Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59CCFD9243B311F19535B608CF1D38B0.roa
File: 59CCFD9243B311F19535B608CF1D38B0.roa (raw, json)
Hash identifier: YyLRQsf7BXNZPgcJGp+Sv7iWdjLXhveZ/fDfS79Ts0A=
Subject key identifier: CD:33:46:52:C0:ED:4B:04:A5:E9:BC:CB:CE:CE:5F:3E:51:DD:B7:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C7E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59CCFD9243B311F19535B608CF1D38B0.roa
Signing time: Wed 29 Apr 2026 10:08:21 +0000
ROA not before: Wed 29 Apr 2026 10:08:15 +0000
ROA not after: Fri 27 Apr 2029 10:08:15 +0000
asID: 17561
IP address blocks: 154.90.28.0/24 maxlen: 24
154.90.29.0/24 maxlen: 24
154.90.30.0/24 maxlen: 24
154.90.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116706 (0x1c7e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 10:08:15 2026 GMT
Not After : Apr 27 10:08:15 2029 GMT
Subject: CN=69f1d895-8410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:da:41:2f:09:7f:6c:8e:31:a7:82:23:9c:2e:
0f:c9:cc:bd:d8:f1:d9:95:c0:a7:7b:a0:12:ef:bb:
9e:f9:98:38:bd:21:2f:e9:61:9f:ec:4d:59:73:a2:
19:d6:61:54:df:68:25:42:4f:72:2b:20:cd:aa:f7:
70:4b:2c:17:2f:bc:c1:c6:dd:fd:74:a8:47:ff:78:
b5:18:93:f3:9d:64:4b:19:7b:c0:85:87:53:30:1f:
fd:4e:64:6c:66:93:6e:e0:c5:a3:9e:cc:c8:27:c7:
8d:c6:26:c7:62:5f:71:e0:76:d4:96:0e:ac:0b:87:
77:76:9c:62:ed:6c:36:e5:be:5b:d3:91:c3:60:94:
e5:62:80:44:0c:d2:9b:60:63:55:8d:1d:64:e3:23:
e0:92:b0:2f:a5:6f:47:75:7f:44:11:03:2b:95:86:
a8:cb:85:52:1b:08:90:9e:b2:f6:8f:04:ad:8f:9a:
72:aa:77:04:bc:14:f2:b8:c6:3a:26:63:99:da:81:
26:db:a1:7e:c5:51:b8:d3:a5:c1:4e:6e:89:be:5b:
69:fb:e2:a6:e8:51:14:cf:2f:8a:e6:e7:47:fd:bb:
9d:13:e6:73:25:76:6f:70:2f:94:cf:e3:c4:40:ff:
99:c1:7d:ff:99:bf:b1:1b:be:32:31:1f:51:81:01:
cf:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:33:46:52:C0:ED:4B:04:A5:E9:BC:CB:CE:CE:5F:3E:51:DD:B7:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59CCFD9243B311F19535B608CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.28.0/22
Signature Algorithm: sha256WithRSAEncryption
80:d0:ab:e8:ea:a1:64:3d:99:4c:1e:01:c1:de:bf:c8:d5:40:
03:36:db:a3:0a:bc:b8:ce:19:b8:c1:07:99:c0:7a:53:22:3d:
e9:ae:f9:7e:59:87:91:15:5f:d0:50:6d:3d:40:ba:87:4f:3e:
ab:61:e1:c3:75:7d:74:30:72:62:3b:49:66:c7:21:79:97:c1:
b6:03:b4:21:ae:66:f6:95:0b:b2:a1:42:38:f3:35:7b:d2:d2:
00:d7:4e:8c:74:a4:55:99:8a:16:16:4c:a1:6f:4f:14:e0:00:
af:a6:f9:a3:10:88:20:3b:6c:d3:9a:64:38:4d:ff:f6:51:65:
aa:2b:d5:e8:f0:14:fe:4c:ed:f7:e9:a8:7a:d3:c1:93:03:55:
2d:f6:de:e1:07:b4:d2:12:4c:11:51:79:98:69:7a:a1:2c:32:
fb:fd:bd:8d:0b:7a:3f:87:a2:29:00:9d:57:bc:d3:88:4f:ad:
d7:4d:13:33:da:59:31:49:f8:93:37:18:95:12:59:64:00:c1:
f5:31:55:8e:27:f1:9d:97:95:e4:9e:58:d3:f3:ed:cf:e8:3a:
b4:1c:b5:99:6f:99:57:85:f6:ab:3b:28:93:83:cb:45:84:e3:
b9:45:c5:61:b0:ed:f5:44:35:cf:c4:80:16:c8:1c:4c:20:eb:
f0:3b:18:43
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcfiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDI5MTAwODE1WhcNMjkwNDI3MTAwODE1WjAYMRYw
FAYDVQQDEw02OWYxZDg5NS04NDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv9pBLwl/bI4xp4IjnC4Pycy92PHZlcCne6AS77ue+Zg4vSEv6WGf7E1Z
c6IZ1mFU32glQk9yKyDNqvdwSywXL7zBxt39dKhH/3i1GJPznWRLGXvAhYdTMB/9
TmRsZpNu4MWjnszIJ8eNxibHYl9x4HbUlg6sC4d3dpxi7Ww25b5b05HDYJTlYoBE
DNKbYGNVjR1k4yPgkrAvpW9HdX9EEQMrlYaoy4VSGwiQnrL2jwStj5pyqncEvBTy
uMY6JmOZ2oEm26F+xVG406XBTm6Jvltp++Km6FEUzy+K5udH/budE+ZzJXZvcC+U
z+PEQP+ZwX3/mb+xG74yMR9RgQHP1QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFM0z
RlLA7UsEpem8y87OXz5R3bdGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81OUNDRkQ5MjQzQjMxMUYxOTUzNUI2MDhDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlocMA0GCSqGSIb3DQEB
CwUAA4IBAQCA0Kvo6qFkPZlMHgHB3r/I1UADNtujCry4zhm4wQeZwHpTIj3prvl+
WYeRFV/QUG09QLqHTz6rYeHDdX10MHJiO0lmxyF5l8G2A7Qhrmb2lQuyoUI48zV7
0tIA106MdKRVmYoWFkyhb08U4ACvpvmjEIggO2zTmmQ4Tf/2UWWqK9Xo8BT+TO33
6ah608GTA1Ut9t7hB7TSEkwRUXmYaXqhLDL7/b2NC3o/h6IpAJ1XvNOIT63XTRMz
2lkxSfiTNxiVEllkAMH1MVWOJ/Gdl5XknljT8+3P6Dq0HLWZb5lXhfarOyiTg8tF
hOO5RcVhsO31RDXPxIAWyBxMIOvwOxhD
-----END CERTIFICATE-----
Generated at Sat May 9 11:02:47 2026 by rpki-client