Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF0D7BE60E5D11F18A6030E1DAE4EC9C.roa
File: FF0D7BE60E5D11F18A6030E1DAE4EC9C.roa (raw, json)
Hash identifier: kH9x3uROkDNBU+0ZnM9exynZxZZrq3jgTYubGG3RFuw=
Subject key identifier: DF:94:4E:4C:96:B3:F4:BB:10:47:86:73:CF:A4:B3:6A:03:52:69:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA76
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF0D7BE60E5D11F18A6030E1DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 13:13:50 +0000
ROA not before: Fri 20 Feb 2026 13:13:46 +0000
ROA not after: Fri 27 Mar 2026 13:13:46 +0000
asID: 138915
IP address blocks: 154.206.64.0/24 maxlen: 24
154.206.65.0/24 maxlen: 24
154.206.66.0/24 maxlen: 24
154.206.68.0/23 maxlen: 24
154.206.68.0/24 maxlen: 24
154.206.69.0/24 maxlen: 24
154.206.70.0/23 maxlen: 24
154.206.70.0/24 maxlen: 24
154.206.71.0/24 maxlen: 24
154.206.96.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113270 (0x1ba76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 13:13:46 2026 GMT
Not After : Mar 27 13:13:46 2026 GMT
Subject: CN=69985e0e-7784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b2:2c:37:b0:b9:13:40:96:64:8d:3f:1b:9c:
08:78:6a:b6:72:99:63:78:67:9e:25:17:32:6e:20:
4a:29:05:d4:fa:89:fa:12:5c:c1:c7:07:69:be:7d:
73:d9:ff:b7:f1:a1:3e:4f:7f:cf:cd:a8:1e:96:48:
cb:c2:2a:3d:41:53:e6:0e:47:78:c8:59:b8:26:69:
bd:df:9d:c8:26:c3:4f:fb:da:42:46:08:e7:88:c6:
73:19:ae:8c:d1:7d:6d:a4:a2:97:dd:76:06:09:a5:
eb:4d:78:90:cb:9b:ef:91:30:7a:06:03:41:ea:7a:
f5:3b:51:6b:94:8a:9d:50:cd:fe:77:12:e0:82:c8:
ba:2a:77:3c:2a:c9:61:c9:43:d1:89:ef:26:5d:36:
55:9a:d0:1c:f6:44:0a:58:4a:2e:b5:48:69:33:ae:
53:f1:87:77:dc:84:ef:3d:08:16:fa:bb:e7:60:50:
d4:4b:59:c1:64:ea:bb:54:73:aa:2a:c4:72:2c:ff:
17:0c:ec:c1:49:b3:9d:a6:5b:84:0b:34:a3:d8:40:
54:15:17:6e:be:00:8b:c9:68:f5:a5:de:96:5c:55:
c9:d2:29:6e:07:9f:5c:a6:36:60:fe:6e:a4:ce:a8:
a2:eb:42:0d:a9:d1:3d:22:e9:fb:63:a8:c3:da:e2:
b3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:94:4E:4C:96:B3:F4:BB:10:47:86:73:CF:A4:B3:6A:03:52:69:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF0D7BE60E5D11F18A6030E1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.64.0-154.206.66.255
154.206.68.0/22
154.206.96.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:c3:f4:df:16:8a:fd:43:b7:de:b3:9e:1b:7e:5c:fc:f4:7b:
4e:db:a8:c6:a6:f8:00:db:0c:11:05:34:c7:9e:8b:8c:9b:ee:
a1:f9:84:d2:88:0f:4a:c8:aa:b4:33:1d:ad:5b:03:d0:16:32:
2b:e7:ab:9f:51:f9:e9:08:43:fa:13:24:1e:34:fb:8b:85:90:
31:59:ef:09:6d:05:ef:e6:73:5f:8f:25:aa:ba:7d:91:59:58:
cb:3a:8d:e5:84:b0:ca:50:99:f6:3e:12:c4:0b:38:28:d1:67:
c9:3b:e1:ef:6c:f2:dd:da:47:c1:a1:53:ad:a0:58:f2:07:e3:
db:6b:64:8d:c6:61:6a:c3:76:d0:bf:b8:46:20:d8:9b:2f:80:
d3:c7:e9:41:a0:6b:36:f6:09:84:cc:0f:f5:bd:a0:40:0d:34:
93:06:2b:b0:d4:fc:9c:dd:97:e1:78:a1:b1:f9:b6:13:90:16:
d7:c5:55:18:1d:5d:92:93:6a:a3:d1:0e:53:1e:5d:03:08:2c:
b3:a0:d4:af:95:11:e4:29:fa:ca:82:d4:48:6d:5f:90:c9:91:
a9:9d:45:94:3a:1f:bf:a5:4d:6d:ca:b7:ad:1f:0b:fc:cd:89:
67:26:51:41:c2:6f:86:47:f9:7c:1f:82:6f:51:37:72:f7:45:
fe:29:6b:3a
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAbp2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjIwMTMxMzQ2WhcNMjYwMzI3MTMxMzQ2WjAYMRYw
FAYDVQQDEw02OTk4NWUwZS03Nzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAlbIsN7C5E0CWZI0/G5wIeGq2cpljeGeeJRcybiBKKQXU+on6ElzBxwdp
vn1z2f+38aE+T3/PzagelkjLwio9QVPmDkd4yFm4Jmm9353IJsNP+9pCRgjniMZz
Ga6M0X1tpKKX3XYGCaXrTXiQy5vvkTB6BgNB6nr1O1FrlIqdUM3+dxLggsi6Knc8
KslhyUPRie8mXTZVmtAc9kQKWEoutUhpM65T8Yd33ITvPQgW+rvnYFDUS1nBZOq7
VHOqKsRyLP8XDOzBSbOdpluECzSj2EBUFRduvgCLyWj1pd6WXFXJ0iluB59cpjZg
/m6kzqii60INqdE9Iun7Y6jD2uKzPwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFN+U
TkyWs/S7EEeGc8+ks2oDUmk1MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GRjBEN0JFNjBFNUQxMUYxOEE2MDMwRTFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAaazkADBACazkIDBAKa
zkQDBAGazmAwDQYJKoZIhvcNAQELBQADggEBAD/D9N8Wiv1Dt96znht+XPz0e07b
qMam+ADbDBEFNMeei4yb7qH5hNKID0rIqrQzHa1bA9AWMivnq59R+ekIQ/oTJB40
+4uFkDFZ7wltBe/mc1+PJaq6fZFZWMs6jeWEsMpQmfY+EsQLOCjRZ8k74e9s8t3a
R8GhU62gWPIH49trZI3GYWrDdtC/uEYg2JsvgNPH6UGgazb2CYTMD/W9oEANNJMG
K7DU/Jzdl+F4obH5thOQFtfFVRgdXZKTaqPRDlMeXQMILLOg1K+VEeQp+sqC1Eht
X5DJkamdRZQ6H7+lTW3Kt60fC/zNiWcmUUHCb4ZH+Xwfgm9RN3L3Rf4pazo=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:31 2026 by rpki-client