Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EBC2B80278311F1A6040BAADAE4EC9C.roa
File: 0EBC2B80278311F1A6040BAADAE4EC9C.roa (raw, json)
Hash identifier: U1i/9BfGXXU2mvJhYuxWIs9iQeH5QsZvIoxrEC612fI=
Subject key identifier: 8D:2F:FC:22:E2:76:68:5F:7A:AE:BB:01:1B:59:2F:30:BC:76:14:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C08D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EBC2B80278311F1A6040BAADAE4EC9C.roa
Signing time: Tue 24 Mar 2026 13:12:07 +0000
ROA not before: Tue 24 Mar 2026 13:12:02 +0000
ROA not after: Fri 01 May 2026 13:12:02 +0000
asID: 62240
IP address blocks: 154.194.99.0/24 maxlen: 24
154.194.100.0/24 maxlen: 24
154.196.56.0/24 maxlen: 24
154.196.57.0/24 maxlen: 24
154.196.58.0/24 maxlen: 24
154.196.59.0/24 maxlen: 24
154.196.60.0/24 maxlen: 24
154.196.61.0/24 maxlen: 24
154.196.62.0/24 maxlen: 24
154.196.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114829 (0x1c08d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 13:12:02 2026 GMT
Not After : May 1 13:12:02 2026 GMT
Subject: CN=69c28da7-e841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6a:9c:29:a9:bf:9a:bf:aa:c2:18:da:d4:5c:
60:35:3f:bf:bb:ea:1c:99:02:b7:d9:66:3b:c2:80:
d9:dd:0d:b4:c7:5d:a2:90:af:6c:dc:cc:a8:bb:56:
d9:3c:5a:d1:72:fb:7b:a3:10:46:05:68:92:4b:37:
5f:bc:9d:66:8b:8f:e7:06:67:33:ab:0c:7b:fb:06:
de:e1:2c:c7:70:f7:67:7b:e5:f7:0b:fe:2f:d0:de:
ec:6e:19:c0:5e:28:c8:6f:c3:9a:6e:d7:d9:23:51:
eb:20:8e:75:9a:78:9c:d0:7f:7e:47:8f:4b:7c:c2:
30:51:12:a8:79:7d:0d:fc:61:4b:94:a0:2c:8e:74:
09:d1:8a:88:cd:0e:e3:85:65:5f:83:bf:15:df:ed:
b0:1a:96:04:33:7e:4f:8c:60:b5:54:a7:84:90:94:
94:cc:71:9b:9d:cf:9d:ad:37:20:43:ca:f6:92:1f:
a0:ba:88:6b:b4:2e:04:aa:c2:53:f9:9d:91:c7:2d:
21:76:24:9c:8a:1f:c1:3b:6e:07:19:89:93:be:b6:
2d:e6:2e:39:55:5d:c8:80:47:ac:41:c2:a9:ac:2e:
2c:5b:70:0d:97:09:4d:a8:7f:cc:e9:86:89:6c:b2:
de:89:a7:50:d2:76:81:0a:ec:02:d5:4d:f8:79:43:
26:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2F:FC:22:E2:76:68:5F:7A:AE:BB:01:1B:59:2F:30:BC:76:14:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EBC2B80278311F1A6040BAADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.99.0-154.194.100.255
154.196.56.0-154.196.62.255
154.196.64.0/24
Signature Algorithm: sha256WithRSAEncryption
58:9c:9d:62:cf:5d:d5:ab:75:a6:60:49:cd:64:dc:db:d3:1d:
0f:21:32:6f:3a:5b:a1:e7:d3:98:6b:b7:35:09:68:98:70:ed:
df:63:83:f7:4e:5c:03:bb:63:20:05:9b:83:48:1f:14:de:dd:
8c:e1:1c:ff:d1:08:b2:32:71:68:c5:6d:32:6e:02:9e:e0:32:
c1:3b:b4:47:ef:af:fe:6e:a2:de:44:83:09:6d:d5:ba:f1:98:
93:86:ac:c7:20:eb:d2:0e:0e:72:f2:69:30:d9:1e:41:4c:ff:
fc:29:32:e7:2c:0e:cf:3c:3d:0c:40:ea:9a:27:49:58:3a:91:
61:29:99:64:2b:b0:34:4f:ea:cf:82:06:37:ae:e2:64:18:d8:
bd:82:78:b8:a6:ed:75:c8:74:28:84:a6:96:d9:6f:90:b2:37:
27:af:8f:a7:c9:b7:ea:e4:2d:35:75:ac:ac:bd:5f:e9:61:9b:
03:51:91:92:e4:51:ad:62:11:1c:bf:12:01:de:d9:e8:9b:2c:
51:b7:9e:eb:04:aa:39:d7:82:25:80:01:70:5e:17:a5:82:86:
d0:ca:7f:4e:1d:b4:a0:3d:52:23:23:92:9a:16:1a:39:4d:99:
07:e8:e6:c0:c6:c8:95:7f:0a:e7:72:aa:e7:7d:7c:f4:e8:20:
c9:c7:5d:3d
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgIDAcCNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzI0MTMxMjAyWhcNMjYwNTAxMTMxMjAyWjAYMRYw
FAYDVQQDEw02OWMyOGRhNy1lODQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3GqcKam/mr+qwhja1FxgNT+/u+ocmQK32WY7woDZ3Q20x12ikK9s3Myo
u1bZPFrRcvt7oxBGBWiSSzdfvJ1mi4/nBmczqwx7+wbe4SzHcPdne+X3C/4v0N7s
bhnAXijIb8OabtfZI1HrII51mnic0H9+R49LfMIwURKoeX0N/GFLlKAsjnQJ0YqI
zQ7jhWVfg78V3+2wGpYEM35PjGC1VKeEkJSUzHGbnc+drTcgQ8r2kh+guohrtC4E
qsJT+Z2Rxy0hdiScih/BO24HGYmTvrYt5i45VV3IgEesQcKprC4sW3ANlwlNqH/M
6YaJbLLeiadQ0naBCuwC1U34eUMmyQIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFI0v
/CLidmhfeq67ARtZLzC8dhQBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wRUJDMkI4MDI3ODMxMUYxQTYwNDBCQUFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBACawmMDBACawmQwDAME
A5rEOAMEAJrEPgMEAJrEQDANBgkqhkiG9w0BAQsFAAOCAQEAWJydYs9d1at1pmBJ
zWTc29MdDyEybzpboefTmGu3NQlomHDt32OD905cA7tjIAWbg0gfFN7djOEc/9EI
sjJxaMVtMm4CnuAywTu0R++v/m6i3kSDCW3VuvGYk4asxyDr0g4OcvJpMNkeQUz/
/Cky5ywOzzw9DEDqmidJWDqRYSmZZCuwNE/qz4IGN67iZBjYvYJ4uKbtdch0KISm
ltlvkLI3J6+Pp8m36uQtNXWsrL1f6WGbA1GRkuRRrWIRHL8SAd7Z6JssUbee6wSq
OdeCJYABcF4XpYKG0Mp/Th20oD1SIyOSmhYaOU2ZB+jmwMbIlX8K53Kq53189Ogg
ycddPQ==
-----END CERTIFICATE-----
Generated at Tue Mar 24 16:15:47 2026 by rpki-client