Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/899E34A63FC511F1A8482815CF1D38B0.roa
File: 899E34A63FC511F1A8482815CF1D38B0.roa (raw, json)
Hash identifier: yRV53DG/mh5ERlostdoJDRf38Gald2Tb2H88dLBSiA0=
Subject key identifier: E3:72:D7:EB:67:29:50:5B:01:7B:5E:DF:2F:61:71:5A:60:C4:15:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C735
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/899E34A63FC511F1A8482815CF1D38B0.roa
Signing time: Fri 24 Apr 2026 10:08:28 +0000
ROA not before: Fri 24 Apr 2026 10:08:23 +0000
ROA not after: Sun 31 May 2026 10:08:23 +0000
asID: 62240
IP address blocks: 154.195.6.0/24 maxlen: 24
154.195.7.0/24 maxlen: 24
154.195.139.0/24 maxlen: 24
154.195.145.0/24 maxlen: 24
154.195.146.0/24 maxlen: 24
154.195.147.0/24 maxlen: 24
154.195.148.0/24 maxlen: 24
154.195.149.0/24 maxlen: 24
154.195.167.0/24 maxlen: 24
154.196.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116533 (0x1c735)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 10:08:23 2026 GMT
Not After : May 31 10:08:23 2026 GMT
Subject: CN=69eb411c-6636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9c:4a:3b:c8:2f:41:56:43:1d:49:27:43:7a:
70:ff:5a:15:42:fd:2d:56:56:d0:cb:c3:cd:65:7b:
c0:1e:c6:bb:55:9e:91:a9:26:e7:a8:ef:92:59:7a:
8e:17:7e:2f:4a:d4:01:58:d9:9b:e0:2b:9d:c4:83:
49:ae:d7:d5:d8:56:3c:43:5a:07:39:55:8c:9a:99:
f2:ce:20:41:0e:81:07:8a:17:f1:a5:fe:4d:22:1e:
b4:44:6d:4f:78:b1:4b:0f:a4:3e:92:f0:d2:95:bb:
16:4e:58:f1:59:06:0a:ce:92:83:36:01:24:51:a3:
18:46:9b:af:b1:83:55:37:80:b2:35:48:36:11:df:
78:5c:68:f3:50:ad:c1:83:4d:c7:e4:fd:29:fe:c8:
90:99:81:74:cd:81:e6:b3:cc:99:db:81:01:e1:a4:
d5:58:9e:b3:d7:be:d6:89:7d:b0:a8:2f:3d:5d:5b:
b6:59:4d:41:bd:b8:9a:6f:52:90:a7:55:c6:b0:6e:
c4:f7:64:56:b6:29:d4:ec:03:93:23:80:0f:35:50:
5a:a8:c1:cc:90:ac:6b:99:da:e9:f5:f0:45:13:ff:
f7:92:0b:77:32:ba:af:15:f3:e2:4a:ff:cd:c0:36:
e6:52:04:c5:e3:b4:3f:78:ac:d6:55:94:83:0a:0b:
48:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:72:D7:EB:67:29:50:5B:01:7B:5E:DF:2F:61:71:5A:60:C4:15:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/899E34A63FC511F1A8482815CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.6.0/23
154.195.139.0/24
154.195.145.0-154.195.149.255
154.195.167.0/24
154.196.30.0/24
Signature Algorithm: sha256WithRSAEncryption
38:6d:5a:18:fc:b8:c2:3b:45:71:a6:b0:a5:5a:c2:54:20:15:
0b:9b:5a:be:a1:06:1e:26:02:2d:85:64:a2:3b:c4:1b:90:f7:
f7:c1:c7:c0:16:51:b2:08:e8:ef:b7:f8:df:f3:20:29:5c:68:
a7:39:6d:6f:f0:1e:88:cc:c4:c3:dc:ef:6f:46:c6:9b:4a:c5:
28:a2:17:28:6b:42:1c:b8:c2:ac:43:2b:2e:f7:c6:e6:27:9b:
93:f4:fb:2c:50:9c:19:55:e6:32:33:22:d3:46:5e:47:c5:d0:
63:0c:91:fb:e1:06:c2:d7:6b:12:66:c1:df:af:a8:b5:17:c5:
82:87:09:c7:69:2a:a2:fd:77:e6:54:74:fc:ab:8a:dc:78:50:
d5:43:b1:1d:c1:0c:ad:f0:20:6e:5d:3c:fc:69:91:b8:17:2b:
cf:3e:64:3a:0e:6b:b3:b6:e3:1f:c0:74:56:3f:6b:ea:72:93:
2f:2d:8d:a9:9d:6b:cb:dc:c1:33:c4:43:5f:39:f7:65:d4:e8:
18:36:20:28:e2:64:7b:d4:1f:f3:80:f1:e8:8f:fd:b4:f6:58:
cb:ce:31:99:7f:3e:82:cf:94:02:68:b3:c4:e9:3f:74:bf:33:
d1:dc:a1:dd:05:b4:71:d3:5d:5a:31:a1:f4:02:a2:12:e1:e9:
d5:86:1e:3d
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgIDAcc1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDI0MTAwODIzWhcNMjYwNTMxMTAwODIzWjAYMRYw
FAYDVQQDEw02OWViNDExYy02NjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp5xKO8gvQVZDHUknQ3pw/1oVQv0tVlbQy8PNZXvAHsa7VZ6RqSbnqO+S
WXqOF34vStQBWNmb4CudxINJrtfV2FY8Q1oHOVWMmpnyziBBDoEHihfxpf5NIh60
RG1PeLFLD6Q+kvDSlbsWTljxWQYKzpKDNgEkUaMYRpuvsYNVN4CyNUg2Ed94XGjz
UK3Bg03H5P0p/siQmYF0zYHms8yZ24EB4aTVWJ6z177WiX2wqC89XVu2WU1Bvbia
b1KQp1XGsG7E92RWtinU7AOTI4APNVBaqMHMkKxrmdrp9fBFE//3kgt3MrqvFfPi
Sv/NwDbmUgTF47Q/eKzWVZSDCgtIjQIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFONy
1+tnKVBbAXte3y9hcVpgxBXVMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84OTlFMzRBNjNGQzUxMUYxQTg0ODI4MTVDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQBmsMGAwQAmsOLMAwDBACa
w5EDBAGaw5QDBACaw6cDBACaxB4wDQYJKoZIhvcNAQELBQADggEBADhtWhj8uMI7
RXGmsKVawlQgFQubWr6hBh4mAi2FZKI7xBuQ9/fBx8AWUbII6O+3+N/zIClcaKc5
bW/wHojMxMPc729GxptKxSiiFyhrQhy4wqxDKy73xuYnm5P0+yxQnBlV5jIzItNG
XkfF0GMMkfvhBsLXaxJmwd+vqLUXxYKHCcdpKqL9d+ZUdPyritx4UNVDsR3BDK3w
IG5dPPxpkbgXK88+ZDoOa7O24x/AdFY/a+pyky8tjamda8vcwTPEQ18592XU6Bg2
ICjiZHvUH/OA8eiP/bT2WMvOMZl/PoLPlAJos8TpP3S/M9Hcod0FtHHTXVoxofQC
ohLh6dWGHj0=
-----END CERTIFICATE-----
Generated at Sat May 9 11:02:08 2026 by rpki-client