Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84CFDCB0493711F189B65414CF1D38B0.roa
File: 84CFDCB0493711F189B65414CF1D38B0.roa (raw, json)
Hash identifier: 5LMSmk0UFVxSLoV1SuG1ms6KlIfUOfaw44/PJ9T5/ic=
Subject key identifier: DB:36:DA:AD:62:35:5F:9C:E9:9C:66:1D:79:DC:6D:E3:2C:37:69:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C999
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84CFDCB0493711F189B65414CF1D38B0.roa
Signing time: Wed 06 May 2026 10:37:03 +0000
ROA not before: Wed 06 May 2026 10:36:58 +0000
ROA not after: Sun 06 May 2029 10:36:58 +0000
asID: 17561
IP address blocks: 154.85.188.0/24 maxlen: 24
154.85.189.0/24 maxlen: 24
154.85.190.0/24 maxlen: 24
154.85.191.0/24 maxlen: 24
154.85.192.0/24 maxlen: 24
154.85.193.0/24 maxlen: 24
154.85.194.0/24 maxlen: 24
154.85.195.0/24 maxlen: 24
154.85.196.0/24 maxlen: 24
154.85.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117145 (0x1c999)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 10:36:58 2026 GMT
Not After : May 6 10:36:58 2029 GMT
Subject: CN=69fb19cf-252b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:de:ad:d9:60:e0:35:27:5b:9e:48:f1:86:84:
b1:9f:07:8f:d0:a3:d3:98:5c:bb:18:0f:2f:f4:4b:
20:96:47:72:e4:17:05:9f:ca:47:a3:55:04:c2:67:
0d:20:d1:f4:09:0d:22:6c:d6:a4:6e:90:b2:32:2a:
dc:1a:a2:ae:57:d8:ef:55:97:13:fd:ad:b6:bb:4e:
16:0d:e7:ff:ea:f2:0d:45:55:7f:a7:6c:e8:c6:2c:
15:ca:cc:13:a9:10:7d:22:be:0a:cf:12:46:ab:5b:
58:ff:bb:c7:ef:a2:81:34:6e:f9:8c:fb:a7:21:49:
2a:2b:19:9b:eb:6b:d4:1c:70:41:77:c6:00:20:00:
cd:dc:ec:c2:f0:a7:bb:62:86:6d:88:ba:42:96:5a:
ae:c0:b6:8e:c6:56:56:e1:6e:e2:1d:67:19:3e:63:
0a:a8:f6:1a:a6:07:a5:2c:4b:66:59:3e:3e:79:f2:
1f:85:0b:e7:bb:ed:38:a0:fe:e9:e8:1b:7c:b9:ca:
4a:9c:16:a4:64:be:c1:75:9d:a0:7f:12:f0:7d:71:
33:e2:6b:83:28:71:75:67:5e:02:9b:92:a8:a1:a4:
90:6f:3d:a4:58:74:1a:40:d0:74:60:86:23:7b:69:
63:89:64:a7:64:93:03:ee:56:ac:6f:e2:e5:e2:78:
5e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:36:DA:AD:62:35:5F:9C:E9:9C:66:1D:79:DC:6D:E3:2C:37:69:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84CFDCB0493711F189B65414CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.188.0-154.85.197.255
Signature Algorithm: sha256WithRSAEncryption
3a:74:e0:62:3b:84:a3:cc:ee:c5:62:bb:26:1b:98:d9:52:a8:
ca:1a:5a:e9:c0:80:6f:67:63:75:60:58:7c:56:d3:41:50:46:
80:e7:de:27:7f:d5:0d:6e:a0:61:bd:c5:ac:2a:e6:80:77:c7:
9b:d9:44:92:08:72:c4:3d:10:33:82:be:9d:d8:dc:c4:45:f7:
ba:51:50:7e:15:82:27:31:d8:13:86:50:27:62:79:be:73:5a:
77:84:b6:ef:ba:6a:81:1c:cb:89:01:22:55:a1:83:ed:cf:31:
7c:2a:6d:69:6e:10:29:b0:12:de:81:c9:a8:43:18:30:29:77:
cf:b7:66:81:cc:6f:9e:5c:fa:39:20:f4:a3:64:e2:d6:3c:6d:
df:17:b2:61:ea:41:5e:3e:fd:ea:8c:53:63:82:a4:be:30:66:
9a:41:19:1a:fb:78:4b:6c:d2:93:16:d6:45:f4:b2:5d:02:bf:
a8:14:89:e9:c4:10:60:ae:fc:a2:c6:6d:5a:86:f3:b9:9e:5e:
36:25:14:93:15:08:d7:79:90:30:7e:8f:1d:95:0f:08:83:dc:
5a:82:ac:fb:26:11:8f:89:7b:39:aa:14:ec:01:58:c9:43:9c:
88:ea:7d:1e:68:01:dc:de:77:29:c3:d0:ff:10:6f:ec:be:60:
29:ca:b2:48
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAcmZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTA2MTAzNjU4WhcNMjkwNTA2MTAzNjU4WjAYMRYw
FAYDVQQDEw02OWZiMTljZi0yNTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq96t2WDgNSdbnkjxhoSxnweP0KPTmFy7GA8v9Esglkdy5BcFn8pHo1UE
wmcNINH0CQ0ibNakbpCyMircGqKuV9jvVZcT/a22u04WDef/6vINRVV/p2zoxiwV
yswTqRB9Ir4KzxJGq1tY/7vH76KBNG75jPunIUkqKxmb62vUHHBBd8YAIADN3OzC
8Ke7YoZtiLpCllquwLaOxlZW4W7iHWcZPmMKqPYapgelLEtmWT4+efIfhQvnu+04
oP7p6Bt8ucpKnBakZL7BdZ2gfxLwfXEz4muDKHF1Z14Cm5KooaSQbz2kWHQaQNB0
YIYje2ljiWSnZJMD7lasb+Ll4nheZwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFNs2
2q1iNV+c6ZxmHXncbeMsN2kYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NENGRENCMDQ5MzcxMUYxODlCNjU0MTRDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKaVbwDBAGaVcQwDQYJ
KoZIhvcNAQELBQADggEBADp04GI7hKPM7sViuyYbmNlSqMoaWunAgG9nY3VgWHxW
00FQRoDn3id/1Q1uoGG9xawq5oB3x5vZRJIIcsQ9EDOCvp3Y3MRF97pRUH4Vgicx
2BOGUCdieb5zWneEtu+6aoEcy4kBIlWhg+3PMXwqbWluECmwEt6ByahDGDApd8+3
ZoHMb55c+jkg9KNk4tY8bd8XsmHqQV4+/eqMU2OCpL4wZppBGRr7eEts0pMW1kX0
sl0Cv6gUienEEGCu/KLGbVqG87meXjYlFJMVCNd5kDB+jx2VDwiD3FqCrPsmEY+J
ezmqFOwBWMlDnIjqfR5oAdzedynD0P8Qb+y+YCnKskg=
-----END CERTIFICATE-----
Generated at Sat May 9 11:01:03 2026 by rpki-client