Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/148EF79A493411F1B6570A00CF1D38B0.roa
File: 148EF79A493411F1B6570A00CF1D38B0.roa (raw, json)
Hash identifier: hiBWKyseSkdzlDeWxKPQC/RqJq8/wZaOpYyIkJLrPmQ=
Subject key identifier: BB:77:CD:FE:21:B1:E3:17:76:D6:40:EF:0D:86:EA:E2:2B:A2:79:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C991
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/148EF79A493411F1B6570A00CF1D38B0.roa
Signing time: Wed 06 May 2026 10:12:26 +0000
ROA not before: Wed 06 May 2026 10:12:21 +0000
ROA not after: Sun 06 May 2029 10:12:21 +0000
asID: 17561
IP address blocks: 154.85.148.0/24 maxlen: 24
154.85.149.0/24 maxlen: 24
154.85.150.0/24 maxlen: 24
154.85.151.0/24 maxlen: 24
154.85.152.0/24 maxlen: 24
154.85.153.0/24 maxlen: 24
154.85.154.0/24 maxlen: 24
154.85.155.0/24 maxlen: 24
154.85.156.0/24 maxlen: 24
154.85.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117137 (0x1c991)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 10:12:21 2026 GMT
Not After : May 6 10:12:21 2029 GMT
Subject: CN=69fb140a-bb70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d6:e1:93:d2:67:6b:04:05:83:91:92:10:6a:
34:37:13:8d:7e:79:b7:37:09:e6:04:0d:4a:ec:ed:
bf:c8:0a:19:b2:34:25:9a:2c:8f:26:6c:2e:47:3c:
e1:b5:a7:d0:38:ed:91:97:02:77:a1:80:4f:a6:c9:
ba:50:95:12:cc:d3:39:dc:c2:09:02:be:31:90:76:
24:3e:2e:1a:38:07:e4:9b:79:a1:e7:11:e4:22:38:
0f:79:fa:48:87:21:d4:29:ba:07:93:19:1c:e0:ae:
08:61:c3:7a:fc:31:76:c0:90:14:04:81:3f:ec:e8:
d1:40:4e:40:88:3d:dd:d9:0d:88:52:89:f4:9d:f4:
b3:3b:97:bb:32:bb:35:46:d7:bd:c1:be:d1:63:cf:
ac:10:58:93:75:32:b6:1b:79:32:a4:6e:49:3b:70:
bb:a1:0e:0d:2d:6d:6f:4b:7a:a5:f7:79:57:85:2c:
d4:45:5c:0b:5a:ef:4d:87:0f:de:7d:fe:75:12:ec:
d3:9d:4b:2a:fd:0d:dd:82:e1:56:84:24:81:fa:45:
1c:9b:42:a2:b2:b3:53:e8:5d:34:b7:82:bb:ef:14:
da:42:ec:83:d2:e7:36:cb:59:2c:c6:96:b5:81:57:
7b:c4:4c:f1:38:7d:5a:9b:c0:e6:84:1c:0e:e0:5b:
58:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:77:CD:FE:21:B1:E3:17:76:D6:40:EF:0D:86:EA:E2:2B:A2:79:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/148EF79A493411F1B6570A00CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.148.0-154.85.157.255
Signature Algorithm: sha256WithRSAEncryption
66:2a:e9:44:6b:bd:e7:7f:44:68:bd:d9:4a:cd:47:12:85:0b:
f8:0e:52:4b:22:c1:1a:a7:16:fb:1b:ba:45:7e:39:16:97:ce:
a8:fb:4c:fa:58:a3:58:cf:be:4a:34:b0:3e:79:9c:6e:91:fb:
b2:6a:3e:ba:e6:f5:5d:95:96:61:3d:be:dd:1a:52:d0:0d:ff:
50:99:04:47:69:aa:c4:e6:a5:07:0d:62:37:8d:e5:21:88:f9:
41:02:cc:8c:76:14:ae:2c:5d:ce:75:34:28:e7:8a:2e:59:d1:
3c:76:41:07:dd:8e:79:72:d4:de:4e:c2:d6:a3:64:51:89:98:
43:d6:1d:8b:ce:45:53:cd:64:67:ce:3d:5e:7b:04:24:9c:06:
55:55:48:f8:80:8f:10:1e:a8:df:4b:fc:53:d3:a0:f4:36:32:
c4:4d:d8:17:24:85:e3:f3:f2:85:71:ad:a0:17:7d:7b:ae:53:
e4:ae:6a:7d:0c:0c:db:7f:2e:ce:41:be:5c:db:82:24:56:46:
ba:f9:b8:39:00:ab:a8:59:81:16:48:9f:35:4a:51:c3:47:ed:
ab:3d:59:4c:79:b5:a6:04:27:94:d9:bb:0a:32:53:ee:c8:00:
52:70:a5:4d:fa:22:3f:68:38:76:e6:7d:9b:13:80:2a:74:cc:
da:af:42:82
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAcmRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTA2MTAxMjIxWhcNMjkwNTA2MTAxMjIxWjAYMRYw
FAYDVQQDEw02OWZiMTQwYS1iYjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArdbhk9JnawQFg5GSEGo0NxONfnm3NwnmBA1K7O2/yAoZsjQlmiyPJmwu
RzzhtafQOO2RlwJ3oYBPpsm6UJUSzNM53MIJAr4xkHYkPi4aOAfkm3mh5xHkIjgP
efpIhyHUKboHkxkc4K4IYcN6/DF2wJAUBIE/7OjRQE5AiD3d2Q2IUon0nfSzO5e7
Mrs1Rte9wb7RY8+sEFiTdTK2G3kypG5JO3C7oQ4NLW1vS3ql93lXhSzURVwLWu9N
hw/eff51EuzTnUsq/Q3dguFWhCSB+kUcm0KisrNT6F00t4K77xTaQuyD0uc2y1ks
xpa1gVd7xEzxOH1am8DmhBwO4FtYtQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFLt3
zf4hseMXdtZA7w2G6uIronn9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xNDhFRjc5QTQ5MzQxMUYxQjY1NzBBMDBDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKaVZQDBAGaVZwwDQYJ
KoZIhvcNAQELBQADggEBAGYq6URrved/RGi92UrNRxKFC/gOUksiwRqnFvsbukV+
ORaXzqj7TPpYo1jPvko0sD55nG6R+7JqPrrm9V2VlmE9vt0aUtAN/1CZBEdpqsTm
pQcNYjeN5SGI+UECzIx2FK4sXc51NCjnii5Z0Tx2QQfdjnly1N5OwtajZFGJmEPW
HYvORVPNZGfOPV57BCScBlVVSPiAjxAeqN9L/FPToPQ2MsRN2BckhePz8oVxraAX
fXuuU+Suan0MDNt/Ls5BvlzbgiRWRrr5uDkAq6hZgRZInzVKUcNH7as9WUx5taYE
J5TZuwoyU+7IAFJwpU36Ij9oOHbmfZsTgCp0zNqvQoI=
-----END CERTIFICATE-----
Generated at Sat May 9 11:03:41 2026 by rpki-client