Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/010FE3683BCA11F1A8E38BA4CE1D38B0.roa
File: 010FE3683BCA11F1A8E38BA4CE1D38B0.roa (raw, json)
Hash identifier: VYTAQD2ciuI+WThyUdZ2PL/1m8JTK15KWjoDQ7gVZX8=
Subject key identifier: D1:DC:A1:8B:33:DF:9A:01:1A:13:DF:34:62:08:A5:16:9A:58:0D:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C5F7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/010FE3683BCA11F1A8E38BA4CE1D38B0.roa
Signing time: Sun 19 Apr 2026 08:30:21 +0000
ROA not before: Sun 19 Apr 2026 08:30:17 +0000
ROA not after: Thu 28 May 2026 08:30:17 +0000
asID: 211826
IP address blocks: 154.194.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116215 (0x1c5f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 19 08:30:17 2026 GMT
Not After : May 28 08:30:17 2026 GMT
Subject: CN=69e4929d-249f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9d:ea:7f:d0:d7:39:05:da:0b:49:77:7b:0a:
c0:2d:15:65:6d:1d:25:90:61:71:1c:b8:69:e8:ec:
db:1d:ed:f4:24:10:33:bc:e8:7c:dd:ec:56:ff:8d:
2f:d7:a9:60:ea:1b:26:55:33:4c:a6:0a:90:0e:ec:
28:48:72:85:19:0c:42:f0:88:11:8c:eb:af:93:a1:
d9:2d:d7:06:32:58:70:72:76:d3:6f:18:de:4e:90:
40:57:e3:c8:b7:5b:9c:9d:0f:d5:aa:a6:c0:3d:98:
d8:64:49:92:75:81:fb:b6:07:0b:28:52:69:74:2e:
81:a6:db:a4:69:99:ed:b1:23:e7:52:ff:49:15:26:
ee:52:ee:e2:c0:1a:a2:bf:d0:64:6b:ff:90:11:14:
12:86:f4:45:fb:7b:41:ed:ae:92:6a:d3:98:32:26:
80:e6:3b:03:6b:b1:c2:ca:ce:8a:fd:9e:75:53:05:
3c:f8:1b:05:e3:b1:2d:76:d2:36:c4:ac:a1:35:07:
39:d8:06:44:4e:a7:57:b0:f9:46:d7:76:b3:5c:3c:
11:5c:4c:4f:2b:42:58:74:c9:ba:77:e0:c9:e3:2e:
0a:1e:33:46:a9:60:74:bb:e5:62:c4:3f:fa:13:4f:
69:7d:c6:65:30:1e:5a:d6:e5:77:f0:a1:5a:b1:19:
93:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DC:A1:8B:33:DF:9A:01:1A:13:DF:34:62:08:A5:16:9A:58:0D:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/010FE3683BCA11F1A8E38BA4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.55.0/24
Signature Algorithm: sha256WithRSAEncryption
23:89:9e:32:c3:64:e4:b4:d1:fd:d2:e2:50:08:83:0e:5c:43:
9c:8e:72:19:92:7a:c5:1b:da:f5:0b:94:b6:0e:4a:76:3c:e3:
6e:67:4a:04:72:a6:fc:19:76:c5:c3:20:26:47:0b:4f:6c:e7:
a7:30:43:3c:9e:08:85:c2:d7:af:34:62:11:86:c3:20:f1:6e:
69:ca:81:76:87:18:b8:f7:ad:62:aa:93:a2:15:a0:82:40:29:
c3:76:5f:76:59:fc:0a:46:41:a2:37:ea:ba:5a:f6:dd:9c:12:
c7:e5:ab:6e:ee:c1:b9:cc:26:c1:db:5d:1b:aa:32:f9:a4:71:
e5:0f:25:67:4a:67:40:c4:71:3d:2b:23:8e:f8:fc:e3:62:3a:
45:3f:0e:66:69:b6:b3:fc:c8:ab:f7:49:34:9a:ca:09:52:37:
9a:49:a2:4f:de:1f:86:6f:68:52:ca:e0:a6:07:ef:22:aa:4c:
d8:b7:ee:ee:f1:bc:42:c7:81:c9:0d:2d:e9:81:02:e8:b0:97:
b0:cb:85:92:9b:2e:90:a2:b8:0b:ce:a0:eb:89:57:3d:93:32:
07:62:8f:af:8e:02:da:18:e4:7e:db:4f:f9:57:95:cb:e8:13:
a9:49:8f:51:46:33:07:8d:99:ef:03:7d:ea:4f:67:e4:47:8d:
d1:03:67:ed
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcX3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDE5MDgzMDE3WhcNMjYwNTI4MDgzMDE3WjAYMRYw
FAYDVQQDEw02OWU0OTI5ZC0yNDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuZ3qf9DXOQXaC0l3ewrALRVlbR0lkGFxHLhp6OzbHe30JBAzvOh83exW
/40v16lg6hsmVTNMpgqQDuwoSHKFGQxC8IgRjOuvk6HZLdcGMlhwcnbTbxjeTpBA
V+PIt1ucnQ/VqqbAPZjYZEmSdYH7tgcLKFJpdC6BptukaZntsSPnUv9JFSbuUu7i
wBqiv9Bka/+QERQShvRF+3tB7a6SatOYMiaA5jsDa7HCys6K/Z51UwU8+BsF47Et
dtI2xKyhNQc52AZETqdXsPlG13azXDwRXExPK0JYdMm6d+DJ4y4KHjNGqWB0u+Vi
xD/6E09pfcZlMB5a1uV38KFasRmTOQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNHc
oYsz35oBGhPfNGIIpRaaWA27MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wMTBGRTM2ODNCQ0ExMUYxQThFMzhCQTRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsI3MA0GCSqGSIb3DQEB
CwUAA4IBAQAjiZ4yw2TktNH90uJQCIMOXEOcjnIZknrFG9r1C5S2Dkp2PONuZ0oE
cqb8GXbFwyAmRwtPbOenMEM8ngiFwtevNGIRhsMg8W5pyoF2hxi4961iqpOiFaCC
QCnDdl92WfwKRkGiN+q6WvbdnBLH5atu7sG5zCbB210bqjL5pHHlDyVnSmdAxHE9
KyOO+PzjYjpFPw5mabaz/Mir90k0msoJUjeaSaJP3h+Gb2hSyuCmB+8iqkzYt+7u
8bxCx4HJDS3pgQLosJewy4WSmy6QorgLzqDriVc9kzIHYo+vjgLaGOR+20/5V5XL
6BOpSY9RRjMHjZnvA33qT2fkR43RA2ft
-----END CERTIFICATE-----
Generated at Sat May 9 11:01:46 2026 by rpki-client