Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F054FAEA0EFB11F1A27FA6B2DAE4EC9C.roa
File: F054FAEA0EFB11F1A27FA6B2DAE4EC9C.roa (raw, json)
Hash identifier: TVXhjAm7WoYZwnib3baTCorRcuaaXmfgp27cdFTk3cc=
Subject key identifier: 28:C0:CD:90:1C:E9:D9:07:AC:4F:7E:F1:F9:5C:B7:ED:F6:06:D4:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BAC9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F054FAEA0EFB11F1A27FA6B2DAE4EC9C.roa
Signing time: Sat 21 Feb 2026 08:04:26 +0000
ROA not before: Sat 21 Feb 2026 08:04:22 +0000
ROA not after: Sat 07 Mar 2026 08:04:22 +0000
asID: 139880
IP address blocks: 154.194.128.0/18 maxlen: 24
154.215.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113353 (0x1bac9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 21 08:04:22 2026 GMT
Not After : Mar 7 08:04:22 2026 GMT
Subject: CN=6999670a-dda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ce:eb:c0:59:95:f3:29:f6:97:6e:24:ea:85:
0c:9b:50:46:35:e7:af:18:c9:60:fc:fb:70:47:ef:
87:3e:a1:e9:8c:c6:95:b4:34:56:da:7b:0a:13:75:
16:12:3f:d9:25:04:d4:55:f7:f1:d1:20:bb:ef:11:
96:aa:1f:54:1e:e6:99:ce:56:70:24:d7:f7:f3:69:
4b:f4:93:41:4d:33:f3:0a:ac:9d:80:e6:d8:42:9a:
d6:1f:23:70:7e:99:f7:34:0b:06:94:8e:bb:8b:ed:
6f:15:89:cd:18:fa:e5:8f:c9:55:3e:11:2a:a2:ba:
9b:6b:ab:2b:21:82:01:77:84:63:c3:ca:75:06:c5:
11:73:09:ca:47:9b:f8:d1:5b:ac:d2:e3:c5:33:d6:
6d:7b:02:4e:02:5b:2e:98:59:e6:31:e6:6e:eb:e7:
d4:4d:81:6f:07:c4:3f:29:c9:ab:47:00:42:f5:4a:
82:61:1c:6e:c6:7b:12:d3:e9:69:ee:06:b5:57:44:
68:41:eb:dc:24:8e:79:e5:e6:d1:83:3d:5f:65:30:
5a:3e:6a:03:f1:32:ea:4f:73:05:c1:d7:c7:96:59:
c4:a1:42:df:e9:46:a0:9d:85:77:e2:a2:0a:bf:3b:
78:e8:c2:b0:ff:8e:e3:ca:d1:07:25:7d:94:9d:15:
08:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C0:CD:90:1C:E9:D9:07:AC:4F:7E:F1:F9:5C:B7:ED:F6:06:D4:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F054FAEA0EFB11F1A27FA6B2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.128.0/18
154.215.64.0/18
Signature Algorithm: sha256WithRSAEncryption
52:de:be:26:61:47:8d:0a:02:71:57:ad:63:63:ba:87:56:63:
d4:eb:d6:e4:c5:7c:e9:9e:b3:7f:dc:f8:7d:ef:6d:b7:43:8c:
2e:12:a2:bb:3d:32:04:0f:1c:24:57:06:ad:b6:72:eb:fd:43:
c0:da:08:d9:96:e5:3c:ee:e8:4e:8b:a5:bc:d8:00:68:7c:09:
b8:99:c5:c9:39:93:4b:e1:7a:03:6d:11:f0:a2:ad:e8:0f:67:
74:72:4a:45:69:c3:54:de:64:b6:cb:80:82:cb:f6:71:1d:38:
e4:5e:ca:41:79:5c:ff:e8:3e:b0:4f:8d:1f:fc:55:ad:fd:1e:
5f:e2:25:c0:9a:45:e3:74:96:ea:84:25:6a:9a:88:b6:0d:11:
da:af:90:e4:17:de:76:c8:22:81:29:52:4f:ad:0b:45:61:9d:
9e:e6:8a:97:0c:b5:e1:a1:92:ba:9d:b0:eb:56:48:16:58:a1:
94:a2:b7:22:55:80:53:5b:97:ea:a2:3c:17:cd:ce:94:ff:60:
fe:e9:3b:a3:df:f4:db:94:56:f4:d4:0e:d1:e6:2d:f2:ed:5e:
38:8b:a5:c6:5f:65:8a:e9:e4:3f:2c:5d:3b:3e:73:de:3f:fb:
d2:0f:e0:48:ea:4b:fb:78:9a:42:3f:aa:d7:c6:28:e9:55:03:
eb:19:00:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:33:32 2026 by rpki-client