Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DEF87DA16FD11F1A9FDE7CFDAE4EC9C.roa
File: 3DEF87DA16FD11F1A9FDE7CFDAE4EC9C.roa (raw, json)
Hash identifier: VDITxpOJ5+TVnDRr0hnwO8sZoDtJlNbbIEhyOiHKDAY=
Subject key identifier: 8D:74:9F:D8:04:F9:6C:9E:9D:DF:B8:79:97:98:98:9C:C1:96:C4:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BD34
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DEF87DA16FD11F1A9FDE7CFDAE4EC9C.roa
Signing time: Tue 03 Mar 2026 12:33:55 +0000
ROA not before: Tue 03 Mar 2026 12:33:50 +0000
ROA not after: Sun 14 Jun 2026 12:33:50 +0000
asID: 211826
IP address blocks: 154.197.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113972 (0x1bd34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 12:33:50 2026 GMT
Not After : Jun 14 12:33:50 2026 GMT
Subject: CN=69a6d533-e75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a5:eb:02:6e:fc:3d:90:00:08:9f:a5:3a:e3:
f7:3b:9c:27:df:42:33:55:ab:a8:b4:17:c7:0a:b0:
c5:56:63:97:e2:c9:2b:d2:fe:cf:bd:af:c8:f9:8d:
4f:a0:2e:70:a8:04:fb:dd:b0:13:24:a1:1d:31:86:
0c:67:67:4e:56:a6:2d:98:63:f9:1c:cd:cb:04:8c:
0a:b0:2e:26:5b:f4:37:73:da:a5:82:32:d6:e0:a3:
e6:6b:d3:44:d7:f3:46:88:aa:fb:56:eb:4f:1a:fd:
71:28:61:dc:e0:a0:c6:c8:fe:10:a8:ff:83:fc:9f:
39:73:ce:37:b8:ba:c6:8b:94:4f:b4:4f:8a:1c:7a:
7b:1e:a9:5b:d7:1a:21:4f:84:6c:99:1e:c5:bf:66:
c6:69:00:bb:5e:98:12:4e:a0:73:cd:6b:3c:51:5d:
06:c8:ed:0c:a4:a8:63:50:f4:4c:f9:8d:18:71:74:
2b:4c:85:9d:45:0d:94:64:38:47:5c:65:3f:0a:5a:
3e:8b:68:aa:11:69:00:07:04:47:2b:52:69:bf:00:
c3:a7:ca:0c:f1:29:46:b8:33:63:38:64:26:67:46:
d2:40:6e:49:90:6a:8e:db:63:d2:86:28:eb:15:41:
49:0b:9f:76:fd:fc:6f:82:63:9e:1d:3d:cb:af:b1:
66:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:74:9F:D8:04:F9:6C:9E:9D:DF:B8:79:97:98:98:9C:C1:96:C4:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DEF87DA16FD11F1A9FDE7CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.91.0/24
Signature Algorithm: sha256WithRSAEncryption
92:99:68:b2:14:33:5e:81:04:d0:10:69:63:83:e2:3d:3f:c9:
71:5c:da:15:3a:22:e1:4b:23:09:f7:ad:c2:06:40:0c:24:a5:
ac:dd:32:78:86:05:3e:10:9a:42:3c:01:a5:0a:5c:f5:9b:e3:
2c:c8:62:c9:c1:8b:ba:74:fd:63:0d:ad:0f:ab:7e:72:b8:ac:
f2:21:15:48:9f:97:c1:d3:de:bd:eb:dc:89:91:5b:78:a9:00:
a0:8d:6f:64:2a:35:20:ea:00:bf:fd:b9:50:ec:cd:4e:30:20:
e6:e3:a0:6d:57:01:90:69:9d:bb:08:ee:74:aa:ce:b6:de:7f:
2a:8f:14:aa:3a:d2:f4:d7:15:5c:2a:6b:75:49:13:89:72:41:
c3:4b:a3:43:10:5c:13:b1:3d:25:95:0d:9d:ad:06:1e:1a:41:
3e:44:03:aa:07:13:de:65:b8:a6:6d:a6:a0:6b:bd:b5:93:25:
b5:dd:ff:30:4b:a0:55:02:2f:da:0e:74:8e:fd:88:a6:3e:0b:
59:58:f8:54:f2:8b:a7:3e:1a:a9:78:03:ad:55:cd:da:1e:7c:
a5:85:5e:fd:9a:48:4f:f5:68:c8:3d:94:7c:4a:b1:0b:84:78:
48:7e:b7:fe:d0:e5:04:c5:68:65:90:64:39:a3:de:e2:30:74:
ce:c4:bc:b4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAb00MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzAzMTIzMzUwWhcNMjYwNjE0MTIzMzUwWjAYMRYw
FAYDVQQDEw02OWE2ZDUzMy1lNzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA06XrAm78PZAACJ+lOuP3O5wn30IzVauotBfHCrDFVmOX4skr0v7Pva/I
+Y1PoC5wqAT73bATJKEdMYYMZ2dOVqYtmGP5HM3LBIwKsC4mW/Q3c9qlgjLW4KPm
a9NE1/NGiKr7VutPGv1xKGHc4KDGyP4QqP+D/J85c843uLrGi5RPtE+KHHp7Hqlb
1xohT4RsmR7Fv2bGaQC7XpgSTqBzzWs8UV0GyO0MpKhjUPRM+Y0YcXQrTIWdRQ2U
ZDhHXGU/Clo+i2iqEWkABwRHK1JpvwDDp8oM8SlGuDNjOGQmZ0bSQG5JkGqO22PS
hijrFUFJC592/fxvgmOeHT3Lr7FmBQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFI10
n9gE+Wyend+4eZeYmJzBlsTXMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zREVGODdEQTE2RkQxMUYxQTlGREU3Q0ZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsVbMA0GCSqGSIb3DQEB
CwUAA4IBAQCSmWiyFDNegQTQEGljg+I9P8lxXNoVOiLhSyMJ963CBkAMJKWs3TJ4
hgU+EJpCPAGlClz1m+MsyGLJwYu6dP1jDa0Pq35yuKzyIRVIn5fB096969yJkVt4
qQCgjW9kKjUg6gC//blQ7M1OMCDm46BtVwGQaZ27CO50qs623n8qjxSqOtL01xVc
Kmt1SROJckHDS6NDEFwTsT0llQ2drQYeGkE+RAOqBxPeZbimbaaga721kyW13f8w
S6BVAi/aDnSO/YimPgtZWPhU8ounPhqpeAOtVc3aHnylhV79mkhP9WjIPZR8SrEL
hHhIfrf+0OUExWhlkGQ5o97iMHTOxLy0
-----END CERTIFICATE-----
Generated at Tue Mar 24 16:13:50 2026 by rpki-client