Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CECDDBE43B211F1BDE4E502CF1D38B0.roa
File: 9CECDDBE43B211F1BDE4E502CF1D38B0.roa (raw, json)
Hash identifier: Il19GGCZZ+c43wPxR8sUiCPBQMB1vGF9j+yejTKTuEo=
Subject key identifier: 6F:11:E1:97:C5:07:B8:E5:98:33:A5:F0:07:3B:4A:EF:03:54:23:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C7E0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CECDDBE43B211F1BDE4E502CF1D38B0.roa
Signing time: Wed 29 Apr 2026 10:03:04 +0000
ROA not before: Wed 29 Apr 2026 10:02:59 +0000
ROA not after: Tue 27 Apr 2027 10:02:59 +0000
asID: 328608
IP address blocks: 154.200.241.0/24 maxlen: 24
154.200.242.0/24 maxlen: 24
154.200.248.0/24 maxlen: 24
154.200.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 May 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116704 (0x1c7e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 10:02:59 2026 GMT
Not After : Apr 27 10:02:59 2027 GMT
Subject: CN=69f1d758-c5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b3:17:f8:1b:38:e3:f0:cf:68:a5:e4:bf:1b:
76:ce:bb:37:c3:e2:08:95:8b:11:ce:4c:69:8b:57:
37:c5:b4:2a:17:99:6b:20:1b:73:1b:bc:df:4e:9d:
45:49:bd:02:a0:cf:7d:50:3f:ba:a6:f2:8e:e2:ed:
42:7f:c8:f3:99:e3:fd:3f:15:11:6f:34:d9:f8:c5:
c6:74:65:c8:91:7e:14:70:c9:8a:6e:11:b3:85:f0:
9c:4f:06:19:f9:f8:4b:5f:a0:60:a4:8e:71:67:11:
41:48:08:b2:45:80:d5:48:bc:54:c3:ad:18:a8:17:
84:6b:51:9d:e9:3c:17:c2:41:92:11:88:ad:f0:ab:
70:fd:25:cc:a8:ff:b2:9c:28:7d:9f:41:1b:32:48:
6b:6b:1f:08:e5:04:4d:85:44:cb:69:8d:5d:0d:42:
96:29:04:7f:84:a4:89:5d:99:58:14:ec:c2:e4:e3:
ca:48:c3:0f:b0:d2:b6:82:8b:81:07:0b:d0:f6:63:
c5:5b:45:d7:c5:b9:b8:2a:69:76:f7:83:2a:2b:0b:
fc:c8:90:b5:30:86:12:88:f8:21:b9:0a:0a:c1:5f:
d9:83:6c:0a:f2:75:fa:05:a1:25:38:38:20:c4:be:
30:3d:5e:be:0f:c5:d9:d4:07:14:3a:9e:5e:40:bf:
51:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:11:E1:97:C5:07:B8:E5:98:33:A5:F0:07:3B:4A:EF:03:54:23:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CECDDBE43B211F1BDE4E502CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.241.0-154.200.242.255
154.200.248.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:e2:8e:03:ee:ec:72:a7:ef:5d:83:98:29:f7:93:40:56:ff:
6b:69:28:82:e9:b5:bd:dc:bc:c4:be:b7:e9:a6:ed:f6:9b:47:
71:e6:dd:a8:71:01:3a:aa:b2:1e:05:f6:2d:8d:24:2e:5d:83:
a0:8e:06:b9:d3:16:f3:db:dc:34:74:a4:2c:4c:b3:03:7f:e5:
15:ed:87:33:0a:5e:b5:fc:c0:0e:77:c9:e9:2b:88:3e:b2:72:
e3:63:60:c3:1d:a7:8e:a6:01:46:9e:66:e2:ca:32:b3:10:f2:
43:a4:bd:d2:c6:d3:89:34:ab:1b:1e:f9:e7:95:88:fe:e7:80:
3b:cc:96:d5:77:cf:60:62:ed:1e:86:35:e4:d0:74:c4:df:a0:
bf:1f:1e:1a:8b:2c:26:17:35:e7:2c:b9:af:37:d3:4f:e8:50:
b1:e8:5b:3a:8a:b4:18:1b:47:8d:99:28:74:e5:76:b4:69:3e:
ec:63:df:cd:45:81:81:3c:81:20:3a:1a:f7:a8:0f:5e:26:51:
5c:46:96:25:be:94:be:04:dc:87:55:2b:b9:04:fe:65:f8:5b:
6c:34:9e:ed:d7:9e:09:ab:99:1d:bc:b0:00:ab:e2:ad:09:a6:
88:72:45:d5:ee:bf:b8:47:09:9e:b7:3b:ff:0a:e2:e8:cc:e9:
68:98:ca:ff
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAcfgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDI5MTAwMjU5WhcNMjcwNDI3MTAwMjU5WjAYMRYw
FAYDVQQDEw02OWYxZDc1OC1jNWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvbMX+Bs44/DPaKXkvxt2zrs3w+IIlYsRzkxpi1c3xbQqF5lrIBtzG7zf
Tp1FSb0CoM99UD+6pvKO4u1Cf8jzmeP9PxURbzTZ+MXGdGXIkX4UcMmKbhGzhfCc
TwYZ+fhLX6BgpI5xZxFBSAiyRYDVSLxUw60YqBeEa1Gd6TwXwkGSEYit8Ktw/SXM
qP+ynCh9n0EbMkhrax8I5QRNhUTLaY1dDUKWKQR/hKSJXZlYFOzC5OPKSMMPsNK2
gouBBwvQ9mPFW0XXxbm4Kml294MqKwv8yJC1MIYSiPghuQoKwV/Zg2wK8nX6BaEl
ODggxL4wPV6+D8XZ1AcUOp5eQL9R9wIDAQABo4ICszCCAq8wHQYDVR0OBBYEFG8R
4ZfFB7jlmDOl8Ac7Su8DVCOoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85Q0VDRERCRTQzQjIxMUYxQkRFNEU1MDJDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBACayPEDBACayPIDBAGa
yPgwDQYJKoZIhvcNAQELBQADggEBAA3ijgPu7HKn712DmCn3k0BW/2tpKILptb3c
vMS+t+mm7fabR3Hm3ahxATqqsh4F9i2NJC5dg6COBrnTFvPb3DR0pCxMswN/5RXt
hzMKXrX8wA53yekriD6ycuNjYMMdp46mAUaeZuLKMrMQ8kOkvdLG04k0qxse+eeV
iP7ngDvMltV3z2Bi7R6GNeTQdMTfoL8fHhqLLCYXNecsua8300/oULHoWzqKtBgb
R42ZKHTldrRpPuxj381FgYE8gSA6GveoD14mUVxGliW+lL4E3IdVK7kE/mX4W2w0
nu3XngmrmR28sACr4q0JpohyRdXuv7hHCZ63O/8K4ujM6WiYyv8=
-----END CERTIFICATE-----
Generated at Thu May 7 23:48:39 2026 by rpki-client