Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4BE8525A1D1411F1AAF252D7DAE4EC9C.roa
File: 4BE8525A1D1411F1AAF252D7DAE4EC9C.roa (raw, json)
Hash identifier: VUeI3BXCASXbol+YopYMDFBC30t7ioEnPffEZGCB+5k=
Subject key identifier: FE:2E:76:99:C8:65:C4:3A:7A:17:3F:14:87:00:CF:F8:6F:68:A2:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BED1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4BE8525A1D1411F1AAF252D7DAE4EC9C.roa
Signing time: Wed 11 Mar 2026 06:34:04 +0000
ROA not before: Wed 11 Mar 2026 06:33:59 +0000
ROA not after: Wed 13 May 2026 06:33:59 +0000
asID: 139880
IP address blocks: 154.83.224.0/20 maxlen: 24
154.89.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 21:34:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114385 (0x1bed1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 11 06:33:59 2026 GMT
Not After : May 13 06:33:59 2026 GMT
Subject: CN=69b10cdc-ecaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:97:10:b7:cf:ed:b3:96:6c:c3:62:23:b2:9f:
a1:73:a2:c9:3f:53:bd:e0:b3:0d:52:d0:2a:71:58:
af:2c:8d:fc:e6:b7:77:01:38:ba:d2:ad:a1:cd:a0:
00:70:51:f5:e4:ae:44:08:bc:87:4f:0d:f0:23:18:
b5:5b:85:81:9a:b5:93:91:5e:02:7b:bd:c2:dd:e0:
41:ea:02:16:dc:3f:e4:d2:a0:aa:fb:d6:df:a6:31:
44:6a:b1:96:46:3a:3f:1b:eb:5f:9d:8b:ea:b0:ef:
76:33:95:93:dd:41:e1:f3:e5:8d:d1:41:3d:bd:35:
e6:cc:25:cc:51:3b:2c:76:a1:0a:82:8e:46:41:29:
db:65:b8:69:79:07:eb:82:8c:b8:94:be:5c:42:46:
92:7f:c2:b8:a9:8e:cf:9b:87:e4:23:06:e6:8e:58:
8c:cd:b3:2e:52:a6:d7:2f:64:7b:0f:1f:1d:b6:7c:
36:a7:30:f3:ac:6d:55:1e:36:67:85:6d:39:2b:11:
d5:c2:1a:d9:56:fa:b2:23:14:af:09:74:8d:5f:47:
0b:ec:cb:23:2a:20:42:f9:50:f5:0d:82:a1:37:db:
5e:bc:f5:ba:cb:34:ef:46:e3:82:ca:09:0e:43:78:
d4:3a:6b:a5:4f:11:bf:70:c7:56:17:a4:3d:b0:0e:
3e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2E:76:99:C8:65:C4:3A:7A:17:3F:14:87:00:CF:F8:6F:68:A2:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4BE8525A1D1411F1AAF252D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.224.0/20
154.89.224.0/20
Signature Algorithm: sha256WithRSAEncryption
55:31:e9:ae:c2:ae:a4:26:c3:0b:26:b7:8e:9a:fc:2c:6b:1a:
f7:75:37:70:34:3a:dc:23:fc:fb:d6:66:b9:a9:34:6a:b2:b0:
22:fd:29:90:6c:11:19:03:52:d0:54:a4:92:50:8e:51:b4:f6:
31:04:6a:af:33:b2:c3:60:78:49:51:de:e9:eb:e6:a1:36:8d:
6a:2d:39:27:0f:ba:0e:08:95:8a:06:cd:09:01:c8:67:d8:4e:
0e:0e:30:ab:17:ea:cd:67:d4:91:43:a6:59:59:a7:d6:1f:fd:
58:59:61:f2:3b:a5:0d:eb:c4:a5:54:9c:52:22:30:f9:33:61:
a6:9a:4f:fa:58:be:9a:c7:65:47:41:c4:69:61:27:1b:ad:68:
c9:7d:6e:90:d9:54:86:22:aa:a7:0e:1f:fd:19:a2:16:da:b3:
53:66:72:11:66:d4:58:23:98:4f:be:d8:34:85:f0:8f:00:e3:
b4:9a:4b:92:0f:89:37:07:fe:5e:a5:9e:b3:36:f8:7f:54:97:
69:ee:7e:b0:cd:a2:6c:88:72:fc:01:5a:db:bd:5c:c0:05:9d:
71:20:b1:11:c3:3c:76:fa:ab:0f:1d:80:8b:02:f8:cc:10:45:
85:d9:f1:c2:32:1a:4f:24:a9:5e:8b:e2:a9:64:5f:dd:3c:4e:
e0:2a:62:be
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAb7RMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzExMDYzMzU5WhcNMjYwNTEzMDYzMzU5WjAYMRYw
FAYDVQQDEw02OWIxMGNkYy1lY2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqZcQt8/ts5Zsw2Ijsp+hc6LJP1O94LMNUtAqcVivLI385rd3ATi60q2h
zaAAcFH15K5ECLyHTw3wIxi1W4WBmrWTkV4Ce73C3eBB6gIW3D/k0qCq+9bfpjFE
arGWRjo/G+tfnYvqsO92M5WT3UHh8+WN0UE9vTXmzCXMUTssdqEKgo5GQSnbZbhp
eQfrgoy4lL5cQkaSf8K4qY7Pm4fkIwbmjliMzbMuUqbXL2R7Dx8dtnw2pzDzrG1V
HjZnhW05KxHVwhrZVvqyIxSvCXSNX0cL7MsjKiBC+VD1DYKhN9tevPW6yzTvRuOC
ygkOQ3jUOmulTxG/cMdWF6Q9sA4+8wIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFP4u
dpnIZcQ6ehc/FIcAz/hvaKKlMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80QkU4NTI1QTFEMTQxMUYxQUFGMjUyRDdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEmlPgAwQEmlngMA0GCSqG
SIb3DQEBCwUAA4IBAQBVMemuwq6kJsMLJreOmvwsaxr3dTdwNDrcI/z71ma5qTRq
srAi/SmQbBEZA1LQVKSSUI5RtPYxBGqvM7LDYHhJUd7p6+ahNo1qLTknD7oOCJWK
Bs0JAchn2E4ODjCrF+rNZ9SRQ6ZZWafWH/1YWWHyO6UN68SlVJxSIjD5M2Gmmk/6
WL6ax2VHQcRpYScbrWjJfW6Q2VSGIqqnDh/9GaIW2rNTZnIRZtRYI5hPvtg0hfCP
AOO0mkuSD4k3B/5epZ6zNvh/VJdp7n6wzaJsiHL8AVrbvVzABZ1xILERwzx2+qsP
HYCLAvjMEEWF2fHCMhpPJKlei+KpZF/dPE7gKmK+
-----END CERTIFICATE-----
Generated at Fri Mar 13 01:26:29 2026 by rpki-client