Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDA3A2E00BD911F1A07682E9DAE4EC9C.roa
File: DDA3A2E00BD911F1A07682E9DAE4EC9C.roa (raw, json)
Hash identifier: tRBOQsrE70/6puoUzDSmPE98ml4EiD93ad+zUY0uo7I=
Subject key identifier: A9:0D:F1:8E:65:E5:38:3F:C0:E7:1D:49:B1:8F:4A:B2:14:B4:F3:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B9F7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDA3A2E00BD911F1A07682E9DAE4EC9C.roa
Signing time: Tue 17 Feb 2026 08:22:58 +0000
ROA not before: Tue 17 Feb 2026 08:22:53 +0000
ROA not after: Tue 24 Mar 2026 08:22:53 +0000
asID: 8796
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113143 (0x1b9f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 17 08:22:53 2026 GMT
Not After : Mar 24 08:22:53 2026 GMT
Subject: CN=69942562-934c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5a:14:74:95:78:10:bf:66:a3:c2:4a:ab:fb:
b0:e3:95:d9:be:a8:89:2a:b2:0c:bc:75:95:53:59:
f5:2e:8d:6e:2b:71:c6:39:38:3b:e6:1a:39:c6:f4:
6f:23:ba:6d:86:b7:13:ef:74:cf:66:fc:e4:e2:ac:
da:d1:21:3a:b4:7f:0a:e5:04:d7:3b:6b:60:76:d7:
39:0b:b5:90:0b:c8:36:9b:22:cd:7a:85:20:07:56:
03:6d:a8:81:48:75:d5:02:72:36:0c:56:c2:5c:0a:
a4:90:c8:e6:3e:31:fa:60:dc:dd:74:48:6c:bc:82:
7b:5e:cd:11:07:67:37:80:06:bc:68:e9:36:83:cf:
fc:d2:65:b4:0b:88:dc:2f:32:36:55:80:ec:b9:a9:
44:2b:31:f7:e4:82:65:db:37:58:bc:f9:ae:de:bc:
41:8a:b3:92:c5:ab:26:fa:f0:1f:30:79:28:c3:c4:
74:eb:b9:1e:10:e8:f0:42:a7:f1:77:10:79:75:67:
7a:88:c1:ac:63:71:ed:68:18:87:85:6e:5e:92:cf:
4c:10:45:6b:f8:c3:59:a7:fd:5c:62:0f:8d:d7:3b:
6d:3a:fb:09:17:75:79:92:08:32:7c:aa:ba:d5:84:
83:41:a5:b7:99:b3:6c:c3:86:ec:eb:44:c6:a5:65:
b9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0D:F1:8E:65:E5:38:3F:C0:E7:1D:49:B1:8F:4A:B2:14:B4:F3:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDA3A2E00BD911F1A07682E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
Signature Algorithm: sha256WithRSAEncryption
c3:22:4f:56:37:4e:de:9d:20:42:7b:f0:c6:ef:ec:fc:0a:14:
7c:45:46:54:35:8f:30:eb:89:bc:3a:ae:5d:b2:ff:c9:10:be:
22:1d:93:ae:15:50:28:69:0f:59:44:05:fc:0c:de:22:9b:8b:
99:0d:79:b0:c8:51:57:a3:b9:91:f7:71:b0:5c:2d:64:d8:ff:
b3:64:1e:3e:a3:e7:28:94:00:e8:77:4f:fc:05:17:d6:10:12:
5a:93:05:57:75:99:97:03:94:09:b8:d1:b4:18:01:bf:39:72:
1e:09:16:56:9c:75:80:f3:7e:31:be:ca:04:cc:eb:22:22:a3:
2b:93:74:ee:09:00:79:6e:24:c6:44:96:3f:7e:af:c4:26:06:
2b:34:2e:2a:e2:9b:20:e3:78:94:35:e2:ea:be:f7:bd:f9:12:
3e:5a:eb:50:ae:89:6c:8d:a0:85:63:89:2b:f4:7f:83:32:25:
3d:80:bc:73:ae:89:4b:4e:4e:95:bf:93:c4:ce:10:25:40:c6:
a2:e0:93:53:70:7b:75:56:ec:ca:68:c7:c6:eb:fb:44:af:91:
83:c2:08:a9:55:f0:26:ec:de:2c:f7:b6:da:17:ed:dc:fc:c8:
63:04:b4:c3:11:a9:6b:cd:7b:12:58:2b:02:79:d6:72:82:80:
84:15:cd:49
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAbn3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjE3MDgyMjUzWhcNMjYwMzI0MDgyMjUzWjAYMRYw
FAYDVQQDEw02OTk0MjU2Mi05MzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1loUdJV4EL9mo8JKq/uw45XZvqiJKrIMvHWVU1n1Lo1uK3HGOTg75ho5
xvRvI7pthrcT73TPZvzk4qza0SE6tH8K5QTXO2tgdtc5C7WQC8g2myLNeoUgB1YD
baiBSHXVAnI2DFbCXAqkkMjmPjH6YNzddEhsvIJ7Xs0RB2c3gAa8aOk2g8/80mW0
C4jcLzI2VYDsualEKzH35IJl2zdYvPmu3rxBirOSxasm+vAfMHkow8R067keEOjw
QqfxdxB5dWd6iMGsY3HtaBiHhW5eks9MEEVr+MNZp/1cYg+N1zttOvsJF3V5kggy
fKq61YSDQaW3mbNsw4bs60TGpWW5bQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFKkN
8Y5l5Tg/wOcdSbGPSrIUtPOSMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EREEzQTJFMDBCRDkxMUYxQTA3NjgyRTlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASaWZADBASaWcAwDQYJ
KoZIhvcNAQELBQADggEBAMMiT1Y3Tt6dIEJ78Mbv7PwKFHxFRlQ1jzDribw6rl2y
/8kQviIdk64VUChpD1lEBfwM3iKbi5kNebDIUVejuZH3cbBcLWTY/7NkHj6j5yiU
AOh3T/wFF9YQElqTBVd1mZcDlAm40bQYAb85ch4JFlacdYDzfjG+ygTM6yIioyuT
dO4JAHluJMZElj9+r8QmBis0LirimyDjeJQ14uq+9735Ej5a61CuiWyNoIVjiSv0
f4MyJT2AvHOuiUtOTpW/k8TOECVAxqLgk1Nwe3VW7Mpox8br+0SvkYPCCKlV8Cbs
3iz3ttoX7dz8yGMEtMMRqWvNexJYKwJ51nKCgIQVzUk=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:41 2026 by rpki-client