Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/962BA48225D611F19F9B55E9DAE4EC9C.roa
File: 962BA48225D611F19F9B55E9DAE4EC9C.roa (raw, json)
Hash identifier: nVCGiE6t9ktD/wmtM8xsNt7Xe9HHjUcL5hGcyVzc2iQ=
Subject key identifier: 56:E9:3F:EC:D0:8B:EF:CE:76:69:B3:A8:0F:51:D7:A0:1D:40:03:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C050
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/962BA48225D611F19F9B55E9DAE4EC9C.roa
Signing time: Sun 22 Mar 2026 10:05:00 +0000
ROA not before: Sun 22 Mar 2026 10:04:54 +0000
ROA not after: Sun 01 Aug 2027 10:04:54 +0000
asID: 47890
IP address blocks: 154.214.196.0/24 maxlen: 24
154.214.205.0/24 maxlen: 24
154.214.224.0/22 maxlen: 24
154.214.230.0/23 maxlen: 24
154.214.236.0/23 maxlen: 24
154.214.238.0/23 maxlen: 24
154.214.240.0/22 maxlen: 24
154.214.244.0/23 maxlen: 24
154.214.248.0/23 maxlen: 24
154.214.250.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114768 (0x1c050)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 22 10:04:54 2026 GMT
Not After : Aug 1 10:04:54 2027 GMT
Subject: CN=69bfbecc-9e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:67:4f:aa:54:6d:3a:38:c1:3a:3c:d3:89:90:
95:c3:b0:e9:9d:0d:58:b6:f5:9d:43:eb:9d:3d:4b:
9e:0c:43:ec:33:2a:90:19:4c:4d:6a:54:12:cc:a2:
e4:f6:a7:93:7f:ef:02:c6:77:1c:2b:79:09:81:b1:
4f:0f:16:19:e4:a9:19:9f:1b:85:6f:e6:4e:db:23:
c3:9e:3d:7d:b7:8c:0d:48:7b:bd:78:58:09:b1:c4:
15:5f:2f:ce:f9:33:19:21:45:e2:05:94:d4:aa:28:
ed:e1:cb:26:d5:3f:e5:c4:04:9b:0a:8c:2b:94:84:
5d:34:76:64:6a:9a:d0:0f:15:84:06:65:47:41:78:
7b:8b:ea:c9:71:75:11:68:3f:95:db:0c:d4:74:96:
6b:9d:4a:8d:53:1e:af:cd:07:ab:79:32:1b:a2:d5:
13:84:54:fd:eb:e2:7e:41:71:62:15:8d:af:54:93:
be:ac:01:5b:aa:78:df:b0:f3:c8:fe:df:42:ac:ca:
26:cd:f9:3b:f3:8a:64:97:91:fc:4e:a2:ea:d2:7d:
26:a0:98:da:6f:d4:26:a3:3a:00:03:87:48:e9:c6:
91:dc:99:33:9d:34:7d:40:72:90:01:7c:7a:b7:4f:
e9:68:f9:1f:01:8a:54:49:f1:20:c8:e6:d9:79:72:
a3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E9:3F:EC:D0:8B:EF:CE:76:69:B3:A8:0F:51:D7:A0:1D:40:03:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/962BA48225D611F19F9B55E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.196.0/24
154.214.205.0/24
154.214.224.0/22
154.214.230.0/23
154.214.236.0-154.214.245.255
154.214.248.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:0d:e2:13:f0:1b:5f:9f:8a:a1:d4:c2:63:14:69:8c:a1:6b:
6b:de:6a:1f:a1:00:a2:a2:5e:c5:d4:37:13:7e:06:5e:c3:97:
ae:74:1f:26:db:c4:7b:6f:ff:29:26:35:72:ca:e0:44:76:06:
73:07:57:f4:6e:3b:7c:99:3a:67:c3:de:95:c2:7d:e3:90:3c:
fa:2c:13:a2:60:0e:97:10:04:5f:75:a2:7e:05:1d:1c:03:31:
d7:0e:50:ba:cf:ef:5e:32:8e:bf:4a:63:86:23:bb:29:84:50:
f5:38:dd:8e:f4:6a:b4:69:af:6e:83:24:e8:f9:54:55:1b:bb:
ae:24:b0:05:b7:0e:23:b8:c2:bd:a1:ed:8f:39:53:5b:3d:80:
ba:ef:2a:d4:40:ab:06:57:78:c6:e7:71:3c:f1:c4:3a:b7:6f:
8d:e1:24:14:8c:49:b2:92:17:97:1c:bd:22:2c:35:3b:27:50:
59:33:92:7a:59:fd:60:c5:c2:d8:d7:89:04:a3:68:e3:59:84:
ef:46:ce:3b:71:75:28:06:ab:39:f0:29:7f:dc:a0:57:2f:79:
fe:05:1a:b2:5a:33:59:fc:6d:9e:27:47:c7:bb:b8:51:b4:08:
92:62:86:dd:2e:35:d2:68:e1:f8:29:4e:0a:6b:37:96:b0:41:
32:8c:0f:f1
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgIDAcBQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzIyMTAwNDU0WhcNMjcwODAxMTAwNDU0WjAYMRYw
FAYDVQQDEw02OWJmYmVjYy05ZTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyWdPqlRtOjjBOjzTiZCVw7DpnQ1YtvWdQ+udPUueDEPsMyqQGUxNalQS
zKLk9qeTf+8CxnccK3kJgbFPDxYZ5KkZnxuFb+ZO2yPDnj19t4wNSHu9eFgJscQV
Xy/O+TMZIUXiBZTUqijt4csm1T/lxASbCowrlIRdNHZkaprQDxWEBmVHQXh7i+rJ
cXURaD+V2wzUdJZrnUqNUx6vzQereTIbotUThFT96+J+QXFiFY2vVJO+rAFbqnjf
sPPI/t9CrMomzfk784pkl5H8TqLq0n0moJjab9QmozoAA4dI6caR3JkznTR9QHKQ
AXx6t0/paPkfAYpUSfEgyObZeXKj6wIDAQABo4ICyzCCAscwHQYDVR0OBBYEFFbp
P+zQi+/OdmmzqA9R16AdQAO7MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85NjJCQTQ4MjI1RDYxMUYxOUY5QjU1RTlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAmtbEAwQAmtbNAwQCmtbg
AwQBmtbmMAwDBAKa1uwDBAGa1vQDBAKa1vgwDQYJKoZIhvcNAQELBQADggEBAMEN
4hPwG1+fiqHUwmMUaYyha2veah+hAKKiXsXUNxN+Bl7Dl650HybbxHtv/ykmNXLK
4ER2BnMHV/RuO3yZOmfD3pXCfeOQPPosE6JgDpcQBF91on4FHRwDMdcOULrP714y
jr9KY4YjuymEUPU43Y70arRpr26DJOj5VFUbu64ksAW3DiO4wr2h7Y85U1s9gLrv
KtRAqwZXeMbncTzxxDq3b43hJBSMSbKSF5ccvSIsNTsnUFkzknpZ/WDFwtjXiQSj
aONZhO9GzjtxdSgGqznwKX/coFcvef4FGrJaM1n8bZ4nR8e7uFG0CJJiht0uNdJo
4fgpTgprN5awQTKMD/E=
-----END CERTIFICATE-----
Generated at Tue Mar 24 16:13:52 2026 by rpki-client