Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34760948458A11F1BC2069B0CE1D38B0.roa
File: 34760948458A11F1BC2069B0CE1D38B0.roa (raw, json)
Hash identifier: fo+/26DoGrytHzqEHCU6lzvHQcDB3l8Wuk4Xac5qR8c=
Subject key identifier: 51:B7:48:CB:0D:90:B6:E5:3D:42:18:41:41:E7:44:CB:3C:E5:15:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C8DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34760948458A11F1BC2069B0CE1D38B0.roa
Signing time: Fri 01 May 2026 18:18:52 +0000
ROA not before: Fri 01 May 2026 18:18:46 +0000
ROA not after: Fri 05 Jun 2026 18:18:46 +0000
asID: 202656
IP address blocks: 154.219.192.0/24 maxlen: 24
154.219.195.0/24 maxlen: 24
154.219.201.0/24 maxlen: 24
154.219.202.0/24 maxlen: 24
154.219.203.0/24 maxlen: 24
154.219.208.0/24 maxlen: 24
154.219.209.0/24 maxlen: 24
154.219.210.0/24 maxlen: 24
154.219.212.0/24 maxlen: 24
154.219.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116955 (0x1c8db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 18:18:46 2026 GMT
Not After : Jun 5 18:18:46 2026 GMT
Subject: CN=69f4ee8b-fc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8f:81:36:1a:29:88:9a:6f:48:10:d5:5e:be:
75:86:2d:ab:90:0c:02:80:33:ff:1f:c5:3e:1f:88:
ad:ee:33:b3:a6:e2:ec:d3:0e:7a:1a:51:d4:c6:00:
7f:1a:1c:58:39:a8:9a:6d:b0:ec:8f:f0:39:9b:98:
34:ab:be:3c:b9:28:a2:10:5e:a5:b2:a4:1d:e3:bf:
c8:8e:c0:53:b6:fb:6a:a0:18:35:e0:39:78:c9:b9:
3a:7d:4e:26:dd:eb:59:97:b9:88:d2:b3:46:48:80:
ed:4e:13:60:a7:03:f3:4a:9e:d3:4c:1d:fc:37:ca:
f5:c9:53:ce:6b:fe:b1:90:e6:2a:1d:47:b9:28:5a:
a0:94:82:ed:28:06:35:1c:e6:a9:3a:80:3b:5b:f9:
64:39:20:59:b8:46:54:39:e7:2c:04:32:0b:9f:f2:
59:b3:c2:85:3b:2a:fa:08:18:cd:4c:c7:86:7b:ee:
ff:05:8d:61:e1:d8:65:59:84:51:b9:b1:39:88:1f:
79:5e:cf:4f:c6:3f:89:18:25:38:13:88:c7:fd:05:
39:df:40:bd:6d:b3:3c:8b:67:8b:b1:bd:ac:8b:fe:
f7:1b:85:90:26:65:83:e1:63:99:a8:34:1d:4e:99:
be:66:7a:ab:09:08:b8:bd:c3:b5:70:68:ba:5c:58:
e2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B7:48:CB:0D:90:B6:E5:3D:42:18:41:41:E7:44:CB:3C:E5:15:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34760948458A11F1BC2069B0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.192.0/24
154.219.195.0/24
154.219.201.0-154.219.203.255
154.219.208.0-154.219.210.255
154.219.212.0/23
Signature Algorithm: sha256WithRSAEncryption
22:2f:04:87:ba:f3:5b:4e:cb:e0:91:60:82:12:aa:a2:c9:52:
13:dd:1d:46:dc:84:3e:8b:5e:ac:8e:93:19:fe:64:31:02:92:
07:15:80:d3:02:bc:4a:3c:82:45:a3:db:d5:df:a5:7d:82:11:
27:62:e9:56:71:3a:8a:b9:e4:d9:b3:fb:fc:66:17:6a:4f:16:
c7:a9:ee:34:d7:07:23:bf:75:f8:a4:d0:a4:4f:c3:8e:be:f7:
79:a3:1d:79:35:f3:7b:cc:37:94:f8:b9:d1:dd:b6:e8:b3:6e:
86:2c:06:e1:e9:96:1b:25:61:24:ed:bd:8c:3f:ea:35:92:20:
30:05:e1:c9:e9:97:ad:11:47:de:52:7c:de:89:11:e2:e1:9a:
9c:67:95:f0:02:64:dd:4a:ce:5d:d8:6a:fe:1f:42:e0:0b:13:
ec:d4:34:17:6c:f1:e3:e7:ff:8b:6d:bb:b6:39:e4:1c:f5:85:
80:f4:0e:40:60:e5:6c:35:2c:5b:76:84:e1:6d:05:9f:60:cd:
dc:da:e5:fd:23:92:aa:77:12:31:2f:e2:40:67:75:3b:0c:ec:
ac:13:0b:b9:84:0b:9e:fa:e3:07:64:05:7f:0a:fc:e9:9f:d7:
53:85:05:e9:53:2b:d4:38:dc:7a:fa:e8:9c:72:a0:27:42:43:
0e:b7:69:15
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgIDAcjbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTAxMTgxODQ2WhcNMjYwNjA1MTgxODQ2WjAYMRYw
FAYDVQQDEw02OWY0ZWU4Yi1mYzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1I+BNhopiJpvSBDVXr51hi2rkAwCgDP/H8U+H4it7jOzpuLs0w56GlHU
xgB/GhxYOaiabbDsj/A5m5g0q748uSiiEF6lsqQd47/IjsBTtvtqoBg14Dl4ybk6
fU4m3etZl7mI0rNGSIDtThNgpwPzSp7TTB38N8r1yVPOa/6xkOYqHUe5KFqglILt
KAY1HOapOoA7W/lkOSBZuEZUOecsBDILn/JZs8KFOyr6CBjNTMeGe+7/BY1h4dhl
WYRRubE5iB95Xs9Pxj+JGCU4E4jH/QU530C9bbM8i2eLsb2si/73G4WQJmWD4WOZ
qDQdTpm+ZnqrCQi4vcO1cGi6XFjirQIDAQABo4ICzTCCAskwHQYDVR0OBBYEFFG3
SMsNkLblPUIYQUHnRMs85RVgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNDc2MDk0ODQ1OEExMUYxQkMyMDY5QjBDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQAmtvAAwQAmtvDMAwDBACa
28kDBAKa28gwDAMEBJrb0AMEAJrb0gMEAZrb1DANBgkqhkiG9w0BAQsFAAOCAQEA
Ii8Eh7rzW07L4JFgghKqoslSE90dRtyEPoterI6TGf5kMQKSBxWA0wK8SjyCRaPb
1d+lfYIRJ2LpVnE6irnk2bP7/GYXak8Wx6nuNNcHI791+KTQpE/Djr73eaMdeTXz
e8w3lPi50d226LNuhiwG4emWGyVhJO29jD/qNZIgMAXhyemXrRFH3lJ83okR4uGa
nGeV8AJk3UrOXdhq/h9C4AsT7NQ0F2zx4+f/i227tjnkHPWFgPQOQGDlbDUsW3aE
4W0Fn2DN3Nrl/SOSqncSMS/iQGd1OwzsrBMLuYQLnvrjB2QFfwr86Z/XU4UF6VMr
1DjcevronHKgJ0JDDrdpFQ==
-----END CERTIFICATE-----
Generated at Sat May 9 11:02:58 2026 by rpki-client