Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FF024FC439911F1ACD99DEDCE1D38B0.roa
File: 5FF024FC439911F1ACD99DEDCE1D38B0.roa (raw, json)
Hash identifier: kAzPcaXWzJtxUyvdhw+H0DIPgd5XzklL7JYi4u+m/ng=
Subject key identifier: 24:2E:0E:BE:F8:37:91:50:91:AC:FB:21:0D:91:BA:77:9F:89:4D:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C7C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FF024FC439911F1ACD99DEDCE1D38B0.roa
Signing time: Wed 29 Apr 2026 07:02:25 +0000
ROA not before: Wed 29 Apr 2026 07:02:19 +0000
ROA not after: Wed 03 Jun 2026 07:02:19 +0000
asID: 198652
IP address blocks: 154.83.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116674 (0x1c7c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 07:02:19 2026 GMT
Not After : Jun 3 07:02:19 2026 GMT
Subject: CN=69f1ad01-c352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:03:6b:2e:d7:40:5c:63:ff:e7:93:0c:f8:e8:
b4:4a:55:11:50:7d:bc:c6:6e:a7:1c:af:88:7f:b3:
14:b6:6a:fe:ca:3b:52:92:43:cc:1c:e0:18:a8:d0:
ec:ea:cd:a4:36:13:1d:7e:43:92:2f:64:20:eb:52:
ec:bb:5a:ec:7f:85:8e:b6:3d:29:0e:b9:e9:99:6d:
13:a3:39:6c:5e:e5:48:56:a5:e3:62:a5:98:f9:7f:
b2:08:ec:ca:c0:26:c8:9d:ae:e9:00:86:34:2a:f0:
93:44:ef:0f:3a:67:ab:1d:47:b2:47:ba:cb:66:b4:
b1:64:f2:28:25:93:63:17:64:37:b3:b3:41:17:93:
c7:57:1f:41:38:64:dc:b4:0c:03:2b:09:7f:c6:bb:
d9:ab:e9:7b:34:6e:05:16:c0:3d:88:39:81:33:d6:
4f:e4:b5:4e:db:97:01:8d:7d:c3:e3:82:1e:c7:55:
f1:18:78:cd:54:40:b0:60:99:ce:eb:79:d6:53:92:
e3:b5:53:4b:6b:37:5a:60:a0:7d:92:09:89:01:76:
ad:3e:d2:d3:ac:4b:a8:80:f3:45:9b:fd:e0:2b:6b:
31:cf:45:13:f1:fc:f1:a7:a2:58:20:ee:83:1a:f8:
f0:29:cf:7c:55:48:af:3b:f4:53:48:e6:d5:6e:83:
36:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2E:0E:BE:F8:37:91:50:91:AC:FB:21:0D:91:BA:77:9F:89:4D:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FF024FC439911F1ACD99DEDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.210.0/24
Signature Algorithm: sha256WithRSAEncryption
86:2c:7e:4a:d1:0a:20:fd:2a:6e:5f:28:21:6a:cf:09:3b:e4:
86:ed:f3:7f:46:ec:55:30:0f:33:06:67:6c:45:18:de:69:4a:
81:a4:5a:53:a9:9f:a8:34:d1:52:2d:6e:d0:55:ab:07:89:b2:
44:d6:eb:7c:97:a5:72:91:27:03:b0:af:78:5f:44:95:25:a7:
df:de:0d:89:91:a2:c3:8d:5a:09:33:7f:e8:e9:1e:9c:d6:62:
73:2c:d4:21:60:1b:13:75:f2:a5:c5:75:4f:a9:d7:fb:1d:de:
59:28:ad:a0:db:49:11:9b:74:e0:d5:9a:ce:b2:85:cc:3f:c5:
96:4a:bb:ce:3b:b1:f9:d7:a0:3d:55:ae:db:e0:30:ad:ab:af:
b5:d2:4e:49:cb:f3:54:d7:9e:f9:58:d9:73:31:b0:84:bb:8f:
df:68:c7:77:74:e8:f2:55:92:18:31:ec:ef:85:4a:e0:a9:09:
ec:11:b9:bc:35:a8:f9:26:0d:8d:e2:14:e8:d5:76:c6:32:ed:
c7:70:82:1c:97:df:25:cc:2a:65:64:7c:fb:9e:64:86:4d:c6:
c5:d3:05:1a:4b:05:2d:6f:0e:b1:ef:06:36:60:8a:3c:0f:9a:
63:02:86:6d:ce:34:7c:6e:d2:87:2b:53:c0:02:f3:66:0b:74:
3d:6d:4f:cc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcfCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDI5MDcwMjE5WhcNMjYwNjAzMDcwMjE5WjAYMRYw
FAYDVQQDEw02OWYxYWQwMS1jMzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvgNrLtdAXGP/55MM+Oi0SlURUH28xm6nHK+If7MUtmr+yjtSkkPMHOAY
qNDs6s2kNhMdfkOSL2Qg61Lsu1rsf4WOtj0pDrnpmW0TozlsXuVIVqXjYqWY+X+y
COzKwCbIna7pAIY0KvCTRO8POmerHUeyR7rLZrSxZPIoJZNjF2Q3s7NBF5PHVx9B
OGTctAwDKwl/xrvZq+l7NG4FFsA9iDmBM9ZP5LVO25cBjX3D44Iex1XxGHjNVECw
YJnO63nWU5LjtVNLazdaYKB9kgmJAXatPtLTrEuogPNFm/3gK2sxz0UT8fzxp6JY
IO6DGvjwKc98VUivO/RTSObVboM2lQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCQu
Dr74N5FQkaz7IQ2RunefiU1MMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81RkYwMjRGQzQzOTkxMUYxQUNEOTlERURDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlPSMA0GCSqGSIb3DQEB
CwUAA4IBAQCGLH5K0Qog/SpuXyghas8JO+SG7fN/RuxVMA8zBmdsRRjeaUqBpFpT
qZ+oNNFSLW7QVasHibJE1ut8l6VykScDsK94X0SVJaff3g2JkaLDjVoJM3/o6R6c
1mJzLNQhYBsTdfKlxXVPqdf7Hd5ZKK2g20kRm3Tg1ZrOsoXMP8WWSrvOO7H516A9
Va7b4DCtq6+10k5Jy/NU1575WNlzMbCEu4/faMd3dOjyVZIYMezvhUrgqQnsEbm8
Naj5Jg2N4hTo1XbGMu3HcIIcl98lzCplZHz7nmSGTcbF0wUaSwUtbw6x7wY2YIo8
D5pjAoZtzjR8btKHK1PAAvNmC3Q9bU/M
-----END CERTIFICATE-----
Generated at Sat May 9 10:59:53 2026 by rpki-client