Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/025C0EE8237111F1B73972F6DAE4EC9C.roa
File: 025C0EE8237111F1B73972F6DAE4EC9C.roa (raw, json)
Hash identifier: F6WLFrFNjiU7ZcxMU/hPenk3YkCGNQeM74n/8DQZ4Ns=
Subject key identifier: E0:C1:67:86:76:56:B5:49:86:42:48:D3:D0:A9:93:5B:CB:6B:3E:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BFC3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/025C0EE8237111F1B73972F6DAE4EC9C.roa
Signing time: Thu 19 Mar 2026 08:52:51 +0000
ROA not before: Thu 19 Mar 2026 08:52:45 +0000
ROA not after: Fri 24 Apr 2026 08:52:45 +0000
asID: 139923
IP address blocks: 154.89.151.0/24 maxlen: 24
154.89.152.0/23 maxlen: 24
154.89.157.0/24 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114627 (0x1bfc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 19 08:52:45 2026 GMT
Not After : Apr 24 08:52:45 2026 GMT
Subject: CN=69bbb963-e230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0f:3f:55:5f:82:4d:0d:4c:4c:b9:ac:c2:a5:
e8:f7:eb:3a:e2:ff:ce:02:34:49:3d:0b:d1:f8:3e:
7c:93:ad:af:fb:2a:1d:f9:08:97:c1:e1:b2:7b:50:
75:56:b7:a7:b2:b8:4c:3e:c8:cb:f9:3f:31:83:c6:
36:f8:17:1d:fe:05:87:ee:f2:31:3c:ad:bb:b2:bf:
14:e9:31:67:c0:ce:ae:86:ed:da:15:bd:bb:8e:61:
92:be:73:ab:69:6e:1f:73:ec:71:57:60:5a:8b:41:
44:73:c4:db:48:88:e1:2b:b9:4c:01:de:de:ef:e1:
b5:c3:c9:d2:c3:74:e4:f3:f1:56:66:83:d4:29:57:
e3:58:04:fe:ca:2c:16:d3:8e:c1:53:69:8a:72:94:
3d:5f:70:ec:d2:a2:90:84:b6:71:71:88:4e:8f:a6:
08:ae:21:12:23:44:db:36:19:c6:96:ac:77:5e:95:
cf:16:3e:1b:f0:57:07:63:38:b8:53:a9:32:03:40:
03:5b:3d:bc:fb:34:c9:8f:93:f9:75:53:21:76:00:
0e:d4:70:48:2a:67:dd:50:82:21:45:4f:41:03:c9:
ab:d8:c1:b5:54:30:c2:18:fd:68:21:60:0e:75:5a:
8b:3b:4c:de:7a:da:03:d6:03:2e:f2:16:c5:b4:70:
9f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C1:67:86:76:56:B5:49:86:42:48:D3:D0:A9:93:5B:CB:6B:3E:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/025C0EE8237111F1B73972F6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.151.0-154.89.153.255
154.89.157.0/24
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:71:40:c7:17:dc:fc:00:91:15:0d:45:b3:11:f9:02:22:4b:
b7:eb:9d:6a:8e:a1:09:2d:2b:47:b8:29:f9:42:31:e6:fb:a6:
ca:b3:a2:51:c5:03:2f:b3:f7:72:cf:21:d7:79:34:88:4f:cd:
54:e9:0a:31:fd:79:e5:92:f8:df:04:ea:af:8c:94:25:20:c6:
70:19:0a:bc:54:f5:4f:63:34:ca:9b:c5:93:ff:25:13:bb:de:
bc:41:b8:b7:b0:bc:7e:2f:9f:39:84:0e:ab:73:93:31:99:de:
80:74:95:fb:b0:58:55:88:b5:3a:20:29:19:ed:ab:3c:3f:10:
8e:60:eb:90:3f:4a:bf:a5:2f:18:db:dd:1c:ff:34:a0:d7:97:
e1:89:51:1a:62:ba:03:17:0e:ef:ce:ed:69:96:21:9c:da:60:
d4:db:e4:33:e2:b0:75:37:c7:9e:70:1a:2c:ff:0f:a0:7b:01:
38:8b:28:50:6e:4a:01:7b:5b:35:5d:de:38:61:3c:26:85:8a:
22:8c:4a:ab:d9:33:41:e3:46:16:92:0f:4c:af:1b:24:4a:c8:
b0:7b:73:da:02:bf:ed:56:c9:a5:52:a9:ca:65:cc:f7:18:f1:
7c:4b:23:55:c4:75:3d:bc:b1:71:70:e4:58:fc:00:12:5f:a1:
ba:d2:eb:f0
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAb/DMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzE5MDg1MjQ1WhcNMjYwNDI0MDg1MjQ1WjAYMRYw
FAYDVQQDEw02OWJiYjk2My1lMjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsQ8/VV+CTQ1MTLmswqXo9+s64v/OAjRJPQvR+D58k62v+yod+QiXweGy
e1B1VrensrhMPsjL+T8xg8Y2+Bcd/gWH7vIxPK27sr8U6TFnwM6uhu3aFb27jmGS
vnOraW4fc+xxV2Bai0FEc8TbSIjhK7lMAd7e7+G1w8nSw3Tk8/FWZoPUKVfjWAT+
yiwW047BU2mKcpQ9X3Ds0qKQhLZxcYhOj6YIriESI0TbNhnGlqx3XpXPFj4b8FcH
Yzi4U6kyA0ADWz28+zTJj5P5dVMhdgAO1HBIKmfdUIIhRU9BA8mr2MG1VDDCGP1o
IWAOdVqLO0zeetoD1gMu8hbFtHCf7wIDAQABo4ICuTCCArUwHQYDVR0OBBYEFODB
Z4Z2VrVJhkJI09Cpk1vLaz4IMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wMjVDMEVFODIzNzExMUYxQjczOTcyRjZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBACaWZcDBAGaWZgDBACa
WZ0DBACaXxgwDQYJKoZIhvcNAQELBQADggEBAKBxQMcX3PwAkRUNRbMR+QIiS7fr
nWqOoQktK0e4KflCMeb7psqzolHFAy+z93LPIdd5NIhPzVTpCjH9eeWS+N8E6q+M
lCUgxnAZCrxU9U9jNMqbxZP/JRO73rxBuLewvH4vnzmEDqtzkzGZ3oB0lfuwWFWI
tTogKRntqzw/EI5g65A/Sr+lLxjb3Rz/NKDXl+GJURpiugMXDu/O7WmWIZzaYNTb
5DPisHU3x55wGiz/D6B7ATiLKFBuSgF7WzVd3jhhPCaFiiKMSqvZM0HjRhaSD0yv
GyRKyLB7c9oCv+1WyaVSqcplzPcY8XxLI1XEdT28sXFw5Fj8ABJfobrS6/A=
-----END CERTIFICATE-----
Generated at Tue Mar 24 16:20:35 2026 by rpki-client