Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DB792DA21E211F1A3532CE1DAE4EC9C.roa
File: 9DB792DA21E211F1A3532CE1DAE4EC9C.roa (raw, json)
Hash identifier: MOqbvgn2H2n5MXnJ2dYbbemO8DkmiDndRPkgbyhfqPc=
Subject key identifier: 03:67:2A:8E:86:C5:33:4E:CF:7E:F8:60:0D:CC:6E:3B:76:1F:4F:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF95
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DB792DA21E211F1A3532CE1DAE4EC9C.roa
Signing time: Tue 17 Mar 2026 09:21:02 +0000
ROA not before: Tue 17 Mar 2026 09:20:57 +0000
ROA not after: Tue 23 Mar 2027 09:20:57 +0000
asID: 328608
IP address blocks: 154.88.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 20 Mar 2026 00:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114581 (0x1bf95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 09:20:57 2026 GMT
Not After : Mar 23 09:20:57 2027 GMT
Subject: CN=69b91cfe-4a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ae:19:ba:33:9c:1e:32:e9:af:d0:2e:7f:68:
8d:26:17:1f:10:cf:4d:c1:06:69:52:89:ab:6d:f4:
49:b1:fd:a8:b4:b0:a5:a9:97:b8:36:f6:bc:2e:a7:
44:95:13:8e:47:91:82:12:07:fb:ea:0c:2f:d6:e4:
7f:42:40:67:ec:3b:a2:44:33:f2:b3:95:a8:81:f2:
ca:8a:6d:eb:7f:4e:9d:59:b3:ce:2e:5c:e8:d6:14:
05:87:a5:a3:a0:b9:a7:ae:1e:83:ef:0a:fd:9c:9c:
18:b7:80:fc:d3:b6:80:35:f2:b0:5d:09:50:9e:c0:
d2:da:45:83:74:a9:04:f6:5b:35:30:0b:f6:f2:03:
d1:31:b3:da:02:42:bf:97:1f:42:26:79:4d:83:c5:
10:cc:08:d4:5d:8f:ca:71:e0:6b:26:c5:69:3d:37:
40:96:4a:eb:55:d2:7a:b3:95:d7:22:2c:d9:af:ab:
cd:c6:98:77:e4:42:ba:10:1c:53:5d:45:1b:61:4d:
ca:7d:78:77:39:91:8b:17:47:c6:4f:73:97:a3:1a:
04:23:28:2e:f9:e2:c5:cd:76:5f:5b:2f:55:5d:cf:
91:b1:02:1b:7d:b3:2a:b0:cf:99:8a:20:2a:3a:07:
3f:ea:b1:8d:71:42:60:bc:22:04:29:fe:45:c3:4a:
2d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:67:2A:8E:86:C5:33:4E:CF:7E:F8:60:0D:CC:6E:3B:76:1F:4F:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DB792DA21E211F1A3532CE1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.36.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:bc:cb:d9:fe:b9:0f:99:2a:61:0c:b4:cf:86:30:64:41:c2:
98:2f:03:2f:af:fe:52:d1:7e:3f:71:39:76:64:38:ce:de:0f:
25:94:75:38:4a:83:a3:5f:1e:cd:91:7c:ff:a0:e8:d9:6b:95:
b2:fc:13:f4:d1:5a:96:e7:36:5e:01:7e:e6:97:d4:53:17:5c:
27:b2:f9:0c:d1:fb:26:05:79:90:80:50:8a:52:8b:aa:34:13:
27:35:f8:1c:6a:c0:14:24:53:a1:91:6c:99:b5:e7:09:24:ca:
78:8f:d4:48:dc:90:a7:10:81:e0:32:f1:7b:77:35:66:ae:f0:
2c:9d:81:0a:56:24:6d:1d:f4:d3:b6:76:40:20:66:67:38:db:
52:5e:a7:00:1b:b4:8d:dc:2c:e9:5e:4f:3b:4b:bf:e4:4f:71:
9d:13:1a:a8:8c:c8:26:2d:b2:78:d7:f9:ff:1c:f1:0c:ad:27:
97:6f:63:4a:0e:06:10:86:2f:a8:4a:ea:fa:66:ae:8c:86:8e:
48:4c:3e:4f:1b:a0:d9:8f:b9:54:80:92:55:7a:7d:de:eb:31:
f0:26:fe:a3:05:fe:f2:53:80:17:c0:35:ed:e1:e0:7e:55:28:
c2:de:1a:d1:ca:f4:3e:c7:ca:c9:7e:2e:be:61:16:df:95:81:
31:d9:74:4d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAb+VMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzE3MDkyMDU3WhcNMjcwMzIzMDkyMDU3WjAYMRYw
FAYDVQQDEw02OWI5MWNmZS00YTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwq4ZujOcHjLpr9Auf2iNJhcfEM9NwQZpUomrbfRJsf2otLClqZe4Nva8
LqdElROOR5GCEgf76gwv1uR/QkBn7DuiRDPys5WogfLKim3rf06dWbPOLlzo1hQF
h6WjoLmnrh6D7wr9nJwYt4D807aANfKwXQlQnsDS2kWDdKkE9ls1MAv28gPRMbPa
AkK/lx9CJnlNg8UQzAjUXY/KceBrJsVpPTdAlkrrVdJ6s5XXIizZr6vNxph35EK6
EBxTXUUbYU3KfXh3OZGLF0fGT3OXoxoEIygu+eLFzXZfWy9VXc+RsQIbfbMqsM+Z
iiAqOgc/6rGNcUJgvCIEKf5Fw0otEQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFANn
Ko6GxTNOz374YA3Mbjt2H0+YMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85REI3OTJEQTIxRTIxMUYxQTM1MzJDRTFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlgkMA0GCSqGSIb3DQEB
CwUAA4IBAQBavMvZ/rkPmSphDLTPhjBkQcKYLwMvr/5S0X4/cTl2ZDjO3g8llHU4
SoOjXx7NkXz/oOjZa5Wy/BP00VqW5zZeAX7ml9RTF1wnsvkM0fsmBXmQgFCKUouq
NBMnNfgcasAUJFOhkWyZtecJJMp4j9RI3JCnEIHgMvF7dzVmrvAsnYEKViRtHfTT
tnZAIGZnONtSXqcAG7SN3CzpXk87S7/kT3GdExqojMgmLbJ41/n/HPEMrSeXb2NK
DgYQhi+oSur6Zq6Mho5ITD5PG6DZj7lUgJJVen3e6zHwJv6jBf7yU4AXwDXt4eB+
VSjC3hrRyvQ+x8rJfi6+YRbflYEx2XRN
-----END CERTIFICATE-----
Generated at Wed Mar 18 06:52:07 2026 by rpki-client