Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F704D5EC071511F1B2247AA4DAE4EC9C.roa
File: F704D5EC071511F1B2247AA4DAE4EC9C.roa (raw, json)
Hash identifier: Wa+H/aIGQeI8l6WVD/86HVP8cqLRlyyLF/j+LYsbKDQ=
Subject key identifier: 1B:92:09:E8:A8:70:63:97:D0:83:33:10:3B:B0:E7:ED:C7:56:6A:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B91A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F704D5EC071511F1B2247AA4DAE4EC9C.roa
Signing time: Wed 11 Feb 2026 06:50:35 +0000
ROA not before: Wed 11 Feb 2026 06:50:29 +0000
ROA not after: Fri 15 May 2026 06:50:29 +0000
asID: 9294
IP address blocks: 154.196.96.0/19 maxlen: 24
154.199.192.0/20 maxlen: 24
154.204.16.0/20 maxlen: 24
154.205.32.0/20 maxlen: 24
154.206.224.0/20 maxlen: 24
154.208.176.0/20 maxlen: 24
154.210.32.0/19 maxlen: 24
154.210.64.0/19 maxlen: 24
154.210.240.0/20 maxlen: 24
154.220.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112922 (0x1b91a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 11 06:50:29 2026 GMT
Not After : May 15 06:50:29 2026 GMT
Subject: CN=698c26bb-015f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d1:e2:3b:28:49:ff:5a:09:b9:5b:2b:4a:3c:
17:47:cd:45:90:74:cc:fb:81:84:dc:6b:78:b8:1e:
fc:42:87:b9:7f:a5:5a:4c:64:5e:f8:76:87:e0:e7:
3a:8f:7b:52:0b:a5:70:36:c0:98:cb:a0:2d:59:1f:
f4:01:6a:9e:38:7d:c8:78:5c:6d:54:f8:2d:2c:19:
bb:45:0c:d2:a8:fe:c0:c6:5c:35:8f:c0:ab:14:47:
be:a2:35:7a:72:fb:12:a5:33:97:a5:01:03:42:cb:
e3:b5:bc:1a:8c:9d:44:88:45:c6:ca:7d:3f:0b:79:
6a:3b:4b:97:08:d4:5c:85:1b:e6:77:fe:09:f1:d8:
db:f9:2d:68:bc:78:bb:7b:25:16:a9:f2:51:91:0a:
f1:17:4f:ed:34:15:dd:0c:22:a6:06:d6:d9:85:ea:
b4:21:56:27:20:94:a5:2d:02:2e:20:93:3e:27:58:
ec:67:3a:85:51:8e:3d:bc:2d:f6:72:e1:21:18:b0:
e9:87:0a:1a:2a:18:70:f9:d5:6a:79:e2:a9:98:96:
06:d9:ff:fe:56:7e:e1:97:24:de:4c:c3:e1:a9:58:
de:37:e5:1c:34:47:c3:21:cf:15:3c:c0:7e:6a:52:
33:e7:f0:cb:b2:23:35:52:c2:46:e5:40:73:67:39:
0e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:92:09:E8:A8:70:63:97:D0:83:33:10:3B:B0:E7:ED:C7:56:6A:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F704D5EC071511F1B2247AA4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.96.0/19
154.199.192.0/20
154.204.16.0/20
154.205.32.0/20
154.206.224.0/20
154.208.176.0/20
154.210.32.0-154.210.95.255
154.210.240.0/20
154.220.224.0/19
Signature Algorithm: sha256WithRSAEncryption
c0:0f:6b:df:32:38:97:1f:c3:18:cf:34:82:fc:95:b2:37:6e:
e4:8b:a1:e5:63:7f:a5:45:22:bc:f0:4e:dd:95:94:11:49:9d:
cc:09:c4:69:e2:a5:dc:39:c4:33:0f:44:e3:05:fc:da:cd:c3:
3d:21:66:68:12:85:00:71:81:d8:d6:3c:ab:dc:7d:52:65:59:
8e:bd:12:e9:d2:d7:8f:7e:f1:cc:e0:ae:a5:8d:f0:bb:2a:ca:
42:94:d9:81:3a:fc:d0:c4:c0:a5:92:c9:b6:e2:ae:a0:cf:e2:
6b:c3:7e:f1:12:d9:95:9c:cf:d3:6e:d5:d7:45:ed:db:4f:5b:
9a:9d:23:7a:c1:2e:94:cb:31:61:86:d5:ec:3a:45:72:c3:4d:
49:6c:fb:71:15:c9:24:90:fc:61:06:16:11:a2:97:54:af:74:
6f:06:50:0d:9b:50:cc:9c:6a:87:f7:1f:e2:88:7e:c4:13:14:
6e:ec:be:6e:9c:78:a2:a6:57:eb:42:f7:9d:da:3d:e3:25:5c:
90:4a:96:b5:e4:89:92:9d:18:4e:84:6b:80:50:b7:6f:a9:32:
c0:26:fc:f5:13:31:3e:53:9d:99:f2:3a:f4:52:f0:f3:27:a6:
29:7c:90:c3:c7:cf:75:7e:60:65:c7:5f:19:6c:df:42:4f:07:
d1:32:57:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:39:30 2026 by rpki-client