Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F16FBA26FF4411F0BB48F899DAE4EC9C.roa
File: F16FBA26FF4411F0BB48F899DAE4EC9C.roa (raw, json)
Hash identifier: cmwbxBcBPsOxmRK9vzTzl+ywIkm55v0D+jOOSG7o7DM=
Subject key identifier: E5:44:2F:4B:5F:97:97:4D:ED:94:C8:18:5C:A6:27:33:4B:FD:50:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B7F0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F16FBA26FF4411F0BB48F899DAE4EC9C.roa
Signing time: Sun 01 Feb 2026 08:06:43 +0000
ROA not before: Sun 01 Feb 2026 08:06:37 +0000
ROA not after: Sun 08 Mar 2026 08:06:37 +0000
asID: 48031
IP address blocks: 154.210.239.0/24 maxlen: 24
154.219.94.0/24 maxlen: 24
154.219.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112624 (0x1b7f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 1 08:06:37 2026 GMT
Not After : Mar 8 08:06:37 2026 GMT
Subject: CN=697f0992-e04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:37:31:0b:1a:9c:b7:ae:c9:de:c9:31:4b:2f:
22:34:12:0f:1a:dd:ee:ae:cc:45:aa:63:6d:94:56:
05:88:bc:92:84:ad:78:02:5a:0b:dc:45:72:1e:7a:
b0:4f:8c:6a:0f:85:eb:06:9c:a0:0b:79:00:9d:87:
76:eb:8f:56:ee:be:17:8e:4c:d2:75:1a:25:e5:9d:
33:f2:a7:af:73:ac:03:47:4d:25:19:2c:b4:e6:ff:
eb:d7:82:ee:78:ae:3d:4f:49:dc:6e:14:cb:4b:1b:
90:e1:20:ac:7f:3f:07:a2:9f:63:a0:cd:86:d5:25:
29:70:a0:df:8e:73:c0:05:d7:3b:65:de:d1:99:de:
1e:ec:45:39:76:5e:92:0f:a6:19:3a:51:a0:b6:65:
fc:16:3b:7b:f3:37:9a:31:5d:0b:b7:0d:5a:1a:e4:
8e:e4:1d:7e:76:49:7b:18:37:a1:35:51:c9:48:63:
d5:08:99:48:37:a5:75:f4:bc:0b:60:4a:aa:4d:84:
d4:70:42:f9:72:f7:4f:1e:37:d4:46:ef:e6:a5:8a:
8c:82:a4:8f:b3:96:cc:87:58:7c:08:49:8c:cf:a7:
7e:56:6e:0c:4a:35:66:60:18:88:96:f7:cf:c1:8e:
50:bc:18:9b:97:dc:ad:64:42:2c:91:28:4f:8b:d5:
69:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:44:2F:4B:5F:97:97:4D:ED:94:C8:18:5C:A6:27:33:4B:FD:50:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F16FBA26FF4411F0BB48F899DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.239.0/24
154.219.94.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:7c:fe:f2:c0:db:01:af:92:d4:28:88:28:32:44:51:4f:5c:
0d:62:3d:05:91:2d:37:4c:69:2a:6d:f3:54:2b:b4:75:6e:09:
c8:7b:f0:c5:04:97:49:ca:db:65:62:7f:f2:19:5c:b2:1e:85:
d3:65:4f:60:45:98:f4:fe:22:d5:b3:69:72:67:ba:92:80:ee:
f4:53:ec:e2:29:93:8d:24:cb:9d:28:fd:2a:1a:24:fe:9e:3b:
05:e7:dc:e3:72:16:8f:94:8c:72:6b:86:d7:f8:2d:cd:c0:97:
f8:5c:31:85:2e:cc:fb:45:37:13:2d:8e:6e:cb:09:06:2f:a9:
d3:72:1a:a7:db:ec:e6:0c:b0:d4:2c:c2:1f:b9:6c:88:ae:d9:
37:11:bc:8f:5e:a9:05:99:eb:2d:ab:b2:e0:d9:38:88:39:19:
55:a7:85:4e:64:6a:17:3f:de:41:32:57:b2:35:8f:32:29:21:
cb:75:ea:34:f2:56:b4:a0:c0:f7:7a:f1:07:e2:65:ad:74:b9:
15:3e:09:3a:0d:12:be:67:4a:02:68:4d:be:7d:46:33:95:22:
d1:01:29:b0:4c:72:af:00:a0:c8:22:1f:e2:5e:1e:85:af:8c:
2b:42:10:9e:59:1d:30:17:b9:11:63:8d:e3:1d:fd:d2:9b:2a:
c4:6e:0d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:42 2026 by rpki-client