Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EF23120455911F1920B270CCF1D38B0.roa
File: 3EF23120455911F1920B270CCF1D38B0.roa (raw, json)
Hash identifier: 13fYL5G+SRwDq0R2YD5iX/kIO+bOfprst0ZRUNfcsh0=
Subject key identifier: 97:2B:79:6D:9D:B3:B0:82:7D:49:D7:14:68:5A:A0:CA:F7:E8:A3:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C88B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EF23120455911F1920B270CCF1D38B0.roa
Signing time: Fri 01 May 2026 12:28:24 +0000
ROA not before: Fri 01 May 2026 12:28:19 +0000
ROA not after: Sun 26 Jul 2026 12:28:19 +0000
asID: 29852
IP address blocks: 154.194.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 May 2026 00:07:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116875 (0x1c88b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 12:28:19 2026 GMT
Not After : Jul 26 12:28:19 2026 GMT
Subject: CN=69f49c68-5139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9e:0d:2c:a1:eb:a0:f2:a6:f4:b1:61:ba:9a:
8b:2d:0c:71:60:a6:39:43:c0:e7:ce:b7:f9:ca:09:
14:33:db:52:b8:4c:9d:37:18:ab:56:bb:17:60:47:
ec:f3:10:94:b4:c5:17:9d:5d:68:c8:77:aa:09:86:
1d:4d:53:5d:8f:c3:15:6c:a7:76:08:dd:3f:15:9b:
f0:8c:87:57:06:8e:a0:0f:c5:87:c2:29:60:e5:32:
5a:4e:2a:1c:ca:ed:9c:39:09:91:bc:87:f9:b5:36:
4e:92:23:33:1a:83:dd:5a:ab:4b:c1:b8:a6:c2:ec:
86:f7:63:6e:f1:c7:6c:60:82:cb:1e:ed:1c:63:2a:
b1:5f:2c:be:73:65:58:be:e5:48:1c:6a:da:d6:e7:
86:7d:4b:3f:4e:80:e9:8d:27:f1:8b:a7:9e:dc:73:
2c:02:15:0e:a0:3f:1a:80:7c:49:5b:59:05:d3:6a:
e0:6a:30:54:4e:c3:12:2f:c4:2b:55:cb:9c:6a:ad:
ec:6c:0c:11:25:11:c4:96:5d:00:ba:a7:0a:a2:af:
b1:a8:53:31:26:90:67:58:e2:dc:ca:86:da:65:41:
20:b8:7f:b0:d1:4e:71:6c:30:0e:f6:5c:ea:37:42:
37:68:26:b6:24:d2:6d:28:86:58:1b:7e:e0:9b:1e:
7d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2B:79:6D:9D:B3:B0:82:7D:49:D7:14:68:5A:A0:CA:F7:E8:A3:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EF23120455911F1920B270CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.58.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:67:8b:bb:b5:e5:0e:eb:68:69:d2:d2:20:8e:05:ca:b0:52:
ff:82:cc:a3:c8:85:2b:a5:62:d4:f9:d1:de:59:93:79:19:58:
71:a9:72:6f:c6:34:59:5f:d9:15:ec:cd:73:96:2d:5c:fc:a3:
7d:37:b5:ce:5b:1d:e4:63:2e:77:f8:06:0b:94:79:86:c3:71:
55:b0:3a:c6:7d:f0:ba:f9:f4:c2:b0:81:38:3d:2b:53:f5:6a:
47:de:53:ed:41:30:a6:d1:bd:1a:31:ce:d0:ed:79:6f:5b:73:
c6:96:f0:f4:13:e3:d4:ca:65:d1:74:fb:2a:63:57:14:b0:8e:
78:a7:e4:cc:85:bd:ca:62:27:44:68:31:d7:02:80:1e:33:e9:
71:7d:a7:ee:99:a6:17:ca:43:89:ec:43:55:83:cd:1b:40:f0:
22:1b:87:f4:62:d4:0c:70:c2:ce:df:4c:c0:85:c8:4e:b8:a7:
2e:ec:4b:d4:1e:a2:88:0a:40:a6:80:ce:67:11:61:e4:2d:2b:
c0:ff:08:7b:46:13:d3:6b:22:b9:53:85:f5:04:70:3c:de:bc:
23:ca:a4:cb:fd:54:3b:91:47:5f:65:61:d4:4d:ab:1e:cb:38:
c4:47:bf:55:e5:1e:3b:23:e7:5a:c8:ae:87:d1:06:e2:e4:b8:
b4:72:eb:1b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAciLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTAxMTIyODE5WhcNMjYwNzI2MTIyODE5WjAYMRYw
FAYDVQQDEw02OWY0OWM2OC01MTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuZ4NLKHroPKm9LFhupqLLQxxYKY5Q8Dnzrf5ygkUM9tSuEydNxirVrsX
YEfs8xCUtMUXnV1oyHeqCYYdTVNdj8MVbKd2CN0/FZvwjIdXBo6gD8WHwilg5TJa
Tiocyu2cOQmRvIf5tTZOkiMzGoPdWqtLwbimwuyG92Nu8cdsYILLHu0cYyqxXyy+
c2VYvuVIHGra1ueGfUs/ToDpjSfxi6ee3HMsAhUOoD8agHxJW1kF02rgajBUTsMS
L8QrVcucaq3sbAwRJRHEll0AuqcKoq+xqFMxJpBnWOLcyobaZUEguH+w0U5xbDAO
9lzqN0I3aCa2JNJtKIZYG37gmx59yQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJcr
eW2ds7CCfUnXFGhaoMr36KOhMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zRUYyMzEyMDQ1NTkxMUYxOTIwQjI3MENDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsI6MA0GCSqGSIb3DQEB
CwUAA4IBAQBrZ4u7teUO62hp0tIgjgXKsFL/gsyjyIUrpWLU+dHeWZN5GVhxqXJv
xjRZX9kV7M1zli1c/KN9N7XOWx3kYy53+AYLlHmGw3FVsDrGffC6+fTCsIE4PStT
9WpH3lPtQTCm0b0aMc7Q7XlvW3PGlvD0E+PUymXRdPsqY1cUsI54p+TMhb3KYidE
aDHXAoAeM+lxfafumaYXykOJ7ENVg80bQPAiG4f0YtQMcMLO30zAhchOuKcu7EvU
HqKICkCmgM5nEWHkLSvA/wh7RhPTayK5U4X1BHA83rwjyqTL/VQ7kUdfZWHUTase
yzjER79V5R47I+dayK6H0Qbi5Li0cusb
-----END CERTIFICATE-----
Generated at Wed May 6 16:44:09 2026 by rpki-client