Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/002A13921C6C11F1ADAD267CDAE4EC9C.roa
File: 002A13921C6C11F1ADAD267CDAE4EC9C.roa (raw, json)
Hash identifier: oJlHiqbHI8O+xeIT3XLd501OIiGYMfu0fNdwJaXc2lc=
Subject key identifier: DE:45:2E:42:A4:35:22:5D:E0:DE:CE:2A:FF:A0:7D:90:4E:9E:D8:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BEB5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/002A13921C6C11F1ADAD267CDAE4EC9C.roa
Signing time: Tue 10 Mar 2026 10:29:21 +0000
ROA not before: Tue 10 Mar 2026 10:29:16 +0000
ROA not after: Fri 10 Apr 2026 10:29:16 +0000
asID: 1405
IP address blocks: 154.83.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114357 (0x1beb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 10 10:29:16 2026 GMT
Not After : Apr 10 10:29:16 2026 GMT
Subject: CN=69aff281-494c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6a:8a:9c:3c:9e:c3:c6:0b:bc:b8:ba:7c:92:
11:af:42:77:96:55:52:16:57:1f:a6:42:a0:fb:94:
cb:56:ff:7a:57:f2:c9:b4:32:6a:57:96:ca:64:da:
77:54:7e:79:ea:3e:79:5e:c1:3b:b8:9a:7c:43:06:
ab:18:b4:da:4b:dc:49:64:14:18:0e:21:9a:ca:77:
cf:33:dc:04:6d:fb:01:22:15:2d:db:7a:88:45:a1:
24:60:a7:35:90:7c:41:fb:7e:15:95:3c:4d:75:63:
ee:36:1e:ef:19:3b:9a:74:c4:03:45:2f:26:69:9a:
1c:61:61:07:2f:65:a9:00:72:7e:90:97:18:00:19:
00:77:ec:14:3b:87:56:f0:fe:7d:9a:a2:29:55:e5:
d5:d5:69:7f:39:7f:82:d7:95:3b:31:db:b9:68:94:
b2:e4:e3:e6:58:0f:9e:b2:d9:16:62:5b:b3:f8:97:
94:a9:4c:1c:97:95:c9:c2:51:41:70:df:43:3b:88:
9a:4c:a3:b1:16:1b:ab:d9:fb:a0:34:89:ef:d5:02:
84:24:53:f4:f6:69:8a:2f:c9:f6:59:e0:d6:81:45:
4b:9f:bc:5e:07:a0:a8:87:7e:f3:c7:d6:bb:3f:e2:
50:a7:81:d1:04:b2:c9:86:dd:02:c6:0c:1e:23:f1:
e9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:45:2E:42:A4:35:22:5D:E0:DE:CE:2A:FF:A0:7D:90:4E:9E:D8:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/002A13921C6C11F1ADAD267CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.88.0/23
Signature Algorithm: sha256WithRSAEncryption
c9:21:14:aa:43:4d:a5:4b:d1:27:11:b3:75:e7:61:4a:b8:33:
9b:a2:d4:4d:18:df:8b:67:b8:89:23:62:17:cd:80:38:25:49:
bc:e2:be:e7:2c:4a:53:e9:b1:e8:46:cd:c4:33:94:7d:0c:3b:
aa:e8:65:48:40:7e:7c:d2:a6:9b:e6:e1:d0:35:8d:06:c8:ac:
9d:68:00:67:bd:18:af:c7:64:49:30:b0:a9:1e:51:80:13:d1:
84:89:46:3d:8b:4e:58:b0:97:34:6e:03:ad:4c:c8:98:49:25:
6f:6d:a5:8d:ed:78:9a:07:1c:45:83:11:e7:80:ff:08:15:4f:
33:e8:f2:13:2d:d2:3a:b3:57:57:7c:b1:97:68:85:cc:69:f4:
1b:1b:01:f4:99:f8:2c:a3:aa:c1:4d:18:a7:6c:9b:a3:0b:56:
10:f8:ec:bf:3e:25:8d:45:5f:a4:51:a6:46:a8:d9:55:50:6b:
6b:1d:b5:dd:fb:2b:21:33:18:68:0f:78:b5:4f:95:a2:02:f6:
8a:43:02:bf:c8:35:6d:8b:6d:d0:f2:0f:6f:81:45:0c:bf:b7:
34:ed:7a:16:ed:d0:7e:b0:ad:25:3c:7a:c1:36:86:9d:5a:0b:
25:2f:b8:80:62:e0:81:2e:34:e6:09:17:3e:04:d0:1c:a4:6f:
ba:32:f8:d2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAb61MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzEwMTAyOTE2WhcNMjYwNDEwMTAyOTE2WjAYMRYw
FAYDVQQDEw02OWFmZjI4MS00OTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqGqKnDyew8YLvLi6fJIRr0J3llVSFlcfpkKg+5TLVv96V/LJtDJqV5bK
ZNp3VH556j55XsE7uJp8QwarGLTaS9xJZBQYDiGaynfPM9wEbfsBIhUt23qIRaEk
YKc1kHxB+34VlTxNdWPuNh7vGTuadMQDRS8maZocYWEHL2WpAHJ+kJcYABkAd+wU
O4dW8P59mqIpVeXV1Wl/OX+C15U7Mdu5aJSy5OPmWA+estkWYluz+JeUqUwcl5XJ
wlFBcN9DO4iaTKOxFhur2fugNInv1QKEJFP09mmKL8n2WeDWgUVLn7xeB6Coh37z
x9a7P+JQp4HRBLLJht0CxgweI/Hp1QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFN5F
LkKkNSJd4N7OKv+gfZBOnti1MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wMDJBMTM5MjFDNkMxMUYxQURBRDI2N0NEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlNYMA0GCSqGSIb3DQEB
CwUAA4IBAQDJIRSqQ02lS9EnEbN152FKuDObotRNGN+LZ7iJI2IXzYA4JUm84r7n
LEpT6bHoRs3EM5R9DDuq6GVIQH580qab5uHQNY0GyKydaABnvRivx2RJMLCpHlGA
E9GEiUY9i05YsJc0bgOtTMiYSSVvbaWN7XiaBxxFgxHngP8IFU8z6PITLdI6s1dX
fLGXaIXMafQbGwH0mfgso6rBTRinbJujC1YQ+Oy/PiWNRV+kUaZGqNlVUGtrHbXd
+yshMxhoD3i1T5WiAvaKQwK/yDVti23Q8g9vgUUMv7c07XoW7dB+sK0lPHrBNoad
WgslL7iAYuCBLjTmCRc+BNAcpG+6MvjS
-----END CERTIFICATE-----
Generated at Tue Mar 24 16:15:55 2026 by rpki-client