Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A294E0F03E5C11F1B13F06EFCE1D38B0.roa
File: A294E0F03E5C11F1B13F06EFCE1D38B0.roa (raw, json)
Hash identifier: W8SOn/yK3cCPz2G6f+YP1e9NQ3APoMbI3lzhr+f4rMU=
Subject key identifier: D3:DF:27:1E:06:F3:B2:0F:95:36:68:1F:45:B0:04:09:F0:27:12:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C689
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A294E0F03E5C11F1B13F06EFCE1D38B0.roa
Signing time: Wed 22 Apr 2026 15:05:01 +0000
ROA not before: Wed 22 Apr 2026 15:04:56 +0000
ROA not after: Fri 29 May 2026 15:04:56 +0000
asID: 59187
IP address blocks: 154.221.32.0/22 maxlen: 24
154.221.32.0/23 maxlen: 24
154.221.32.0/24 maxlen: 24
154.221.33.0/24 maxlen: 24
154.221.34.0/23 maxlen: 24
154.221.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116361 (0x1c689)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 15:04:56 2026 GMT
Not After : May 29 15:04:56 2026 GMT
Subject: CN=69e8e39d-ea0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0b:33:74:b0:6f:a5:f7:24:76:02:94:69:42:
a9:dc:de:de:14:14:86:94:a0:d2:ba:ef:71:dd:d3:
a8:2d:43:13:45:90:38:90:4a:68:04:aa:66:23:28:
57:09:13:d5:8f:e0:7f:9b:51:1f:dd:0a:e5:5b:6e:
76:ce:02:c8:1a:fa:92:58:16:8f:90:a0:0f:39:b7:
d1:2a:c1:47:74:9b:57:4d:40:8d:0c:df:bb:61:5f:
9f:49:91:10:43:64:29:2e:55:31:45:47:0c:7c:f7:
61:06:46:76:d8:e0:3c:b2:65:90:d7:2a:55:7f:94:
04:76:40:34:ad:7c:3f:69:86:df:28:26:e8:ed:6c:
2d:b0:b6:e6:02:52:41:0e:c9:21:b5:41:0c:f8:8b:
da:04:61:37:8d:63:22:d4:47:80:d4:1f:cb:54:df:
3b:a6:0c:00:20:6b:c0:19:a1:2e:5f:2c:a1:19:b3:
3f:10:93:c4:df:31:a2:4a:79:c0:34:0f:95:27:ea:
85:0c:7f:a0:fd:c9:20:75:d7:f7:80:14:f1:19:d0:
e4:ed:00:ff:fd:e9:bf:f5:12:43:84:54:0d:43:d5:
59:4e:a4:d5:a5:48:f0:d7:78:76:74:f8:4b:c4:f9:
9d:bc:54:67:07:ce:5c:83:ae:b9:67:da:fa:73:71:
15:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DF:27:1E:06:F3:B2:0F:95:36:68:1F:45:B0:04:09:F0:27:12:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A294E0F03E5C11F1B13F06EFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.32.0/22
Signature Algorithm: sha256WithRSAEncryption
59:f7:d3:28:ce:d0:8e:dd:8a:6f:4f:b6:0e:9e:ef:80:a9:92:
dd:8e:ca:ce:e8:be:78:a3:27:e6:84:3e:77:b0:ad:27:2f:f5:
ae:47:e4:cc:73:13:2b:e0:ad:4a:30:75:bc:35:b7:89:51:cd:
75:10:1d:db:e2:cd:e0:74:aa:2f:01:65:b8:5c:47:f7:47:07:
1d:2c:1e:a0:28:48:98:9f:2e:cc:bd:2d:0d:e4:73:d0:1e:8d:
a7:26:d8:31:87:1a:f8:77:91:47:89:c3:88:6a:13:fe:82:24:
43:5d:87:fc:6a:b1:e3:9c:8c:b9:af:fe:e1:a2:d6:86:83:5f:
ef:04:c2:2c:b4:da:fc:ec:55:2c:5b:49:d6:48:38:ff:3f:c0:
de:37:1e:9d:c4:26:e3:9d:8d:30:20:c7:b2:65:31:0a:8b:3d:
af:35:d2:59:17:97:3e:4b:19:c8:40:2e:d9:48:81:c5:09:9b:
c2:c8:09:f8:82:45:c8:0a:d3:7f:cb:4a:ec:27:a0:ae:fc:71:
5b:3e:43:b7:3b:c9:fd:27:83:da:e4:cd:35:7a:3c:b1:37:27:
23:7a:06:16:a8:eb:75:99:cd:fd:ef:27:db:06:26:87:cb:df:
45:c3:a9:ab:cc:bf:42:c1:cb:24:d4:7c:ad:aa:3f:33:80:b3:
93:76:77:2f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcaJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDIyMTUwNDU2WhcNMjYwNTI5MTUwNDU2WjAYMRYw
FAYDVQQDEw02OWU4ZTM5ZC1lYTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuwszdLBvpfckdgKUaUKp3N7eFBSGlKDSuu9x3dOoLUMTRZA4kEpoBKpm
IyhXCRPVj+B/m1Ef3QrlW252zgLIGvqSWBaPkKAPObfRKsFHdJtXTUCNDN+7YV+f
SZEQQ2QpLlUxRUcMfPdhBkZ22OA8smWQ1ypVf5QEdkA0rXw/aYbfKCbo7WwtsLbm
AlJBDskhtUEM+IvaBGE3jWMi1EeA1B/LVN87pgwAIGvAGaEuXyyhGbM/EJPE3zGi
SnnANA+VJ+qFDH+g/ckgddf3gBTxGdDk7QD//em/9RJDhFQNQ9VZTqTVpUjw13h2
dPhLxPmdvFRnB85cg665Z9r6c3EVnwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNPf
Jx4G87IPlTZoH0WwBAnwJxLeMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMjk0RTBGMDNFNUMxMUYxQjEzRjA2RUZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmt0gMA0GCSqGSIb3DQEB
CwUAA4IBAQBZ99MoztCO3YpvT7YOnu+AqZLdjsrO6L54oyfmhD53sK0nL/WuR+TM
cxMr4K1KMHW8NbeJUc11EB3b4s3gdKovAWW4XEf3RwcdLB6gKEiYny7MvS0N5HPQ
Ho2nJtgxhxr4d5FHicOIahP+giRDXYf8arHjnIy5r/7hotaGg1/vBMIstNr87FUs
W0nWSDj/P8DeNx6dxCbjnY0wIMeyZTEKiz2vNdJZF5c+SxnIQC7ZSIHFCZvCyAn4
gkXICtN/y0rsJ6Cu/HFbPkO3O8n9J4Pa5M01ejyxNycjegYWqOt1mc397yfbBiaH
y99Fw6mrzL9Cwcsk1Hytqj8zgLOTdncv
-----END CERTIFICATE-----
Generated at Sat May 9 11:03:00 2026 by rpki-client