Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A514956240711F1A70463D4DAE4EC9C.roa
File: 0A514956240711F1A70463D4DAE4EC9C.roa (raw, json)
Hash identifier: 3KnbN/SGueAkIxZy+APkBjfCASaSecaya4QpX8pBhsw=
Subject key identifier: E2:34:C6:6B:87:8B:4B:93:41:25:4B:26:34:F3:A2:CC:E0:B1:C0:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BFF0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A514956240711F1A70463D4DAE4EC9C.roa
Signing time: Fri 20 Mar 2026 02:46:49 +0000
ROA not before: Fri 20 Mar 2026 02:46:43 +0000
ROA not after: Fri 24 Apr 2026 02:46:43 +0000
asID: 154376
IP address blocks: 154.89.151.0/24 maxlen: 24
154.89.152.0/23 maxlen: 24
154.89.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114672 (0x1bff0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 20 02:46:43 2026 GMT
Not After : Apr 24 02:46:43 2026 GMT
Subject: CN=69bcb519-a2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e8:74:f5:4c:53:1f:97:ec:d4:96:91:87:7a:
fd:fe:b9:fa:2d:57:24:2c:5e:13:96:d6:8c:ca:39:
e5:a4:4b:c3:24:9d:84:5a:e2:76:db:8b:1d:00:83:
ea:a8:36:7e:9d:0e:5a:a2:38:e2:77:fe:68:10:a7:
59:d7:55:ae:56:e8:ae:a4:ff:82:d9:25:42:28:ec:
38:cd:84:2e:17:45:05:49:2a:e2:db:49:7f:36:8d:
fd:a2:1b:63:d0:48:40:67:e0:cb:6f:2a:50:a1:3a:
0e:17:a6:57:9b:c3:71:7c:4d:cc:21:ba:4d:ab:ce:
ea:b0:10:dc:15:d6:aa:8b:9f:01:84:01:4c:48:f1:
15:3c:05:ce:26:16:47:b6:5a:d0:74:73:df:c1:23:
41:4b:c0:b7:63:b8:30:d1:7c:db:7f:9d:4d:5a:0d:
14:f4:31:6a:cd:e6:e7:4d:a1:7c:94:7d:d0:ba:cf:
f7:88:ea:65:e3:3d:7b:1d:db:32:42:c2:c6:40:88:
d7:0e:77:ad:f7:21:33:50:ec:5a:f8:6e:c3:37:f1:
b0:f4:92:fa:fd:ab:ae:04:b9:c0:c6:40:24:de:51:
6d:90:b5:7e:5d:50:94:7c:89:26:85:ba:8f:50:4d:
92:2e:6d:41:e2:39:c3:9d:8e:22:fa:57:5c:76:06:
79:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:34:C6:6B:87:8B:4B:93:41:25:4B:26:34:F3:A2:CC:E0:B1:C0:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A514956240711F1A70463D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.151.0-154.89.153.255
154.89.157.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:fc:34:77:35:9a:f9:43:92:a9:10:e0:9c:d6:79:01:b6:02:
50:2e:a8:49:cd:50:96:3e:43:40:fb:4c:31:d0:56:9e:ce:0e:
18:cb:c2:50:56:8a:17:d4:9c:d3:45:f5:2c:19:d7:16:c2:0f:
22:ea:4a:7d:9f:4f:10:57:61:45:aa:e9:f0:71:fd:e6:08:53:
50:a0:51:7e:df:2c:6b:1f:36:96:cd:8f:fe:c8:fc:bb:f3:4b:
12:1b:29:9a:5d:85:38:b4:18:b9:96:50:6a:f8:9d:25:03:8f:
aa:d5:7f:36:20:04:d2:7d:71:d4:6d:7f:e5:eb:eb:cc:3f:be:
95:b0:03:1f:03:10:67:e1:ae:04:ce:eb:9f:88:37:a8:c5:e6:
c2:5e:0f:be:d1:4d:9e:d4:d8:26:6c:42:f7:7f:fe:a0:83:49:
a7:b2:15:d5:e4:2b:8c:cb:de:b8:8e:7b:40:b7:3d:21:0b:17:
b5:a3:e0:cd:3e:c2:62:d6:4b:cb:03:dc:fe:ab:a2:56:18:d7:
6a:2d:22:8c:51:54:15:f5:28:85:ba:31:c7:d9:5b:4a:14:7c:
77:e7:02:c4:10:6b:a0:7f:8c:78:36:40:b2:01:07:a1:87:41:
c2:b4:0a:40:3f:d5:2d:4a:fb:d6:9e:09:4b:2b:23:5e:e2:73:
f4:a1:64:78
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAb/wMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzIwMDI0NjQzWhcNMjYwNDI0MDI0NjQzWjAYMRYw
FAYDVQQDEw02OWJjYjUxOS1hMmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqOh09UxTH5fs1JaRh3r9/rn6LVckLF4TltaMyjnlpEvDJJ2EWuJ224sd
AIPqqDZ+nQ5aojjid/5oEKdZ11WuVuiupP+C2SVCKOw4zYQuF0UFSSri20l/No39
ohtj0EhAZ+DLbypQoToOF6ZXm8NxfE3MIbpNq87qsBDcFdaqi58BhAFMSPEVPAXO
JhZHtlrQdHPfwSNBS8C3Y7gw0Xzbf51NWg0U9DFqzebnTaF8lH3Qus/3iOpl4z17
HdsyQsLGQIjXDnet9yEzUOxa+G7DN/Gw9JL6/auuBLnAxkAk3lFtkLV+XVCUfIkm
hbqPUE2SLm1B4jnDnY4i+ldcdgZ5AwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFOI0
xmuHi0uTQSVLJjTzoszgscDSMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wQTUxNDk1NjI0MDcxMUYxQTcwNDYzRDREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBACaWZcDBAGaWZgDBACa
WZ0wDQYJKoZIhvcNAQELBQADggEBAMT8NHc1mvlDkqkQ4JzWeQG2AlAuqEnNUJY+
Q0D7TDHQVp7ODhjLwlBWihfUnNNF9SwZ1xbCDyLqSn2fTxBXYUWq6fBx/eYIU1Cg
UX7fLGsfNpbNj/7I/LvzSxIbKZpdhTi0GLmWUGr4nSUDj6rVfzYgBNJ9cdRtf+Xr
68w/vpWwAx8DEGfhrgTO65+IN6jF5sJeD77RTZ7U2CZsQvd//qCDSaeyFdXkK4zL
3riOe0C3PSELF7Wj4M0+wmLWS8sD3P6rolYY12otIoxRVBX1KIW6McfZW0oUfHfn
AsQQa6B/jHg2QLIBB6GHQcK0CkA/1S1K+9aeCUsrI17ic/ShZHg=
-----END CERTIFICATE-----
Generated at Tue Mar 24 16:17:33 2026 by rpki-client