Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8625A2C123C11F1A8B1FAA9DAE4EC9C.roa
File: F8625A2C123C11F1A8B1FAA9DAE4EC9C.roa (raw, json)
Hash identifier: pkqciCoAsGA0LqqkXAZ7tI1txp26CdBOJECX27MAaNI=
Subject key identifier: A3:77:4C:C5:CF:91:F6:19:A4:36:CB:78:10:94:2D:FA:1A:C7:AF:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BBB7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8625A2C123C11F1A8B1FAA9DAE4EC9C.roa
Signing time: Wed 25 Feb 2026 11:27:30 +0000
ROA not before: Wed 25 Feb 2026 11:27:25 +0000
ROA not after: Wed 04 Mar 2026 11:27:25 +0000
asID: 150706
IP address blocks: 154.223.168.0/22 maxlen: 24
154.223.176.0/22 maxlen: 24
154.223.180.0/22 maxlen: 24
154.223.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113591 (0x1bbb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 11:27:25 2026 GMT
Not After : Mar 4 11:27:25 2026 GMT
Subject: CN=699edca2-a9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:5f:97:61:7b:61:3f:fb:f8:9e:b3:0a:9a:
68:33:1e:1c:e8:3c:8c:1b:7f:2a:10:54:7d:37:63:
ca:b3:eb:1e:82:0f:63:1e:f2:e8:bf:1e:53:84:5e:
07:28:1d:1e:a9:16:f1:b5:d9:fa:7f:e6:94:66:75:
5c:9b:25:bb:e5:96:30:57:34:4b:2e:56:74:cb:9d:
77:0b:a1:da:62:27:0f:16:d4:a1:42:76:d2:ae:fd:
22:c7:bb:da:1e:f2:1d:2c:73:87:5d:9f:8c:e4:38:
ea:a6:34:b4:aa:51:95:8f:5f:6f:4c:0f:69:46:2a:
6b:9f:c6:24:63:ba:17:96:c5:4c:61:bf:e6:51:db:
32:84:80:ae:72:73:6c:d9:fe:02:e8:64:a3:44:38:
21:cf:43:3a:a2:b6:35:a8:92:6e:90:12:40:b4:67:
4d:96:3b:fc:6d:86:9b:f0:ee:38:4b:48:25:58:49:
18:1f:d2:36:ff:01:41:78:c1:48:31:68:63:e6:4f:
03:29:37:72:70:e3:d6:bb:a2:05:b3:3c:2b:17:23:
a5:14:4f:03:f5:9f:05:93:26:02:4b:ad:12:a9:48:
e4:d7:43:bd:dd:03:77:7c:e2:0a:4b:14:7a:95:a5:
69:1f:81:34:d1:15:a9:ef:f4:05:00:96:43:79:b2:
97:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:77:4C:C5:CF:91:F6:19:A4:36:CB:78:10:94:2D:FA:1A:C7:AF:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8625A2C123C11F1A8B1FAA9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.168.0/22
154.223.176.0/21
154.223.188.0/22
Signature Algorithm: sha256WithRSAEncryption
63:b9:da:44:c5:05:b4:35:fe:e9:ea:ac:85:96:67:8f:fb:d3:
09:8e:16:d8:e7:cc:ec:7d:e6:04:1a:ec:76:6d:19:96:5e:91:
d2:66:45:d8:ba:5a:ee:b7:4e:d7:8f:ea:97:c6:db:bd:07:7e:
23:62:6a:87:32:20:6e:b6:6a:ca:f4:c1:95:ab:d7:6c:ce:56:
06:ac:3a:89:53:46:3a:51:8f:83:a1:64:a9:3b:66:93:5c:4a:
15:e1:ac:e0:6f:c7:4f:f5:ad:7d:91:58:9e:39:bf:cd:51:d1:
46:0f:ef:63:a8:a6:9c:6c:57:5a:3e:ab:20:93:d8:91:30:96:
cd:d5:20:b8:ba:10:b2:61:8d:34:37:96:38:42:cc:33:ed:93:
4d:3e:4c:d8:f6:ba:c6:ea:c6:81:e3:da:91:5a:d3:00:72:d4:
8e:57:3d:c2:76:59:be:fc:fa:30:6e:8b:2a:08:77:d5:ae:78:
da:15:f9:ba:46:95:b9:fc:20:1b:67:89:89:87:6d:bb:9a:5e:
d6:c5:8b:b7:f5:a0:98:29:b1:61:1f:8a:f1:91:20:56:84:92:
58:5c:a3:e5:b7:22:a0:3f:df:14:4e:b5:8b:3a:27:f1:b7:79:
2d:3a:00:b9:06:ad:70:d7:09:94:f3:78:ee:88:78:a1:34:09:
29:d9:63:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:38 2026 by rpki-client