Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/358B3662409111F1893025F3CE1D38B0.roa
File: 358B3662409111F1893025F3CE1D38B0.roa (raw, json)
Hash identifier: pUNZCouDLYrnBr1UbESKh/1Xk6S4Qq770dSUCqehHUs=
Subject key identifier: 12:32:AC:DD:4D:0F:B9:A5:9A:29:99:82:77:D0:AE:A7:55:62:EA:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C771
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/358B3662409111F1893025F3CE1D38B0.roa
Signing time: Sat 25 Apr 2026 10:26:24 +0000
ROA not before: Sat 25 Apr 2026 10:26:19 +0000
ROA not after: Mon 01 Jun 2026 10:26:19 +0000
asID: 44559
IP address blocks: 154.81.40.0/24 maxlen: 24
154.81.53.0/24 maxlen: 24
154.81.54.0/24 maxlen: 24
154.81.55.0/24 maxlen: 24
154.81.192.0/24 maxlen: 24
154.81.195.0/24 maxlen: 24
154.81.196.0/24 maxlen: 24
154.81.197.0/24 maxlen: 24
154.81.198.0/24 maxlen: 24
154.81.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116593 (0x1c771)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 25 10:26:19 2026 GMT
Not After : Jun 1 10:26:19 2026 GMT
Subject: CN=69ec96d0-94c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f6:22:0c:20:34:f8:60:88:03:55:ff:29:87:
46:f5:a1:a7:61:a6:6d:4c:8d:0f:13:4a:93:6e:34:
b1:7d:1e:ab:63:bd:1e:19:19:fe:6a:e8:16:e6:62:
2b:d0:3d:d4:0f:51:04:78:9a:38:27:2f:9e:62:f8:
ad:f3:5b:8f:73:d6:73:7f:94:50:49:57:fc:f1:1d:
99:d7:f2:c4:c4:59:3b:96:7b:5d:95:58:de:06:71:
0a:89:41:d4:55:83:39:55:8c:34:13:d5:8b:f4:0b:
4a:7e:f9:a7:b3:9d:e6:46:bb:54:84:d7:88:2d:24:
1e:60:23:d7:d9:1b:84:6a:ce:51:6a:0c:8a:02:fc:
7e:56:1b:48:93:41:60:cc:a8:03:c7:0f:ed:ca:3c:
cf:24:72:00:ab:b2:05:8a:cb:bd:44:18:02:04:5e:
0a:c5:fb:55:1f:cc:e9:98:57:5b:1b:cb:59:34:a5:
6b:d6:bb:91:ab:e1:96:c5:4f:3c:c3:70:20:f5:a7:
ba:ec:88:da:e2:10:b3:8d:42:76:ad:a6:05:d7:d6:
7b:e0:7a:f7:28:5a:1c:f3:2a:23:fe:ca:89:46:bf:
6a:fc:44:c9:54:0f:7c:8c:e9:8f:9c:05:bb:98:d2:
4b:c6:f2:5d:5a:0b:a7:22:ad:95:a2:e2:9c:05:0d:
94:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:32:AC:DD:4D:0F:B9:A5:9A:29:99:82:77:D0:AE:A7:55:62:EA:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/358B3662409111F1893025F3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.40.0/24
154.81.53.0-154.81.55.255
154.81.192.0/24
154.81.195.0-154.81.199.255
Signature Algorithm: sha256WithRSAEncryption
1e:e5:68:86:c3:21:85:13:91:ea:ad:a0:85:fa:63:3b:07:49:
c9:8d:33:b8:e6:6d:7c:ed:27:96:2f:1c:7c:de:0d:94:ef:8b:
d1:e4:9d:66:ae:07:ab:bc:3d:1d:d7:e3:9b:26:83:53:49:ca:
e9:48:37:af:f1:32:1b:1c:1d:ce:1d:0c:90:01:69:0c:8e:60:
e8:50:7a:f4:38:7b:38:1c:2d:bf:ae:50:ff:3e:66:6a:b6:85:
3d:7f:ea:0f:ef:b6:4a:1b:f5:62:b4:b6:60:f0:04:8d:51:96:
bc:71:00:00:42:86:90:be:50:9b:bd:68:6f:a4:b7:b6:a7:d7:
45:f6:71:49:6a:9d:d3:ca:02:42:5b:eb:a9:d5:5b:ea:d9:bc:
16:ef:17:dc:e2:7f:73:3c:b0:08:57:7a:a9:64:2c:cf:5e:6e:
88:db:e5:f2:0f:80:1b:ff:39:4e:cd:b9:38:02:45:23:fb:9c:
44:62:2a:91:18:f0:f9:5e:e4:f5:d0:4c:0b:05:45:ce:4d:ec:
1d:5d:65:1e:02:a7:82:06:6d:56:13:a5:ec:61:9c:b8:f9:ae:
78:81:6f:7e:13:b4:9a:71:c2:94:92:2b:75:43:bc:b5:df:67:
07:f0:af:65:bd:e9:66:07:e3:3f:f1:e8:df:ed:7e:9e:b9:1a:
a8:fa:e8:9d
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgIDAcdxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDI1MTAyNjE5WhcNMjYwNjAxMTAyNjE5WjAYMRYw
FAYDVQQDEw02OWVjOTZkMC05NGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAovYiDCA0+GCIA1X/KYdG9aGnYaZtTI0PE0qTbjSxfR6rY70eGRn+augW
5mIr0D3UD1EEeJo4Jy+eYvit81uPc9Zzf5RQSVf88R2Z1/LExFk7lntdlVjeBnEK
iUHUVYM5VYw0E9WL9AtKfvmns53mRrtUhNeILSQeYCPX2RuEas5RagyKAvx+VhtI
k0FgzKgDxw/tyjzPJHIAq7IFisu9RBgCBF4KxftVH8zpmFdbG8tZNKVr1ruRq+GW
xU88w3Ag9ae67Ija4hCzjUJ2raYF19Z74Hr3KFoc8yoj/sqJRr9q/ETJVA98jOmP
nAW7mNJLxvJdWgunIq2VouKcBQ2UsQIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFBIy
rN1ND7mlmimZgnfQrqdVYuomMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNThCMzY2MjQwOTExMUYxODkzMDI1RjNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQAmlEoMAwDBACaUTUDBAOa
UTADBACaUcAwDAMEAJpRwwMEA5pRwDANBgkqhkiG9w0BAQsFAAOCAQEAHuVohsMh
hROR6q2ghfpjOwdJyY0zuOZtfO0nli8cfN4NlO+L0eSdZq4Hq7w9HdfjmyaDU0nK
6Ug3r/EyGxwdzh0MkAFpDI5g6FB69Dh7OBwtv65Q/z5maraFPX/qD++2Shv1YrS2
YPAEjVGWvHEAAEKGkL5Qm71ob6S3tqfXRfZxSWqd08oCQlvrqdVb6tm8Fu8X3OJ/
czywCFd6qWQsz15uiNvl8g+AG/85Ts25OAJFI/ucRGIqkRjw+V7k9dBMCwVFzk3s
HV1lHgKnggZtVhOl7GGcuPmueIFvfhO0mnHClJIrdUO8td9nB/CvZb3pZgfjP/Ho
3+1+nrkaqPronQ==
-----END CERTIFICATE-----
Generated at Sat May 9 11:00:24 2026 by rpki-client