Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/511D77C4278111F1A8300CA0DAE4EC9C.roa
File: 511D77C4278111F1A8300CA0DAE4EC9C.roa (raw, json)
Hash identifier: uomUOu5kpPq+Etkrfs+7qs59c12uMkqQt7oz7+25X/M=
Subject key identifier: CD:E7:F2:48:E3:5F:24:F1:0D:48:74:B6:A6:EE:CA:93:EA:43:FD:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C089
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/511D77C4278111F1A8300CA0DAE4EC9C.roa
Signing time: Tue 24 Mar 2026 12:59:39 +0000
ROA not before: Tue 24 Mar 2026 12:59:34 +0000
ROA not after: Fri 01 May 2026 12:59:34 +0000
asID: 62240
IP address blocks: 154.194.73.0/24 maxlen: 24
154.194.74.0/24 maxlen: 24
154.196.24.0/24 maxlen: 24
154.196.25.0/24 maxlen: 24
154.196.26.0/24 maxlen: 24
154.196.27.0/24 maxlen: 24
154.196.28.0/24 maxlen: 24
154.196.51.0/24 maxlen: 24
154.196.52.0/24 maxlen: 24
154.196.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114825 (0x1c089)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 12:59:34 2026 GMT
Not After : May 1 12:59:34 2026 GMT
Subject: CN=69c28abb-a5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d8:27:a2:2f:1b:c0:88:6c:64:20:02:fc:c3:
0e:aa:54:7e:07:56:fa:f6:a5:9b:f4:ea:f3:32:75:
34:74:f6:ea:52:60:a5:7c:10:85:02:27:6f:27:69:
32:87:df:24:e5:ff:81:d5:5a:56:69:dd:94:4e:9a:
a8:f2:08:34:9b:08:24:fb:c9:aa:67:e5:59:54:a1:
78:ab:b9:e2:79:12:19:23:1b:80:56:a3:eb:40:21:
bb:80:32:48:b5:41:82:78:84:c4:1a:7a:d0:ea:eb:
74:67:09:3f:8d:74:9e:1b:c2:74:34:a8:e3:2d:9a:
68:f9:bf:91:e0:44:c2:55:8f:48:74:cc:db:0f:82:
88:30:c0:1b:d8:cc:c9:34:c0:10:c5:11:42:3e:a1:
0f:57:16:9d:45:a7:76:26:71:86:6d:ed:7e:ff:dc:
60:1d:49:20:db:5e:25:9b:18:cb:aa:5d:e7:4e:42:
87:a8:dd:f5:ce:69:fe:92:fe:d0:31:1f:7a:04:e8:
7e:4e:10:55:55:d8:e0:87:cc:98:12:90:98:97:b9:
46:dc:40:89:c4:31:62:95:68:e4:6f:b1:03:ca:7f:
ce:ad:e6:f8:ae:59:c8:41:1b:82:71:fb:37:20:3c:
25:72:c6:3b:90:27:e2:e8:08:11:2e:c7:dd:44:3a:
d1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E7:F2:48:E3:5F:24:F1:0D:48:74:B6:A6:EE:CA:93:EA:43:FD:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/511D77C4278111F1A8300CA0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.73.0-154.194.74.255
154.196.24.0-154.196.28.255
154.196.51.0-154.196.53.255
Signature Algorithm: sha256WithRSAEncryption
9f:e6:54:3d:a7:51:19:89:db:ca:92:31:7d:82:2b:59:22:a7:
dd:69:05:8d:38:e5:ee:94:0a:0b:90:c7:69:86:45:65:52:73:
ac:98:32:c1:7e:d1:71:16:f4:9d:f0:72:3f:65:5b:02:9c:da:
c6:f8:b9:88:d4:23:00:08:3e:9f:e1:6b:b6:89:fc:89:d0:3e:
f7:d2:a4:e7:96:38:75:8b:19:02:c7:04:e6:11:18:f8:1f:6e:
ea:76:72:f2:0f:72:4b:33:41:8d:56:5e:43:fd:71:af:39:1f:
aa:be:1b:fc:73:f2:c4:ee:52:06:d4:84:04:ef:02:7d:f2:83:
97:12:1b:99:96:cb:d5:57:82:2a:c3:4a:60:38:84:c4:d5:e0:
17:af:b6:2d:41:ea:54:10:4e:7c:7f:b2:a3:d7:b7:43:c4:2c:
7e:2e:e7:ac:cb:d7:fb:12:1d:91:4d:67:5b:19:7c:64:d7:09:
8f:f1:fd:54:7d:30:50:9e:5a:4d:87:72:7b:66:33:99:8e:b6:
d6:6e:26:0a:59:d5:4e:0f:13:50:f0:76:2c:b9:03:b7:75:65:
c7:a1:93:7b:b9:66:0b:c2:ef:14:0c:82:85:e2:a9:94:0b:40:
29:a9:e7:fb:f4:56:e0:f0:19:77:a6:75:71:92:ce:a2:3a:07:
90:c2:ff:4a
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgIDAcCJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzI0MTI1OTM0WhcNMjYwNTAxMTI1OTM0WjAYMRYw
FAYDVQQDEw02OWMyOGFiYi1hNWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAztgnoi8bwIhsZCAC/MMOqlR+B1b69qWb9OrzMnU0dPbqUmClfBCFAidv
J2kyh98k5f+B1VpWad2UTpqo8gg0mwgk+8mqZ+VZVKF4q7nieRIZIxuAVqPrQCG7
gDJItUGCeITEGnrQ6ut0Zwk/jXSeG8J0NKjjLZpo+b+R4ETCVY9IdMzbD4KIMMAb
2MzJNMAQxRFCPqEPVxadRad2JnGGbe1+/9xgHUkg214lmxjLql3nTkKHqN31zmn+
kv7QMR96BOh+ThBVVdjgh8yYEpCYl7lG3ECJxDFilWjkb7EDyn/Oreb4rlnIQRuC
cfs3IDwlcsY7kCfi6AgRLsfdRDrREwIDAQABo4ICyTCCAsUwHQYDVR0OBBYEFM3n
8kjjXyTxDUh0tqbuypPqQ/0UMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MTFENzdDNDI3ODExMUYxQTgzMDBDQTBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqMAwDBACawkkDBACawkowDAME
A5rEGAMEAJrEHDAMAwQAmsQzAwQBmsQ0MA0GCSqGSIb3DQEBCwUAA4IBAQCf5lQ9
p1EZidvKkjF9gitZIqfdaQWNOOXulAoLkMdphkVlUnOsmDLBftFxFvSd8HI/ZVsC
nNrG+LmI1CMACD6f4Wu2ifyJ0D730qTnljh1ixkCxwTmERj4H27qdnLyD3JLM0GN
Vl5D/XGvOR+qvhv8c/LE7lIG1IQE7wJ98oOXEhuZlsvVV4Iqw0pgOITE1eAXr7Yt
QepUEE58f7Kj17dDxCx+Luesy9f7Eh2RTWdbGXxk1wmP8f1UfTBQnlpNh3J7ZjOZ
jrbWbiYKWdVODxNQ8HYsuQO3dWXHoZN7uWYLwu8UDIKF4qmUC0Apqef79Fbg8Bl3
pnVxks6iOgeQwv9K
-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:49 2026 by rpki-client