Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2031BE48493911F1A280571ECF1D38B0.roa
File: 2031BE48493911F1A280571ECF1D38B0.roa (raw, json)
Hash identifier: 6NVb7oHYorF2ivngvzilgZdMaYNxTzbUw+kGgiFtAaQ=
Subject key identifier: 75:A6:A3:12:2D:68:BE:A6:36:6B:E4:78:52:48:8E:A6:87:65:04:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C99D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2031BE48493911F1A280571ECF1D38B0.roa
Signing time: Wed 06 May 2026 10:48:33 +0000
ROA not before: Wed 06 May 2026 10:48:28 +0000
ROA not after: Sun 06 May 2029 10:48:28 +0000
asID: 17561
IP address blocks: 154.85.208.0/24 maxlen: 24
154.85.209.0/24 maxlen: 24
154.85.210.0/24 maxlen: 24
154.85.211.0/24 maxlen: 24
154.85.212.0/24 maxlen: 24
154.85.213.0/24 maxlen: 24
154.85.214.0/24 maxlen: 24
154.85.215.0/24 maxlen: 24
154.85.216.0/24 maxlen: 24
154.85.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117149 (0x1c99d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 10:48:28 2026 GMT
Not After : May 6 10:48:28 2029 GMT
Subject: CN=69fb1c81-50b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9f:b7:96:38:a1:4e:54:21:9e:b3:18:aa:ad:
ba:24:d6:84:ca:e1:91:60:6d:ec:46:11:92:e1:97:
99:0a:ae:9f:eb:ad:83:fe:b2:19:d9:dc:e6:69:db:
68:e2:2d:aa:6f:9b:f0:e8:ef:92:7c:8b:6f:58:14:
fd:63:3e:34:e7:b5:32:86:1a:5f:cc:f5:28:78:3c:
78:81:b9:7e:3c:f8:d3:51:ab:0d:64:66:37:bf:68:
b9:6f:0c:1c:e9:f9:4a:26:2d:61:d0:27:1f:4b:a6:
75:93:ff:76:f5:b8:a9:2f:74:64:0f:b7:24:97:e1:
06:fe:64:76:26:cb:96:fc:d9:fd:99:37:2e:e5:16:
f7:a1:d9:59:3d:68:65:cc:5e:d5:aa:a3:6c:b1:9e:
b0:ef:4c:6d:c0:28:1a:57:c2:0a:34:1a:f8:8b:dc:
f3:ba:1c:e2:df:c1:53:0f:da:05:98:d4:5d:71:c5:
91:c7:86:96:a2:85:0f:62:a2:86:8c:73:37:06:b9:
4f:9e:c4:a0:11:57:68:7e:b1:e2:6b:90:81:61:92:
e8:36:4f:4c:2d:ab:61:55:a1:d7:ef:10:14:b4:70:
2f:ee:d9:a1:98:6f:d5:48:1f:e2:56:73:27:62:0c:
6d:a2:d4:3a:ce:93:6f:1b:76:d2:f5:c0:3d:6d:a1:
04:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A6:A3:12:2D:68:BE:A6:36:6B:E4:78:52:48:8E:A6:87:65:04:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2031BE48493911F1A280571ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.208.0-154.85.217.255
Signature Algorithm: sha256WithRSAEncryption
22:bd:dd:10:43:68:48:88:3a:27:b1:93:fc:0a:4d:23:9b:ad:
1b:38:37:31:43:13:14:ac:f2:cb:a2:c9:78:91:2a:ee:f6:12:
93:6d:f2:96:42:2a:8c:85:a2:a9:b4:64:81:9d:d2:54:6d:2c:
d2:63:d8:ae:53:ea:73:b9:65:58:df:8e:5f:d4:40:38:d2:03:
4e:ff:a5:3c:c9:e9:38:56:f1:4d:36:01:4a:22:a5:5c:40:b7:
ae:0d:61:f2:68:64:0f:df:31:30:df:da:1a:fd:4b:f9:c1:56:
bc:a7:5d:7a:80:e3:f8:c8:28:52:21:a3:97:16:0a:09:e1:c7:
ec:76:87:f7:c8:e7:16:1f:49:7f:ca:0d:ec:07:fa:22:5e:66:
63:8f:a8:56:f7:ae:9b:8d:5c:51:82:2e:75:26:41:40:a9:64:
c9:b3:57:3e:f9:0a:46:30:0a:11:b6:c4:bb:66:9c:20:e5:05:
8a:4b:e8:8a:53:c8:42:85:41:a2:92:c2:e8:54:ea:b9:c3:4c:
74:a1:af:be:b2:d7:e8:ff:b5:13:55:f7:b5:39:cc:b4:77:11:
27:28:74:47:7e:a6:7f:75:d6:68:cb:fd:2c:38:45:27:ec:a4:
18:2c:ea:c3:9d:6b:c5:05:12:ef:1d:37:8d:1c:62:cb:56:1f:
27:56:9f:88
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAcmdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTA2MTA0ODI4WhcNMjkwNTA2MTA0ODI4WjAYMRYw
FAYDVQQDEw02OWZiMWM4MS01MGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApJ+3ljihTlQhnrMYqq26JNaEyuGRYG3sRhGS4ZeZCq6f662D/rIZ2dzm
adto4i2qb5vw6O+SfItvWBT9Yz4057UyhhpfzPUoeDx4gbl+PPjTUasNZGY3v2i5
bwwc6flKJi1h0CcfS6Z1k/929bipL3RkD7ckl+EG/mR2JsuW/Nn9mTcu5Rb3odlZ
PWhlzF7VqqNssZ6w70xtwCgaV8IKNBr4i9zzuhzi38FTD9oFmNRdccWRx4aWooUP
YqKGjHM3BrlPnsSgEVdofrHia5CBYZLoNk9MLathVaHX7xAUtHAv7tmhmG/VSB/i
VnMnYgxtotQ6zpNvG3bS9cA9baEE4wIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFHWm
oxItaL6mNmvkeFJIjqaHZQTjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMDMxQkU0ODQ5MzkxMUYxQTI4MDU3MUVDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASaVdADBAGaVdgwDQYJ
KoZIhvcNAQELBQADggEBACK93RBDaEiIOiexk/wKTSObrRs4NzFDExSs8suiyXiR
Ku72EpNt8pZCKoyFoqm0ZIGd0lRtLNJj2K5T6nO5ZVjfjl/UQDjSA07/pTzJ6ThW
8U02AUoipVxAt64NYfJoZA/fMTDf2hr9S/nBVrynXXqA4/jIKFIho5cWCgnhx+x2
h/fI5xYfSX/KDewH+iJeZmOPqFb3rpuNXFGCLnUmQUCpZMmzVz75CkYwChG2xLtm
nCDlBYpL6IpTyEKFQaKSwuhU6rnDTHShr76y1+j/tRNV97U5zLR3EScodEd+pn91
1mjL/Sw4RSfspBgs6sOda8UFEu8dN40cYstWHydWn4g=
-----END CERTIFICATE-----
Generated at Sat May 9 11:01:49 2026 by rpki-client