Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BB30058227211F1A009209CDAE4EC9C.roa
File: 7BB30058227211F1A009209CDAE4EC9C.roa (raw, json)
Hash identifier: p9UqbPX/kxQ1iZqNZ2p6hc8+yeiQE8K4tGUzjp4iqrM=
Subject key identifier: 38:CE:6C:FC:17:7B:BB:F9:66:34:98:20:B7:57:24:69:B9:90:27:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF9C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BB30058227211F1A009209CDAE4EC9C.roa
Signing time: Wed 18 Mar 2026 02:30:53 +0000
ROA not before: Wed 18 Mar 2026 02:30:47 +0000
ROA not after: Wed 25 Mar 2026 02:30:47 +0000
asID: 17497
IP address blocks: 154.81.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 25 Mar 2026 02:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114588 (0x1bf9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 18 02:30:47 2026 GMT
Not After : Mar 25 02:30:47 2026 GMT
Subject: CN=69ba0e5d-667a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:92:a5:cb:bc:1c:9e:ed:fa:f3:90:fa:c7:
72:1c:a0:50:aa:ca:ac:7e:7f:62:70:56:62:b9:83:
d4:6a:a9:78:12:10:99:db:03:68:f9:f0:f5:6b:d5:
69:f7:0e:34:8e:27:e9:8a:cb:ab:56:ca:a8:07:e5:
63:cc:f2:82:74:62:8c:09:e6:22:fb:e5:6b:5e:34:
04:a6:b2:fb:7f:82:3d:e5:46:2b:32:38:06:56:3c:
c4:2a:e3:4c:83:f9:53:a5:c1:41:f7:a2:a4:e8:20:
59:5e:72:62:11:6a:38:be:25:61:f7:71:8d:2b:c2:
c6:2e:5a:f4:d2:4f:08:74:b6:06:d8:64:5a:fb:c2:
61:e5:a7:66:be:53:42:d1:c5:59:7d:67:77:40:3a:
cc:e7:81:c0:70:80:d2:55:ff:31:fa:9a:35:fe:52:
b0:dd:34:21:cb:d6:23:47:42:bf:1c:00:92:08:cb:
53:6e:c8:91:69:3d:6a:9f:c7:db:cd:8c:78:37:66:
4c:f0:62:b5:bb:50:7d:17:a4:0d:bf:7b:91:b7:c1:
ea:bb:d3:b7:c6:85:21:41:3f:eb:fe:e4:01:b0:81:
d0:0a:11:ad:e5:5e:49:ac:0c:48:1d:a7:7c:31:7c:
f4:54:fa:16:2f:32:6b:15:bc:8b:6c:f9:72:dd:6f:
7f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CE:6C:FC:17:7B:BB:F9:66:34:98:20:B7:57:24:69:B9:90:27:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BB30058227211F1A009209CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.152.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:f8:2f:1f:00:27:e6:44:b1:72:eb:4c:cd:a3:5e:51:5d:c1:
5f:2f:28:48:35:96:57:3e:91:5d:9b:15:28:22:52:00:f1:58:
c7:14:a1:44:a0:1b:94:51:9c:85:07:c8:4d:c7:40:4f:50:28:
af:d7:d5:b7:45:dc:ba:4c:1c:58:c3:e0:ae:c2:53:83:3b:63:
ca:6a:33:fc:7a:d7:ac:de:3a:62:c8:e1:d3:6f:d9:0d:ae:6f:
91:c0:3c:46:f8:93:4a:1d:c1:32:c3:43:de:50:d9:0b:15:7d:
e4:d8:f3:bd:36:9d:be:f4:d5:d9:5d:c5:61:2a:39:a3:b9:12:
e9:1f:1e:d5:2e:f4:f6:e6:df:15:08:5b:9e:8d:7c:47:1a:1d:
db:2e:b0:de:4f:d7:28:26:f3:bb:25:95:7b:9b:39:67:38:88:
0b:97:4e:10:e7:fe:1d:1a:a1:59:ef:21:5c:e9:f5:09:ef:c9:
bd:10:f3:26:d3:ee:94:7e:4c:07:a7:a9:7b:4b:52:77:19:d4:
d3:5e:e5:04:8a:3c:7f:32:b7:a1:a4:d2:70:c7:43:87:22:96:
6e:69:02:14:2c:42:fa:47:23:b7:29:85:38:51:5c:fa:06:de:
0d:0f:98:da:e5:3b:26:34:f3:be:d8:21:a2:e0:ed:d1:65:5f:
88:32:c2:e7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAb+cMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzE4MDIzMDQ3WhcNMjYwMzI1MDIzMDQ3WjAYMRYw
FAYDVQQDEw02OWJhMGU1ZC02NjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqrWSpcu8HJ7t+vOQ+sdyHKBQqsqsfn9icFZiuYPUaql4EhCZ2wNo+fD1
a9Vp9w40jifpisurVsqoB+VjzPKCdGKMCeYi++VrXjQEprL7f4I95UYrMjgGVjzE
KuNMg/lTpcFB96Kk6CBZXnJiEWo4viVh93GNK8LGLlr00k8IdLYG2GRa+8Jh5adm
vlNC0cVZfWd3QDrM54HAcIDSVf8x+po1/lKw3TQhy9YjR0K/HACSCMtTbsiRaT1q
n8fbzYx4N2ZM8GK1u1B9F6QNv3uRt8Hqu9O3xoUhQT/r/uQBsIHQChGt5V5JrAxI
Had8MXz0VPoWLzJrFbyLbPly3W9/7QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDjO
bPwXe7v5ZjSYILdXJGm5kCeVMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83QkIzMDA1ODIyNzIxMUYxQTAwOTIwOUNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlGYMA0GCSqGSIb3DQEB
CwUAA4IBAQAs+C8fACfmRLFy60zNo15RXcFfLyhINZZXPpFdmxUoIlIA8VjHFKFE
oBuUUZyFB8hNx0BPUCiv19W3Rdy6TBxYw+CuwlODO2PKajP8etes3jpiyOHTb9kN
rm+RwDxG+JNKHcEyw0PeUNkLFX3k2PO9Np2+9NXZXcVhKjmjuRLpHx7VLvT25t8V
CFuejXxHGh3bLrDeT9coJvO7JZV7mzlnOIgLl04Q5/4dGqFZ7yFc6fUJ78m9EPMm
0+6UfkwHp6l7S1J3GdTTXuUEijx/MrehpNJwx0OHIpZuaQIULEL6RyO3KYU4UVz6
Bt4ND5ja5TsmNPO+2CGi4O3RZV+IMsLn
-----END CERTIFICATE-----
Generated at Tue Mar 24 16:17:33 2026 by rpki-client