Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73D9F66C236111F1BF02239FDAE4EC9C.roa
File: 73D9F66C236111F1BF02239FDAE4EC9C.roa (raw, json)
Hash identifier: uQpAuzC2fhiJwoUL0OmWuNRpAV3oK3Qr6qWKPsISjkE=
Subject key identifier: 80:34:61:CA:DE:AC:F8:E6:A4:19:13:C9:97:32:61:BD:E9:AA:EF:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BFB3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73D9F66C236111F1BF02239FDAE4EC9C.roa
Signing time: Thu 19 Mar 2026 07:01:29 +0000
ROA not before: Thu 19 Mar 2026 07:01:24 +0000
ROA not after: Sat 25 Apr 2026 07:01:24 +0000
asID: 205489
IP address blocks: 154.90.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114611 (0x1bfb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 19 07:01:24 2026 GMT
Not After : Apr 25 07:01:24 2026 GMT
Subject: CN=69bb9f49-4a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0b:be:4e:49:20:13:b2:3a:e2:fb:7b:51:04:
71:24:89:65:5c:2f:05:14:df:9e:a9:4c:ce:02:2f:
f5:cb:46:8a:99:83:03:a6:98:e4:7b:06:67:7e:45:
30:38:88:22:75:cc:61:90:84:4f:0a:b3:b0:25:c8:
13:90:50:65:a5:a5:c7:0c:0c:d4:cf:10:7a:5d:82:
67:3e:f4:94:9f:2e:c5:60:71:ba:b0:c7:49:d0:24:
31:31:4e:3b:b8:a7:94:6a:28:7e:a4:0d:a4:63:56:
f8:f0:be:fe:a4:b4:a6:f9:2c:d0:8f:75:b4:32:c8:
5b:cc:a5:cd:03:97:37:6a:b5:58:61:44:e3:12:09:
62:2c:96:29:f8:fa:38:34:74:25:8d:a2:4f:0e:5d:
6b:3b:19:d8:91:8f:77:3d:68:cf:33:a1:4f:6e:0f:
33:8f:5b:7f:9f:b6:69:07:ed:0f:3f:0c:48:ac:96:
72:f6:47:c5:cb:c6:77:18:4f:35:99:41:5a:db:7b:
b2:74:b2:07:6a:d8:7b:7b:c0:15:cb:4d:7b:ae:38:
42:d4:b3:e5:13:4c:26:df:72:20:27:02:de:97:73:
6e:69:36:d7:41:02:6a:15:17:15:59:90:f6:fb:8c:
8a:05:1d:98:a3:98:9b:29:45:8b:7f:90:99:10:31:
fc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:34:61:CA:DE:AC:F8:E6:A4:19:13:C9:97:32:61:BD:E9:AA:EF:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73D9F66C236111F1BF02239FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.64.0/24
Signature Algorithm: sha256WithRSAEncryption
16:33:f5:1b:c1:c6:cd:75:6b:f3:d9:21:78:48:71:72:3c:48:
7d:71:66:06:9b:40:c4:bc:d0:0c:46:98:f0:3c:50:2e:bc:2b:
bc:2c:93:8c:27:c8:b7:fc:e0:3f:10:90:1d:00:1f:07:28:70:
63:ac:85:97:40:37:1b:6a:f7:74:57:91:14:d7:03:d0:cb:e1:
f6:de:ce:ac:49:74:5c:43:56:1f:5a:fa:1b:e1:0b:14:c5:1d:
39:5a:d6:ef:31:4f:ba:f5:a1:cc:6f:5b:da:de:80:d8:fa:98:
91:0d:b8:54:73:91:b6:6c:8a:18:c1:85:a2:7e:02:a7:38:e3:
07:32:d0:ce:2b:3b:94:0b:2c:54:2a:b8:f3:5b:fd:37:b3:84:
2d:82:8d:ea:68:04:20:7f:60:fd:4b:60:2c:36:fc:d2:e0:f0:
6f:72:0d:e3:56:af:9c:73:02:97:1a:97:79:f4:f1:0e:80:57:
9b:30:1d:36:02:54:3c:19:3d:07:01:25:bd:23:00:53:71:24:
ca:46:8d:a6:28:a9:29:05:d1:f8:b9:53:16:a4:d9:8a:34:af:
ce:9e:04:e9:64:03:64:86:4f:95:f6:79:f7:7b:63:4e:df:ab:
ce:58:b8:49:bc:5a:9b:5a:e4:e3:e5:31:b9:e6:6b:3e:3d:31:
03:77:2f:63
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAb+zMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzE5MDcwMTI0WhcNMjYwNDI1MDcwMTI0WjAYMRYw
FAYDVQQDEw02OWJiOWY0OS00YTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAugu+TkkgE7I64vt7UQRxJIllXC8FFN+eqUzOAi/1y0aKmYMDppjkewZn
fkUwOIgidcxhkIRPCrOwJcgTkFBlpaXHDAzUzxB6XYJnPvSUny7FYHG6sMdJ0CQx
MU47uKeUaih+pA2kY1b48L7+pLSm+SzQj3W0MshbzKXNA5c3arVYYUTjEgliLJYp
+Po4NHQljaJPDl1rOxnYkY93PWjPM6FPbg8zj1t/n7ZpB+0PPwxIrJZy9kfFy8Z3
GE81mUFa23uydLIHath7e8AVy017rjhC1LPlE0wm33IgJwLel3NuaTbXQQJqFRcV
WZD2+4yKBR2Yo5ibKUWLf5CZEDH8TwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIA0
YcrerPjmpBkTyZcyYb3pqu9UMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83M0Q5RjY2QzIzNjExMUYxQkYwMjIzOUZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlpAMA0GCSqGSIb3DQEB
CwUAA4IBAQAWM/UbwcbNdWvz2SF4SHFyPEh9cWYGm0DEvNAMRpjwPFAuvCu8LJOM
J8i3/OA/EJAdAB8HKHBjrIWXQDcbavd0V5EU1wPQy+H23s6sSXRcQ1YfWvob4QsU
xR05WtbvMU+69aHMb1va3oDY+piRDbhUc5G2bIoYwYWifgKnOOMHMtDOKzuUCyxU
KrjzW/03s4Qtgo3qaAQgf2D9S2AsNvzS4PBvcg3jVq+ccwKXGpd59PEOgFebMB02
AlQ8GT0HASW9IwBTcSTKRo2mKKkpBdH4uVMWpNmKNK/OngTpZANkhk+V9nn3e2NO
36vOWLhJvFqbWuTj5TG55ms+PTEDdy9j
-----END CERTIFICATE-----
Generated at Tue Mar 24 16:20:34 2026 by rpki-client