Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAA84592229411F1B856EDF2DAE4EC9C.roa
File: DAA84592229411F1B856EDF2DAE4EC9C.roa (raw, json)
Hash identifier: VRBs5fpJQj4j9a0pDhKOp0Rz5zU8KIe9o1fMzG1hzg0=
Subject key identifier: D7:A8:F5:E9:7B:C9:0C:E9:46:EB:F6:50:D8:FB:85:FD:2C:90:3C:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BFA6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAA84592229411F1B856EDF2DAE4EC9C.roa
Signing time: Wed 18 Mar 2026 06:36:55 +0000
ROA not before: Wed 18 Mar 2026 06:36:50 +0000
ROA not after: Sun 04 Oct 2026 06:36:50 +0000
asID: 21859
IP address blocks: 154.89.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114598 (0x1bfa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 18 06:36:50 2026 GMT
Not After : Oct 4 06:36:50 2026 GMT
Subject: CN=69ba4807-4005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d9:a3:89:3a:89:0d:9a:00:1f:80:16:4d:1c:
64:d9:15:f0:08:3f:09:c7:0f:ce:1c:6e:9f:89:22:
be:e5:52:d6:16:66:89:26:95:56:bc:07:5f:2c:ab:
2d:ba:b7:1d:d7:a0:32:1c:91:9a:c1:5a:67:53:e8:
08:67:40:89:e4:65:26:ad:3f:47:73:0f:34:ab:c8:
cc:26:8a:9c:8e:0a:41:92:3b:4a:55:22:af:0f:7a:
ed:62:18:2f:e8:c8:55:7f:79:2b:b1:6a:51:a5:52:
80:fb:e2:48:9b:f3:c6:17:ff:91:e3:4a:4e:73:74:
7f:a9:b4:70:8c:68:98:a5:ba:e3:36:23:c2:73:b2:
c0:6d:86:02:16:19:29:ee:04:36:38:9a:f5:99:8c:
f1:99:48:1d:52:aa:5c:d5:11:fa:ae:f7:e1:4a:91:
cf:0d:7a:f9:f0:2f:9e:a3:7c:02:5a:08:93:49:20:
aa:2e:53:9b:7f:60:53:76:26:02:94:d3:13:d3:1a:
63:2a:ae:91:86:0a:a9:5f:13:61:8a:68:d3:d2:06:
69:a5:2e:8c:00:ea:5e:d8:bc:49:15:24:f8:92:d2:
a3:12:aa:78:6a:f9:77:ad:d4:0e:89:ee:c2:53:34:
5d:cb:20:36:f8:7f:33:6a:4c:b8:45:f5:45:f5:06:
1e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A8:F5:E9:7B:C9:0C:E9:46:EB:F6:50:D8:FB:85:FD:2C:90:3C:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAA84592229411F1B856EDF2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.5.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ed:91:4b:d6:b0:ec:08:05:4d:60:64:42:9e:28:a4:65:9c:
d9:85:d8:aa:71:83:a2:4f:16:9d:a8:f5:ae:29:2c:57:39:d9:
d5:bb:ba:12:0a:06:dc:fd:f4:11:62:86:44:c2:9d:62:d7:9a:
6f:13:8d:ed:6c:d8:da:d5:04:6f:36:d0:f2:0e:fe:81:c8:92:
66:e7:2a:10:11:85:0e:5d:e8:ae:ee:f7:4c:2c:02:2e:02:eb:
07:fb:da:ec:32:b5:2f:90:8b:ec:8a:a4:07:23:c9:99:3f:ed:
22:4b:54:15:e5:b0:ef:9a:85:e1:38:3a:de:ca:f1:13:ea:f2:
9f:18:73:fc:c8:f0:f4:fb:97:4e:e3:25:7a:bf:40:95:2d:ba:
63:cd:fa:db:b6:16:c4:00:0f:db:de:0f:e6:72:b7:37:9c:0c:
b9:ae:78:b2:a5:3f:71:86:e1:fa:fa:32:a8:27:6e:a2:31:79:
39:2c:9f:58:0a:4f:15:0d:20:30:8b:58:e5:00:b4:64:d1:4e:
4e:c1:39:f3:e0:b2:e8:04:27:ae:72:a3:de:37:fd:7a:a9:eb:
55:fc:16:61:60:e0:a7:0e:9a:42:80:7f:4e:d6:37:5e:38:9e:
0a:48:13:49:f0:2f:84:ea:87:cd:17:07:6f:b5:f9:16:d5:a3:
81:cf:d1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:20 2026 by rpki-client