Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/701264EA3EDE11F1951FEC14CF1D38B0.roa
File: 701264EA3EDE11F1951FEC14CF1D38B0.roa (raw, json)
Hash identifier: 477TE95MARmNQ29BX4OPUE6bbbrJV6a8YTbaDcp1Ns4=
Subject key identifier: 83:9F:AF:78:84:AF:86:6D:0D:4B:27:A8:F5:B1:3F:6B:F3:6D:D5:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C6BF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/701264EA3EDE11F1951FEC14CF1D38B0.roa
Signing time: Thu 23 Apr 2026 06:34:11 +0000
ROA not before: Thu 23 Apr 2026 06:34:07 +0000
ROA not after: Tue 09 Jun 2026 06:34:07 +0000
asID: 401783
IP address blocks: 154.83.10.0/24 maxlen: 24
154.83.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116415 (0x1c6bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 06:34:07 2026 GMT
Not After : Jun 9 06:34:07 2026 GMT
Subject: CN=69e9bd63-29f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ea:4b:90:7d:70:c6:86:b0:c7:c7:e2:8e:72:
8a:6a:f1:4f:2f:f9:2f:8e:a1:00:65:a1:fc:46:a2:
f4:ca:b2:8c:fc:e6:40:e9:5b:0d:e2:2a:07:c5:7e:
ce:42:e2:9c:19:3a:24:86:86:1b:8d:6b:0e:3b:55:
41:4c:c9:c9:7e:87:5b:5f:b1:32:81:58:d7:ea:31:
6a:b1:b6:ef:4a:3e:b2:7d:db:14:c2:85:de:80:a8:
c8:bd:b3:b1:c4:e2:36:19:16:f3:64:db:29:35:85:
84:50:06:e3:0a:97:cc:b3:44:82:37:cb:b4:1d:85:
c9:d4:33:55:6f:0e:6b:a7:f6:26:76:dd:4f:15:4b:
2b:64:e6:64:74:45:46:c9:57:4b:b0:5f:e3:b2:ac:
dc:2e:1c:3a:94:5f:85:88:57:a8:d2:25:df:e4:f7:
62:46:70:53:b1:ea:3e:62:bd:9e:8b:29:eb:e9:70:
9e:27:9c:3b:3e:03:95:3c:2b:27:60:8c:fe:98:52:
91:ea:ea:b5:59:75:73:81:04:1b:ed:e8:91:d6:c6:
c1:6a:01:99:ee:d3:ee:4b:1b:60:8f:c5:ab:29:ee:
83:0a:81:aa:7e:4e:d9:25:9b:7a:eb:03:45:b5:e4:
92:7c:18:ee:d3:f0:5f:cc:00:a1:47:1b:c2:48:8b:
01:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9F:AF:78:84:AF:86:6D:0D:4B:27:A8:F5:B1:3F:6B:F3:6D:D5:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/701264EA3EDE11F1951FEC14CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.10.0/24
154.83.24.0/24
Signature Algorithm: sha256WithRSAEncryption
06:b1:36:8f:08:3b:00:3c:f4:bd:ff:2f:9a:34:0d:02:38:18:
bc:ff:b3:28:5f:86:e3:90:35:a6:fa:84:b1:b3:93:a6:e3:75:
2a:c0:6f:97:ee:e8:e1:c9:7e:49:e8:71:dc:04:e6:94:b2:a8:
92:19:56:2f:a5:35:d7:c1:d8:90:1e:d3:a4:3e:e1:8a:c4:9a:
94:b7:f3:40:a4:4e:df:b1:14:d3:ef:fd:27:a6:9c:5e:b1:56:
4f:6c:8e:6b:f2:2e:c9:55:ca:15:15:1a:9d:b4:7f:1d:6d:fd:
09:e0:25:74:bd:19:87:8a:53:17:29:60:b2:3b:a1:23:5b:87:
7a:80:73:cd:9a:17:fe:39:7d:e3:ec:e8:9a:7d:33:ac:fd:89:
b7:64:fe:da:5d:76:ab:ee:74:a4:a7:1d:db:7d:04:d5:bc:84:
b7:f9:47:51:ed:70:94:58:4f:5f:fc:a6:56:27:5b:14:d3:da:
18:84:4f:2a:ee:0b:39:8d:8b:77:36:e9:06:98:8c:31:22:99:
7f:b1:7a:c2:50:29:d5:7b:64:65:91:5b:a3:ae:a0:c3:cf:00:
22:e7:ca:84:ff:8e:d3:6b:cb:46:b6:aa:77:ff:f0:a5:ca:07:
2e:db:15:cd:62:e2:a9:f6:05:a9:c1:59:31:8a:65:79:3f:9b:
18:f2:54:21
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAca/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDIzMDYzNDA3WhcNMjYwNjA5MDYzNDA3WjAYMRYw
FAYDVQQDEw02OWU5YmQ2My0yOWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtupLkH1wxoawx8fijnKKavFPL/kvjqEAZaH8RqL0yrKM/OZA6VsN4ioH
xX7OQuKcGTokhoYbjWsOO1VBTMnJfodbX7EygVjX6jFqsbbvSj6yfdsUwoXegKjI
vbOxxOI2GRbzZNspNYWEUAbjCpfMs0SCN8u0HYXJ1DNVbw5rp/Ymdt1PFUsrZOZk
dEVGyVdLsF/jsqzcLhw6lF+FiFeo0iXf5PdiRnBTseo+Yr2eiynr6XCeJ5w7PgOV
PCsnYIz+mFKR6uq1WXVzgQQb7eiR1sbBagGZ7tPuSxtgj8WrKe6DCoGqfk7ZJZt6
6wNFteSSfBju0/BfzAChRxvCSIsBqwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFIOf
r3iEr4ZtDUsnqPWxP2vzbdXqMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83MDEyNjRFQTNFREUxMUYxOTUxRkVDMTRDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmlMKAwQAmlMYMA0GCSqG
SIb3DQEBCwUAA4IBAQAGsTaPCDsAPPS9/y+aNA0COBi8/7MoX4bjkDWm+oSxs5Om
43UqwG+X7ujhyX5J6HHcBOaUsqiSGVYvpTXXwdiQHtOkPuGKxJqUt/NApE7fsRTT
7/0nppxesVZPbI5r8i7JVcoVFRqdtH8dbf0J4CV0vRmHilMXKWCyO6EjW4d6gHPN
mhf+OX3j7OiafTOs/Ym3ZP7aXXar7nSkpx3bfQTVvIS3+UdR7XCUWE9f/KZWJ1sU
09oYhE8q7gs5jYt3NukGmIwxIpl/sXrCUCnVe2RlkVujrqDDzwAi58qE/47Ta8tG
tqp3//Clygcu2xXNYuKp9gWpwVkximV5P5sY8lQh
-----END CERTIFICATE-----
Generated at Sat May 9 11:01:49 2026 by rpki-client