Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC55546C13B111F18DD52D9CDAE4EC9C.roa
File: DC55546C13B111F18DD52D9CDAE4EC9C.roa (raw, json)
Hash identifier: snb3U5yWHplIs1HChagnB5OADBk/tpY1wEx2Rn+q+do=
Subject key identifier: 6C:CA:F0:1C:AC:1C:7D:0F:0E:23:67:54:4B:34:02:2A:30:50:CD:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC2A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC55546C13B111F18DD52D9CDAE4EC9C.roa
Signing time: Fri 27 Feb 2026 07:56:45 +0000
ROA not before: Fri 27 Feb 2026 07:56:41 +0000
ROA not after: Thu 09 Apr 2026 07:56:41 +0000
asID: 214143
IP address blocks: 154.194.208.0/22 maxlen: 24
154.194.212.0/23 maxlen: 24
154.196.214.0/24 maxlen: 24
154.208.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113706 (0x1bc2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 07:56:41 2026 GMT
Not After : Apr 9 07:56:41 2026 GMT
Subject: CN=69a14e3d-dff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0f:3d:de:9e:62:10:bc:43:9e:4c:a7:ea:e3:
2a:aa:a1:f3:67:fa:2d:d1:85:be:31:85:d1:0b:c8:
89:8c:0b:c9:23:41:fc:b2:ef:3c:b8:2e:1c:d9:d8:
9b:8b:ed:43:1c:ad:3e:08:4d:56:e3:48:28:df:a4:
6f:96:32:a8:1e:cd:ad:e2:95:77:63:10:80:ab:b0:
f1:0b:04:97:19:fe:89:0b:6d:ae:3e:06:11:50:c6:
fb:60:39:50:f8:89:65:38:5d:8e:ae:d9:83:18:76:
be:dd:cd:50:7d:43:e5:f0:d2:d8:e6:de:ae:7f:a8:
0c:11:14:5b:cb:f3:bc:fa:35:1a:43:d3:50:41:c7:
7f:9c:41:cd:a0:a2:54:cc:9d:a2:d0:73:43:70:2e:
5e:c0:50:12:0d:0d:20:73:fc:52:bd:b3:46:0e:31:
f7:22:50:29:e6:84:2a:1c:65:77:30:14:55:49:aa:
25:a1:b1:8a:68:c3:a4:86:f1:f2:92:9a:d6:5d:93:
8c:b4:87:09:02:5d:27:19:df:37:15:fc:5d:55:e3:
19:03:55:32:99:eb:a1:a9:cd:02:d4:b8:cc:c2:ac:
dc:ce:71:63:21:e1:c5:29:3a:9f:7f:49:1d:33:1a:
78:00:c1:73:ae:1a:3a:2d:48:24:7f:13:e4:35:ea:
77:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CA:F0:1C:AC:1C:7D:0F:0E:23:67:54:4B:34:02:2A:30:50:CD:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC55546C13B111F18DD52D9CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.208.0-154.194.213.255
154.196.214.0/24
154.208.88.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:f2:2a:d8:4e:b0:37:57:7f:03:cc:7f:c1:ae:61:ba:87:1c:
a8:10:a5:7d:85:1a:11:6f:d7:c9:9d:f6:8b:65:77:08:67:07:
14:6f:8c:81:1b:bf:c3:fd:a1:7b:ca:df:bc:e7:34:57:7e:1a:
7a:19:0f:b0:99:3d:6c:c2:8e:f3:64:1a:82:dc:84:1e:26:ef:
06:e2:d1:bd:41:d4:48:92:d5:46:83:c5:14:71:52:f5:11:f0:
f2:4e:1e:3c:8f:44:e7:1c:d7:60:dd:cd:15:76:77:51:f3:ea:
cf:36:72:9d:48:04:d3:b7:47:25:1f:21:34:15:8d:19:76:6b:
b7:fe:eb:9e:95:b9:69:7f:c1:f6:12:a7:56:fb:2f:b3:36:46:
9f:d4:d9:c2:53:b4:1a:da:f5:d2:4f:46:b2:3a:59:6f:53:86:
1d:26:e1:4b:cf:db:e3:37:60:58:92:b9:45:82:0d:72:22:64:
70:d3:8a:96:44:7b:f5:06:1c:b4:16:ef:33:2a:37:93:d3:bd:
b3:e5:a8:64:26:00:d8:f5:da:c1:c0:89:ef:54:97:db:93:fe:
b9:27:96:a5:91:79:bd:4d:c3:64:dc:b7:7c:ea:99:8d:9f:60:
93:8e:d5:26:90:17:df:5b:f3:4d:85:87:c1:37:a8:18:d8:9f:
9c:8e:0a:2c
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAbwqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjI3MDc1NjQxWhcNMjYwNDA5MDc1NjQxWjAYMRYw
FAYDVQQDEw02OWExNGUzZC1kZmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvQ893p5iELxDnkyn6uMqqqHzZ/ot0YW+MYXRC8iJjAvJI0H8su88uC4c
2dibi+1DHK0+CE1W40go36RvljKoHs2t4pV3YxCAq7DxCwSXGf6JC22uPgYRUMb7
YDlQ+IllOF2OrtmDGHa+3c1QfUPl8NLY5t6uf6gMERRby/O8+jUaQ9NQQcd/nEHN
oKJUzJ2i0HNDcC5ewFASDQ0gc/xSvbNGDjH3IlAp5oQqHGV3MBRVSaolobGKaMOk
hvHykprWXZOMtIcJAl0nGd83FfxdVeMZA1Uymeuhqc0C1LjMwqzcznFjIeHFKTqf
f0kdMxp4AMFzrho6LUgkfxPkNep3TQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFGzK
8BysHH0PDiNnVEs0AiowUM1ZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQzU1NTQ2QzEzQjExMUYxOERENTJEOUNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBASawtADBAGawtQDBACa
xNYDBAKa0FgwDQYJKoZIhvcNAQELBQADggEBALPyKthOsDdXfwPMf8GuYbqHHKgQ
pX2FGhFv18md9otldwhnBxRvjIEbv8P9oXvK37znNFd+GnoZD7CZPWzCjvNkGoLc
hB4m7wbi0b1B1EiS1UaDxRRxUvUR8PJOHjyPROcc12DdzRV2d1Hz6s82cp1IBNO3
RyUfITQVjRl2a7f+656VuWl/wfYSp1b7L7M2Rp/U2cJTtBra9dJPRrI6WW9Thh0m
4UvP2+M3YFiSuUWCDXIiZHDTipZEe/UGHLQW7zMqN5PTvbPlqGQmANj12sHAie9U
l9uT/rknlqWReb1Nw2Tct3zqmY2fYJOO1SaQF99b802Fh8E3qBjYn5yOCiw=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:49 2026 by rpki-client