Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6646F0AA1C7111F1B6AAC19BDAE4EC9C.roa
File: 6646F0AA1C7111F1B6AAC19BDAE4EC9C.roa (raw, json)
Hash identifier: B+0oBwESAEZKOsfDfEKefAZN+voTbRdG9h7yZOrJEI0=
Subject key identifier: 0C:EB:10:70:7E:D9:B1:D8:15:36:C7:FB:BF:5F:B9:6C:B1:7C:9B:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BEBB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6646F0AA1C7111F1B6AAC19BDAE4EC9C.roa
Signing time: Tue 10 Mar 2026 11:08:00 +0000
ROA not before: Tue 10 Mar 2026 11:07:56 +0000
ROA not after: Fri 24 Apr 2026 11:07:56 +0000
asID: 13335
IP address blocks: 154.90.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114363 (0x1bebb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 10 11:07:56 2026 GMT
Not After : Apr 24 11:07:56 2026 GMT
Subject: CN=69affb90-6c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:48:d9:50:bb:cb:54:97:a2:e4:3d:ed:ee:
51:7e:8f:28:75:e2:93:33:54:9c:c2:5f:74:28:25:
c4:95:61:e2:d6:9d:a0:d8:f5:5b:c3:c4:c8:36:15:
fd:b9:7e:d5:f0:77:3a:ec:37:b4:9a:96:74:0f:dd:
bd:40:35:bb:4c:f3:51:b2:2c:43:3a:99:7f:c4:d2:
f0:60:75:b2:72:d1:fc:a0:0a:e3:b6:e7:73:39:18:
d3:c4:84:fa:e0:0e:26:58:23:f6:2c:a5:d1:50:ef:
62:02:a1:61:e2:93:eb:34:80:90:e9:fa:0c:0d:47:
93:ff:0a:03:80:1e:b1:93:51:ec:8c:3a:07:de:ec:
04:d9:ab:49:a9:91:d0:4f:78:5c:b2:63:77:f0:d1:
6d:e1:23:39:4b:fc:56:23:ac:ea:0f:44:29:a4:7b:
0b:c7:10:56:9c:0e:2f:ba:03:54:5d:08:97:11:12:
87:96:27:0b:72:5d:ab:f8:54:8d:6b:f8:cc:6f:ed:
35:56:65:e0:c2:d3:3e:e7:fc:4d:b4:d5:0f:f7:5d:
54:b0:e4:c3:b1:af:aa:a3:51:a0:17:06:a6:73:d9:
36:a7:7a:a5:36:99:21:59:e4:03:07:08:eb:5f:b8:
e1:da:cd:c7:58:a7:26:bf:6c:4d:2a:95:0c:e0:66:
ee:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EB:10:70:7E:D9:B1:D8:15:36:C7:FB:BF:5F:B9:6C:B1:7C:9B:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6646F0AA1C7111F1B6AAC19BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.70.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:96:84:16:5f:24:34:4e:1e:bc:73:2e:53:63:a0:8a:21:7b:
76:ab:ce:ce:ec:9e:6c:d6:a3:44:74:ef:4f:03:68:c7:f1:3f:
06:27:28:17:d6:01:83:fd:77:d0:f8:dd:55:18:08:e1:98:b8:
50:0e:64:71:c9:5c:11:f2:34:8f:c4:a1:34:ef:93:be:2a:b2:
ab:27:b1:a3:bb:00:60:39:84:0b:5a:d8:7d:20:86:d9:b8:15:
75:72:32:1d:a1:8d:ea:a8:d7:42:35:48:2b:c8:0e:ce:72:76:
23:29:26:e1:a4:a3:fb:6f:79:bc:92:11:d7:8a:d7:2d:81:a8:
1c:51:7f:5e:85:b7:e1:98:31:42:e1:85:09:19:df:d0:b9:6b:
fa:ca:92:bf:6b:bb:cc:31:97:24:aa:a8:b8:3d:1c:db:72:2e:
8c:74:79:09:74:a9:51:d5:40:4f:d2:df:48:22:bd:50:b6:b2:
16:b0:e1:0e:00:a7:f2:e8:5d:10:66:1a:57:3b:18:fe:51:2e:
a2:19:6b:cf:79:f2:5e:f1:e6:e4:37:10:21:dd:30:ab:86:e2:
36:d1:a6:72:63:01:1c:27:2e:2b:51:5b:1d:ec:a0:85:87:b7:
8d:22:b0:8c:58:ad:15:34:30:33:fd:d9:31:93:89:c7:31:1d:
fb:14:58:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAb67MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzEwMTEwNzU2WhcNMjYwNDI0MTEwNzU2WjAYMRYw
FAYDVQQDEw02OWFmZmI5MC02YzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv5tI2VC7y1SXouQ97e5Rfo8odeKTM1Scwl90KCXElWHi1p2g2PVbw8TI
NhX9uX7V8Hc67De0mpZ0D929QDW7TPNRsixDOpl/xNLwYHWyctH8oArjtudzORjT
xIT64A4mWCP2LKXRUO9iAqFh4pPrNICQ6foMDUeT/woDgB6xk1HsjDoH3uwE2atJ
qZHQT3hcsmN38NFt4SM5S/xWI6zqD0QppHsLxxBWnA4vugNUXQiXERKHlicLcl2r
+FSNa/jMb+01VmXgwtM+5/xNtNUP911UsOTDsa+qo1GgFwamc9k2p3qlNpkhWeQD
BwjrX7jh2s3HWKcmv2xNKpUM4GbuHwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAzr
EHB+2bHYFTbH+79fuWyxfJtZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NjQ2RjBBQTFDNzExMUYxQjZBQUMxOUJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlpGMA0GCSqGSIb3DQEB
CwUAA4IBAQBfloQWXyQ0Th68cy5TY6CKIXt2q87O7J5s1qNEdO9PA2jH8T8GJygX
1gGD/XfQ+N1VGAjhmLhQDmRxyVwR8jSPxKE075O+KrKrJ7GjuwBgOYQLWth9IIbZ
uBV1cjIdoY3qqNdCNUgryA7OcnYjKSbhpKP7b3m8khHXitctgagcUX9ehbfhmDFC
4YUJGd/QuWv6ypK/a7vMMZckqqi4PRzbci6MdHkJdKlR1UBP0t9IIr1QtrIWsOEO
AKfy6F0QZhpXOxj+US6iGWvPefJe8ebkNxAh3TCrhuI20aZyYwEcJy4rUVsd7KCF
h7eNIrCMWK0VNDAz/dkxk4nHMR37FFgI
-----END CERTIFICATE-----
Generated at Tue Mar 24 16:15:45 2026 by rpki-client