Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/913696EA4AB511F1966466AECE1D38B0.roa
File: 913696EA4AB511F1966466AECE1D38B0.roa (raw, json)
Hash identifier: xSS0Q7EoI+WdTsoTnZT96Jwz1X6Q9r+RHfeFU05lv0c=
Subject key identifier: 0E:8F:FD:47:1D:16:F8:CD:29:D4:7E:8F:48:2F:CE:EB:57:91:A7:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CA53
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/913696EA4AB511F1966466AECE1D38B0.roa
Signing time: Fri 08 May 2026 08:11:51 +0000
ROA not before: Fri 08 May 2026 08:11:47 +0000
ROA not after: Mon 07 May 2029 08:11:47 +0000
asID: 17561
IP address blocks: 154.208.114.0/24 maxlen: 24
154.208.115.0/24 maxlen: 24
154.208.116.0/24 maxlen: 24
154.208.117.0/24 maxlen: 24
154.208.118.0/24 maxlen: 24
154.208.119.0/24 maxlen: 24
154.208.120.0/24 maxlen: 24
154.208.121.0/24 maxlen: 24
154.208.122.0/24 maxlen: 24
154.208.123.0/24 maxlen: 24
154.208.124.0/24 maxlen: 24
154.208.125.0/24 maxlen: 24
154.208.126.0/24 maxlen: 24
154.208.127.0/24 maxlen: 24
154.208.128.0/24 maxlen: 24
154.208.129.0/24 maxlen: 24
154.208.132.0/24 maxlen: 24
154.208.133.0/24 maxlen: 24
154.208.134.0/24 maxlen: 24
154.208.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117331 (0x1ca53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 08:11:47 2026 GMT
Not After : May 7 08:11:47 2029 GMT
Subject: CN=69fd9ac7-1d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:40:97:7b:39:f3:51:c9:0c:6e:07:22:d6:45:
39:5d:4a:30:0f:bd:e6:9d:9f:2e:ef:79:77:31:0a:
2f:e3:cc:69:79:49:cd:b6:4e:35:5d:9e:4e:54:73:
07:c0:bb:8c:08:7d:2d:51:49:11:c5:4c:23:5e:8e:
73:99:c3:8b:28:ab:e7:f8:b8:04:c2:80:31:c1:04:
1d:d0:6a:aa:ba:13:99:32:c5:b8:dc:dc:e8:18:c5:
b3:27:e8:86:82:87:e7:33:1b:63:11:79:ef:49:ce:
68:a6:86:86:58:46:26:23:6b:53:5d:4f:ac:54:96:
28:89:27:cb:f5:90:d4:b8:ea:f6:49:b2:b3:f5:7a:
fd:87:4a:8b:74:f2:21:54:0c:fe:81:a7:9c:32:91:
07:69:87:e8:14:7e:07:15:4e:d9:ca:12:a0:05:58:
5a:a2:8b:e9:b0:e5:e6:3f:58:82:0b:6f:18:25:8c:
a0:31:2f:bc:49:05:75:a0:79:a6:19:1e:13:25:cd:
ca:c2:8e:ed:f4:af:57:ac:2a:0c:dd:9e:01:3b:58:
16:3b:c9:57:68:2a:b8:b3:98:2a:23:a8:2e:29:ea:
d6:2b:22:27:5a:fb:a1:21:0a:37:8a:30:f3:e9:8f:
f2:38:36:8f:57:e4:ed:ac:7e:4a:1f:eb:90:5c:17:
a2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8F:FD:47:1D:16:F8:CD:29:D4:7E:8F:48:2F:CE:EB:57:91:A7:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/913696EA4AB511F1966466AECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.114.0-154.208.129.255
154.208.132.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:69:b9:ee:b9:5d:47:58:af:7b:b7:09:ab:7b:9e:52:ed:cf:
74:c7:06:73:6a:d4:f3:e5:a1:49:c4:a3:dc:cc:40:04:98:6a:
9e:3b:91:d1:63:15:76:7a:84:e3:95:ba:1b:96:a8:17:1d:63:
8d:50:bb:2b:4b:ed:12:99:74:e4:31:e5:ce:b0:e6:f6:e7:3f:
8b:ca:2f:d7:07:07:7c:cb:fd:18:24:4f:4c:d5:92:54:d1:e6:
c9:9d:a7:0f:3a:79:b8:17:e2:88:62:2b:04:8e:b1:24:78:40:
90:4d:6e:67:f9:49:2f:84:d2:8e:95:41:ef:ee:ee:33:4d:e1:
1b:ab:c7:4d:7b:f6:58:63:29:fe:44:ed:56:4f:33:79:1a:7c:
51:34:1d:cb:51:ff:b9:97:d6:50:07:b4:3c:f7:62:d4:8a:6c:
f7:be:e8:e9:86:5c:24:6e:48:1f:65:31:0b:38:24:b1:55:74:
c7:ee:78:b4:09:c7:c7:d9:cf:b2:28:87:ff:4c:36:00:d0:82:
0f:de:40:10:06:98:dc:55:d4:bd:96:cb:9f:6b:bc:72:67:23:
46:ba:20:00:a6:58:69:6b:9f:72:f3:dd:3c:cb:26:ea:3d:e9:
b4:2f:9a:c2:e3:05:01:e3:78:e7:7b:7a:8c:c3:53:3f:54:0b:
60:8f:64:af
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAcpTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTA4MDgxMTQ3WhcNMjkwNTA3MDgxMTQ3WjAYMRYw
FAYDVQQDEw02OWZkOWFjNy0xZDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5ECXeznzUckMbgci1kU5XUowD73mnZ8u73l3MQov48xpeUnNtk41XZ5O
VHMHwLuMCH0tUUkRxUwjXo5zmcOLKKvn+LgEwoAxwQQd0GqquhOZMsW43NzoGMWz
J+iGgofnMxtjEXnvSc5opoaGWEYmI2tTXU+sVJYoiSfL9ZDUuOr2SbKz9Xr9h0qL
dPIhVAz+gaecMpEHaYfoFH4HFU7ZyhKgBVhaoovpsOXmP1iCC28YJYygMS+8SQV1
oHmmGR4TJc3Kwo7t9K9XrCoM3Z4BO1gWO8lXaCq4s5gqI6guKerWKyInWvuhIQo3
ijDz6Y/yODaPV+TtrH5KH+uQXBeirwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFA6P
/UcdFvjNKdR+j0gvzutXkaeJMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MTM2OTZFQTRBQjUxMUYxOTY2NDY2QUVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAGa0HIDBAGa0IADBAKa
0IQwDQYJKoZIhvcNAQELBQADggEBAMRpue65XUdYr3u3Cat7nlLtz3THBnNq1PPl
oUnEo9zMQASYap47kdFjFXZ6hOOVuhuWqBcdY41QuytL7RKZdOQx5c6w5vbnP4vK
L9cHB3zL/RgkT0zVklTR5smdpw86ebgX4ohiKwSOsSR4QJBNbmf5SS+E0o6VQe/u
7jNN4Rurx0179lhjKf5E7VZPM3kafFE0HctR/7mX1lAHtDz3YtSKbPe+6OmGXCRu
SB9lMQs4JLFVdMfueLQJx8fZz7Ioh/9MNgDQgg/eQBAGmNxV1L2Wy59rvHJnI0a6
IACmWGlrn3Lz3TzLJuo96bQvmsLjBQHjeOd7eozDUz9UC2CPZK8=
-----END CERTIFICATE-----
Generated at Sat May 9 11:02:08 2026 by rpki-client