Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A61C30C19FB11F1BDD405C4DAE4EC9C.roa
File: 8A61C30C19FB11F1BDD405C4DAE4EC9C.roa (raw, json)
Hash identifier: 4VSgF+ZPKBCCbnYS3GOUB4z4YAW7KZ4/jlaF4nUQkZk=
Subject key identifier: 3B:EC:01:93:BF:F4:2D:C8:CF:08:0B:FF:17:58:46:E8:A7:EF:5C:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE30
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A61C30C19FB11F1BDD405C4DAE4EC9C.roa
Signing time: Sat 07 Mar 2026 07:59:17 +0000
ROA not before: Sat 07 Mar 2026 07:59:12 +0000
ROA not after: Thu 04 Jun 2026 07:59:12 +0000
asID: 138152
IP address blocks: 154.211.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114224 (0x1be30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 7 07:59:12 2026 GMT
Not After : Jun 4 07:59:12 2026 GMT
Subject: CN=69abdad5-8bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ae:fe:a7:ec:77:d1:dc:58:a0:39:be:c9:d1:
d1:ae:0a:5b:c1:eb:98:cf:9b:0e:f5:47:18:64:17:
bb:e0:c5:2f:85:e5:96:73:28:7f:3a:98:73:dc:67:
02:c2:71:ea:5e:da:92:9b:42:9f:4d:12:93:77:d6:
94:fd:78:2a:fa:59:f0:a0:1e:af:8a:20:0e:6b:64:
ea:c9:03:d1:50:81:1f:eb:9e:65:ce:00:cc:d8:90:
92:2c:64:18:6a:bc:23:a2:36:c6:02:75:3b:44:59:
fd:86:30:1a:c3:e0:cf:94:81:7f:2d:3d:8e:b6:e0:
c9:d2:ff:12:24:77:15:39:e0:d1:31:7b:a7:94:1a:
56:54:4c:67:65:c5:d6:f2:42:d1:14:68:ab:1f:62:
d4:18:82:87:a2:0d:46:b4:94:b1:c0:68:57:13:87:
98:ba:2e:0f:0e:1b:e4:25:aa:80:94:57:16:a7:81:
b5:17:04:d0:e7:db:b8:bd:b8:26:c1:3c:de:a1:57:
1a:5e:72:22:86:05:07:5e:94:8a:7b:4a:d1:68:09:
2a:0a:32:ad:28:bb:f6:64:0b:0b:29:a2:d0:1c:dc:
c6:76:30:93:a3:da:86:cd:3d:2c:a7:8d:91:8b:76:
6e:4f:0d:be:90:b0:aa:13:d6:5c:57:63:ef:1e:04:
58:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EC:01:93:BF:F4:2D:C8:CF:08:0B:FF:17:58:46:E8:A7:EF:5C:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A61C30C19FB11F1BDD405C4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.15.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:af:79:55:b7:62:ce:9e:f0:8c:d8:da:36:f1:31:23:65:f0:
fa:53:89:c8:79:0d:38:36:ab:17:41:f2:98:e9:e4:d9:19:c9:
7e:cf:30:6a:5b:69:73:2f:ea:ef:b6:75:3d:0d:23:c7:4d:67:
33:ee:1b:8a:78:15:e6:87:bf:f6:f9:f6:f3:08:60:23:71:c9:
8c:2a:02:c5:3e:05:fa:ff:f5:17:dc:cb:5e:4b:57:a7:06:29:
5a:b9:70:10:33:4f:09:a3:81:9d:f4:6c:4c:6c:7b:97:db:42:
95:51:f8:65:8c:44:64:77:32:a8:68:82:7f:c8:1d:2b:3e:35:
49:f3:9f:65:ec:c9:e6:e2:77:cd:c7:d3:97:20:26:64:a8:af:
91:3d:64:ca:d2:0c:2d:a3:25:d0:a3:8d:27:96:55:b7:b8:8f:
ec:a3:26:82:d5:3f:4a:88:a5:66:62:bd:7e:4c:a8:0b:f4:0f:
6a:48:43:17:49:27:30:95:d3:8b:18:48:19:44:70:84:fd:b2:
57:88:d8:cf:98:45:e4:fc:a6:b3:d5:fa:04:d0:2a:f2:ce:60:
1c:76:0d:78:11:ee:70:e8:5e:22:5d:b5:8d:50:69:1a:84:57:
d6:c2:fb:d3:5e:fb:12:bb:8f:f8:3e:14:80:e7:ac:b2:4b:b4:
35:63:c2:13
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAb4wMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzA3MDc1OTEyWhcNMjYwNjA0MDc1OTEyWjAYMRYw
FAYDVQQDEw02OWFiZGFkNS04YmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz67+p+x30dxYoDm+ydHRrgpbweuYz5sO9UcYZBe74MUvheWWcyh/Ophz
3GcCwnHqXtqSm0KfTRKTd9aU/Xgq+lnwoB6viiAOa2TqyQPRUIEf655lzgDM2JCS
LGQYarwjojbGAnU7RFn9hjAaw+DPlIF/LT2OtuDJ0v8SJHcVOeDRMXunlBpWVExn
ZcXW8kLRFGirH2LUGIKHog1GtJSxwGhXE4eYui4PDhvkJaqAlFcWp4G1FwTQ59u4
vbgmwTzeoVcaXnIihgUHXpSKe0rRaAkqCjKtKLv2ZAsLKaLQHNzGdjCTo9qGzT0s
p42Ri3ZuTw2+kLCqE9ZcV2PvHgRYXwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDvs
AZO/9C3IzwgL/xdYRuin71wvMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84QTYxQzMwQzE5RkIxMUYxQkRENDA1QzREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtMPMA0GCSqGSIb3DQEB
CwUAA4IBAQBMr3lVt2LOnvCM2No28TEjZfD6U4nIeQ04NqsXQfKY6eTZGcl+zzBq
W2lzL+rvtnU9DSPHTWcz7huKeBXmh7/2+fbzCGAjccmMKgLFPgX6//UX3MteS1en
BilauXAQM08Jo4Gd9GxMbHuX20KVUfhljERkdzKoaIJ/yB0rPjVJ859l7Mnm4nfN
x9OXICZkqK+RPWTK0gwtoyXQo40nllW3uI/soyaC1T9KiKVmYr1+TKgL9A9qSEMX
SScwldOLGEgZRHCE/bJXiNjPmEXk/Kaz1foE0CryzmAcdg14Ee5w6F4iXbWNUGka
hFfWwvvTXvsSu4/4PhSA56yyS7Q1Y8IT
-----END CERTIFICATE-----
Generated at Tue Mar 24 16:16:40 2026 by rpki-client