Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D8120E8275311F1BA04D999DAE4EC9C.roa
File: 5D8120E8275311F1BA04D999DAE4EC9C.roa (raw, json)
Hash identifier: BVxgqWIWiHaO2fCMiJM9smuA0awIMcwMnwsjfLrkomg=
Subject key identifier: 36:B4:D9:92:AC:94:C6:81:84:6B:B4:EB:E2:5E:14:7F:05:9D:0A:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C07D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D8120E8275311F1BA04D999DAE4EC9C.roa
Signing time: Tue 24 Mar 2026 07:30:43 +0000
ROA not before: Tue 24 Mar 2026 07:30:38 +0000
ROA not after: Thu 27 Aug 2026 07:30:38 +0000
asID: 45669
IP address blocks: 154.198.64.0/19 maxlen: 24
154.198.64.0/24 maxlen: 24
154.198.65.0/24 maxlen: 24
154.198.66.0/24 maxlen: 24
154.198.67.0/24 maxlen: 24
154.198.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114813 (0x1c07d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 07:30:38 2026 GMT
Not After : Aug 27 07:30:38 2026 GMT
Subject: CN=69c23da3-93b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:38:e4:89:9b:33:86:72:dc:47:a5:61:a8:b9:
60:87:ec:94:71:0f:89:3d:45:c1:68:3c:ca:cb:16:
bd:d2:14:83:6d:63:cb:93:c4:47:27:34:ab:9f:b5:
0b:6d:8f:b7:29:37:db:ec:2d:46:ae:18:65:a4:ac:
56:e2:99:13:04:a7:40:73:06:c3:40:80:19:2a:68:
d6:e2:54:73:eb:9d:c5:ac:c7:eb:dc:22:1a:ae:f6:
68:83:d8:ae:9d:81:5f:bf:0a:1f:b4:3f:ff:20:70:
06:7c:c8:e8:1e:1c:34:1a:39:92:be:97:85:1d:9b:
07:0c:b6:88:05:8b:6c:5b:2a:4d:4c:42:09:22:86:
54:f8:88:36:5a:86:c0:14:9e:db:ae:6c:95:73:8c:
f7:51:4f:f2:94:8a:41:54:10:ca:1a:30:73:cc:08:
a4:6d:18:f1:14:21:8c:e1:ab:36:9f:d2:81:14:85:
f6:6a:f1:a6:c1:f9:15:a6:b4:4d:ed:0c:ed:9b:d0:
09:d4:b1:bb:1d:89:91:74:22:b6:01:9c:26:f3:f9:
c8:a0:b6:47:51:6c:3d:ab:97:2c:fd:09:2d:93:80:
b1:21:a5:00:28:2a:73:63:6a:a4:1e:be:e5:0a:2b:
3c:5f:36:68:65:dc:50:b1:ba:19:7e:5f:04:ad:5f:
1d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B4:D9:92:AC:94:C6:81:84:6B:B4:EB:E2:5E:14:7F:05:9D:0A:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D8120E8275311F1BA04D999DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.64.0/19
Signature Algorithm: sha256WithRSAEncryption
2b:03:e2:37:20:fb:4c:a7:61:b7:80:a5:88:38:00:b4:dd:ce:
d7:5f:d8:57:86:79:3d:8e:16:c6:70:44:78:01:a1:54:5b:8e:
7f:60:f2:e0:14:24:c5:30:18:20:2b:94:e4:7e:3e:fa:c4:d9:
a1:20:d0:df:d9:e0:1f:2c:94:fe:85:7b:c4:6e:20:bc:b8:ff:
5d:19:90:5c:31:2d:c6:1a:3c:6d:37:bf:fc:b8:9e:33:03:e8:
b6:0a:d7:80:bd:ca:c4:3d:4a:a6:10:70:9b:76:79:a7:b4:5e:
71:aa:04:9a:c5:e6:2d:40:80:66:1d:83:a6:86:9c:3e:b8:49:
30:c1:49:88:55:3e:eb:19:7b:5c:ed:d6:d9:8e:eb:f3:49:99:
f8:7f:3a:4e:37:54:66:0e:18:20:48:69:dc:cd:03:9d:70:65:
74:e7:40:79:f8:db:5c:3f:dc:a8:fb:23:39:41:06:00:a0:86:
f6:bc:dd:ae:0c:ba:23:96:8e:82:33:97:99:c4:5a:b6:13:05:
b5:eb:5c:a0:6c:52:45:9f:0d:9f:db:25:c5:ef:3b:0b:95:9d:
a8:16:d4:fb:db:a3:9e:47:46:1d:d0:46:48:99:b6:77:99:e5:
1e:b6:33:bf:20:b2:a1:50:6e:86:b6:af:64:a7:80:8b:bf:27:
c9:9a:15:43
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcB9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzI0MDczMDM4WhcNMjYwODI3MDczMDM4WjAYMRYw
FAYDVQQDEw02OWMyM2RhMy05M2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5DjkiZszhnLcR6VhqLlgh+yUcQ+JPUXBaDzKyxa90hSDbWPLk8RHJzSr
n7ULbY+3KTfb7C1GrhhlpKxW4pkTBKdAcwbDQIAZKmjW4lRz653FrMfr3CIarvZo
g9iunYFfvwoftD//IHAGfMjoHhw0GjmSvpeFHZsHDLaIBYtsWypNTEIJIoZU+Ig2
WobAFJ7brmyVc4z3UU/ylIpBVBDKGjBzzAikbRjxFCGM4as2n9KBFIX2avGmwfkV
prRN7Qztm9AJ1LG7HYmRdCK2AZwm8/nIoLZHUWw9q5cs/Qktk4CxIaUAKCpzY2qk
Hr7lCis8XzZoZdxQsboZfl8ErV8dOQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDa0
2ZKslMaBhGu06+JeFH8FnQqOMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81RDgxMjBFODI3NTMxMUYxQkEwNEQ5OTlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmsZAMA0GCSqGSIb3DQEB
CwUAA4IBAQArA+I3IPtMp2G3gKWIOAC03c7XX9hXhnk9jhbGcER4AaFUW45/YPLg
FCTFMBggK5Tkfj76xNmhINDf2eAfLJT+hXvEbiC8uP9dGZBcMS3GGjxtN7/8uJ4z
A+i2CteAvcrEPUqmEHCbdnmntF5xqgSaxeYtQIBmHYOmhpw+uEkwwUmIVT7rGXtc
7dbZjuvzSZn4fzpON1RmDhggSGnczQOdcGV050B5+NtcP9yo+yM5QQYAoIb2vN2u
DLojlo6CM5eZxFq2EwW161ygbFJFnw2f2yXF7zsLlZ2oFtT726OeR0Yd0EZImbZ3
meUetjO/ILKhUG6Gtq9kp4CLvyfJmhVD
-----END CERTIFICATE-----
Generated at Tue Mar 24 16:17:33 2026 by rpki-client