Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8808D9043C9411F180D8ACF8CE1D38B0.roa
File: 8808D9043C9411F180D8ACF8CE1D38B0.roa (raw, json)
Hash identifier: dJNFRhooLlllAgCeSAUCZi5kOVC+bqzMUiXEIEMscxM=
Subject key identifier: 1F:F2:49:20:80:35:B4:6B:3B:13:F4:F3:91:FC:68:A6:05:51:BA:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C61E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8808D9043C9411F180D8ACF8CE1D38B0.roa
Signing time: Mon 20 Apr 2026 08:40:06 +0000
ROA not before: Mon 20 Apr 2026 08:40:01 +0000
ROA not after: Wed 27 May 2026 08:40:01 +0000
asID: 55320
IP address blocks: 154.205.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116254 (0x1c61e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 20 08:40:01 2026 GMT
Not After : May 27 08:40:01 2026 GMT
Subject: CN=69e5e666-5f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:28:a6:46:5a:ee:44:8e:ca:64:af:72:82:9a:
a4:d0:aa:e1:3d:46:d1:18:de:79:69:2e:ca:38:83:
da:68:99:67:57:ff:f3:48:9f:8c:86:5a:eb:17:19:
f5:f1:ca:e9:0b:7b:a6:53:2e:3f:9e:d1:fb:0e:e3:
7a:c1:69:82:d4:78:d7:8d:cd:92:d2:fa:5b:0e:1c:
72:51:d5:9f:33:c9:67:02:93:cd:d2:60:9b:03:b3:
e9:64:3d:1e:e8:1c:5a:da:f5:df:11:be:b5:ee:80:
17:46:6f:6e:81:38:52:ee:40:ec:55:6a:0e:97:2e:
7e:45:b8:7e:ba:ca:5f:73:bd:f5:16:34:e2:86:53:
b3:4b:7b:dc:6e:8c:e7:d5:b3:52:f4:ee:a3:cc:c5:
48:eb:ef:eb:f9:0c:23:19:16:2e:c9:26:18:d9:96:
00:d7:a5:c8:ff:a8:4b:62:bb:dd:16:26:5c:60:b9:
9f:73:44:cb:c5:1c:27:73:14:a1:a6:af:1a:7f:83:
7a:e9:cb:bb:54:6c:f7:c0:34:db:07:a0:f7:33:6a:
4b:52:59:95:6f:d1:67:7a:3a:52:2d:b9:4c:da:08:
e8:b8:60:60:b5:e3:6c:63:ea:5a:4b:11:2a:6a:d4:
55:f1:74:55:5a:e7:76:45:ad:84:06:1b:71:3d:8e:
2f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F2:49:20:80:35:B4:6B:3B:13:F4:F3:91:FC:68:A6:05:51:BA:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8808D9043C9411F180D8ACF8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.140.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:de:0f:cc:0b:08:44:b5:0e:2f:fe:5a:5f:fb:49:a5:65:be:
ec:44:de:d2:11:c2:8e:c8:a5:fa:9d:ae:bc:31:b3:0f:5f:e7:
20:82:8a:0b:37:19:9e:e8:0d:80:b7:33:aa:94:7a:7c:2a:ad:
2d:00:c9:7b:bd:c9:b8:ce:74:bb:5c:85:fe:aa:ba:ec:13:82:
bc:84:94:de:ee:8f:60:ce:e6:85:0c:e0:23:ee:64:4d:af:55:
83:1e:ec:1d:2c:40:c9:2a:cc:51:48:84:25:11:d8:6f:48:1d:
f4:08:f7:21:d6:0a:28:7c:13:47:c8:2f:34:c2:dd:9e:89:e5:
d9:8f:f1:a4:dc:4b:79:4d:ce:58:c8:20:cd:b2:8d:ca:95:94:
53:34:d3:1c:1b:d5:2f:3b:3c:e5:a0:7e:be:a3:84:f4:ca:2b:
45:56:c3:93:6a:17:b8:fe:5d:0b:88:0a:2b:f0:e4:d2:cb:35:
71:f6:a6:9d:02:93:12:be:ab:1e:1d:22:62:f9:19:17:95:91:
19:37:6c:47:af:9b:9f:a6:4e:41:3f:4d:6c:f6:86:87:74:6c:
7a:d6:04:8e:6e:67:3c:0b:7a:fb:c3:34:92:b1:59:54:75:40:
69:e9:d0:0d:08:22:d2:d6:34:dd:cb:60:69:e9:c6:65:a8:15:
ca:ad:b4:7d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcYeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDIwMDg0MDAxWhcNMjYwNTI3MDg0MDAxWjAYMRYw
FAYDVQQDEw02OWU1ZTY2Ni01ZjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7SimRlruRI7KZK9ygpqk0KrhPUbRGN55aS7KOIPaaJlnV//zSJ+Mhlrr
Fxn18crpC3umUy4/ntH7DuN6wWmC1HjXjc2S0vpbDhxyUdWfM8lnApPN0mCbA7Pp
ZD0e6Bxa2vXfEb617oAXRm9ugThS7kDsVWoOly5+Rbh+uspfc731FjTihlOzS3vc
bozn1bNS9O6jzMVI6+/r+QwjGRYuySYY2ZYA16XI/6hLYrvdFiZcYLmfc0TLxRwn
cxShpq8af4N66cu7VGz3wDTbB6D3M2pLUlmVb9FnejpSLblM2gjouGBgteNsY+pa
SxEqatRV8XRVWud2Ra2EBhtxPY4vMwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFB/y
SSCANbRrOxP085H8aKYFUboWMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84ODA4RDkwNDNDOTQxMUYxODBEOEFDRjhDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms2MMA0GCSqGSIb3DQEB
CwUAA4IBAQC33g/MCwhEtQ4v/lpf+0mlZb7sRN7SEcKOyKX6na68MbMPX+cggooL
Nxme6A2AtzOqlHp8Kq0tAMl7vcm4znS7XIX+qrrsE4K8hJTe7o9gzuaFDOAj7mRN
r1WDHuwdLEDJKsxRSIQlEdhvSB30CPch1goofBNHyC80wt2eieXZj/Gk3Et5Tc5Y
yCDNso3KlZRTNNMcG9UvOzzloH6+o4T0yitFVsOTahe4/l0LiAor8OTSyzVx9qad
ApMSvqseHSJi+RkXlZEZN2xHr5ufpk5BP01s9oaHdGx61gSObmc8C3r7wzSSsVlU
dUBp6dANCCLS1jTdy2Bp6cZlqBXKrbR9
-----END CERTIFICATE-----
Generated at Sat May 9 11:02:04 2026 by rpki-client