Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72208274244B11F1B5CE7EE9DAE4EC9C.roa
File: 72208274244B11F1B5CE7EE9DAE4EC9C.roa (raw, json)
Hash identifier: Cx9gMX/cmFbwNU3qAaX1tkh5xEKTVJybu1XwceyfP58=
Subject key identifier: DA:D1:87:CA:85:C4:B4:4A:0C:24:1D:0F:C2:E5:64:98:FD:FF:2B:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C024
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72208274244B11F1B5CE7EE9DAE4EC9C.roa
Signing time: Fri 20 Mar 2026 10:56:29 +0000
ROA not before: Fri 20 Mar 2026 10:56:24 +0000
ROA not after: Sun 26 Apr 2026 10:56:24 +0000
asID: 55320
IP address blocks: 154.205.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114724 (0x1c024)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 20 10:56:24 2026 GMT
Not After : Apr 26 10:56:24 2026 GMT
Subject: CN=69bd27dc-fcd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3a:56:60:79:f9:7d:2a:8e:7d:ac:ea:3c:15:
15:b8:5a:9f:6d:b2:d2:be:40:0a:c6:7a:26:47:5a:
fd:7a:ca:f9:1e:83:11:64:57:b4:3a:d0:de:78:56:
b8:f8:aa:71:71:3d:b6:32:b8:75:48:86:ee:e5:0e:
ef:4d:03:b3:b5:10:29:af:61:d3:ef:c5:b3:68:fb:
78:dc:c9:d8:4b:d1:e4:7b:dd:a4:05:bf:65:d7:20:
b1:eb:9e:8e:10:9f:b3:06:ad:65:4d:ae:84:2e:06:
19:f0:34:7f:54:a5:a2:0a:35:f7:70:4c:dd:6e:54:
d8:fb:41:eb:55:cc:cc:07:ef:5a:ab:14:2e:78:00:
9d:5b:22:8a:df:d8:27:4f:73:b6:ef:ac:76:e8:07:
6c:60:88:33:1b:ce:96:18:26:1b:3f:1d:fe:84:ab:
45:fe:07:5f:e4:14:18:fe:b2:71:62:82:00:d2:08:
9c:ca:b5:cb:88:a5:d4:d2:ad:98:c9:29:d6:63:36:
0b:fe:b1:b7:b8:66:d2:ac:e2:67:a8:4f:fd:aa:27:
a4:08:b2:9a:06:0e:46:71:32:35:52:dd:fa:37:18:
b2:3b:e3:94:62:56:c1:cd:7d:2b:22:73:0e:76:c7:
6c:be:97:69:46:db:3a:8a:99:ed:d3:b4:d4:72:2e:
1b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D1:87:CA:85:C4:B4:4A:0C:24:1D:0F:C2:E5:64:98:FD:FF:2B:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72208274244B11F1B5CE7EE9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.140.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:9a:28:8d:02:1e:44:d3:0e:35:4c:f6:53:02:4e:3f:f3:9d:
06:80:f0:50:27:23:52:b9:44:d8:05:7e:ad:d4:79:5e:04:cd:
c9:46:00:a4:0d:b4:36:86:a0:34:2c:75:68:bf:89:75:19:cd:
24:41:d2:ce:f4:f2:46:18:8f:e9:a2:e0:72:ac:78:93:ab:1c:
4c:7b:54:d6:58:bb:df:45:dc:de:36:12:a4:e3:77:97:f9:ae:
47:f6:42:25:ea:5f:c8:5e:e5:2f:f8:6b:28:00:0d:ca:f8:98:
8f:5e:71:22:68:f1:ba:4e:b3:2f:ae:f2:a3:c0:cf:3f:be:dd:
7b:4b:ab:10:e3:51:ec:27:aa:6f:55:3f:20:13:5e:a9:89:b4:
78:28:c7:d8:07:9f:84:90:81:8c:62:7f:cc:8e:ce:ce:76:d4:
de:63:0a:6d:d2:7b:8d:e2:dc:ae:15:b3:2a:02:b0:fe:ea:1b:
0c:c9:96:7d:cb:2e:a8:53:da:a1:6a:c6:76:16:87:61:16:5b:
1d:49:f9:f0:45:d5:44:51:29:df:86:3b:4c:8a:47:de:0a:8b:
53:47:a4:50:fc:19:47:39:78:1a:30:25:aa:14:ac:7e:54:06:
3c:02:f8:79:d3:56:04:89:29:b8:5a:6e:cb:5d:9d:2b:38:0b:
7b:40:04:e8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcAkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzIwMTA1NjI0WhcNMjYwNDI2MTA1NjI0WjAYMRYw
FAYDVQQDEw02OWJkMjdkYy1mY2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtjpWYHn5fSqOfazqPBUVuFqfbbLSvkAKxnomR1r9esr5HoMRZFe0OtDe
eFa4+KpxcT22Mrh1SIbu5Q7vTQOztRApr2HT78WzaPt43MnYS9Hke92kBb9l1yCx
656OEJ+zBq1lTa6ELgYZ8DR/VKWiCjX3cEzdblTY+0HrVczMB+9aqxQueACdWyKK
39gnT3O276x26AdsYIgzG86WGCYbPx3+hKtF/gdf5BQY/rJxYoIA0gicyrXLiKXU
0q2YySnWYzYL/rG3uGbSrOJnqE/9qiekCLKaBg5GcTI1Ut36NxiyO+OUYlbBzX0r
InMOdsdsvpdpRts6ipnt07TUci4bVQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNrR
h8qFxLRKDCQdD8LlZJj9/ysgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83MjIwODI3NDI0NEIxMUYxQjVDRTdFRTlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms2MMA0GCSqGSIb3DQEB
CwUAA4IBAQDDmiiNAh5E0w41TPZTAk4/850GgPBQJyNSuUTYBX6t1HleBM3JRgCk
DbQ2hqA0LHVov4l1Gc0kQdLO9PJGGI/pouByrHiTqxxMe1TWWLvfRdzeNhKk43eX
+a5H9kIl6l/IXuUv+GsoAA3K+JiPXnEiaPG6TrMvrvKjwM8/vt17S6sQ41HsJ6pv
VT8gE16pibR4KMfYB5+EkIGMYn/Mjs7OdtTeYwpt0nuN4tyuFbMqArD+6hsMyZZ9
yy6oU9qhasZ2FodhFlsdSfnwRdVEUSnfhjtMikfeCotTR6RQ/BlHOXgaMCWqFKx+
VAY8Avh501YEiSm4Wm7LXZ0rOAt7QATo
-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:19 2026 by rpki-client