:d1:f0:25:a5:50:ba:14:3d:7a:
53:9e:c4:0a:8d:86:9a:15:19:32:08:d7:b7:09:6f:24:86:2f:
21:55:28:ff:da:a1:ef:c3:bd:ec:92:bd:a5:7f:61:48:4b:d4:
2f:a2:52:c9:bc:76:84:66:bd:5c:64:88:0a:af:57:f8:9f:ab:
f0:05:0b:6c:93:9e:31:61:b4:5d:a4:e9:ad:0a:81:f6:1d:da:
48:00:d8:17:75:fe:b7:e3:30:1d:5e:c5:42:5f:e8:5d:9d:ba:
a7:d6:01:8e:19:37:84:8c:fd:a2:5c:99:d4:17:2a:bc:17:c4:
fd:84:26:bd:cb:2f:fc:4d:cd:55:23:b9:4d:31:c7:d8:f1:30:
07:68:58:67:fb:0b:83:35:13:1e:80:20:18:1a:54:6e:92:88:
d9:e3:7c:a7:0f:7b:93:d9:f2:b9:04:6a:92:52:57:6d:56:69:
7f:2c:75:64:16:99:27:9b:ab:76:84:d5:9f:2e:42:b5:f5:5f:
4a:80:e5:d8:2f:01:b1:f4:cb:da:71:54:f8:ef:69:53:3d:6d:
ec:9f:92:20:75:30:4c:b1:83:20:6d:18:a7:35:f7:ee:84:30:
1c:f9:a6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:19 2026 by rpki-client