Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A463C1E853B111F1986482BFCE1D38B0.roa
File: A463C1E853B111F1986482BFCE1D38B0.roa (raw, json)
Hash identifier: t178Lhzpz5p/ax0Cn0J1fhWcB8A4a9f6MHOGnz2rgcI=
Subject key identifier: 47:4D:28:F3:7C:EE:37:2E:E1:05:1C:A7:9A:B4:D1:93:34:BF:78:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CCA0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A463C1E853B111F1986482BFCE1D38B0.roa
Signing time: Tue 19 May 2026 18:36:26 +0000
ROA not before: Tue 19 May 2026 18:36:21 +0000
ROA not after: Mon 09 Apr 2029 18:36:21 +0000
asID: 17561
IP address blocks: 154.215.202.0/24 maxlen: 24
154.215.203.0/24 maxlen: 24
154.215.204.0/24 maxlen: 24
154.215.205.0/24 maxlen: 24
154.215.206.0/24 maxlen: 24
154.215.207.0/24 maxlen: 24
154.215.209.0/24 maxlen: 24
154.215.210.0/24 maxlen: 24
154.215.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117920 (0x1cca0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 19 18:36:21 2026 GMT
Not After : Apr 9 18:36:21 2029 GMT
Subject: CN=6a0cadaa-90f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cb:b3:98:fb:98:e8:4b:27:af:f6:b9:34:82:
e8:73:ba:d9:59:f1:26:25:13:2c:f3:7a:cc:21:94:
48:6c:49:dc:77:0f:74:5c:08:02:c8:ac:3e:f8:82:
24:93:07:0d:a6:e0:84:de:ff:68:23:9b:9c:70:3a:
09:13:c5:55:23:d5:d4:0b:7b:b7:ed:5b:94:b4:5c:
fc:7a:a3:a6:06:4e:b8:e1:a5:9f:fc:97:e6:10:63:
95:03:2c:9a:e6:e2:0a:22:36:c3:2e:fb:59:4b:59:
5c:ed:fb:ba:0b:95:14:65:4b:6f:bc:e8:30:73:97:
17:e9:da:17:c3:c2:03:be:39:b2:d8:90:2a:58:d4:
db:1e:38:23:2c:bf:dd:8d:48:5b:4d:ad:3f:7a:63:
e8:b1:65:aa:24:11:99:ce:86:3e:f4:43:01:42:ff:
d8:23:35:35:05:af:39:05:fe:66:b3:7e:a0:33:17:
11:ad:d3:e6:46:1b:91:a9:7e:02:6d:02:55:7c:ad:
9a:a3:1b:37:06:21:72:78:1d:d2:c9:ea:a1:57:3b:
ce:a9:0b:f9:10:51:d7:c6:49:58:9e:db:09:b3:90:
d6:7a:c9:87:33:b9:23:90:b6:61:fd:4a:d6:49:de:
e8:2b:75:12:1f:3d:e2:d7:6f:a9:20:eb:77:18:90:
38:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4D:28:F3:7C:EE:37:2E:E1:05:1C:A7:9A:B4:D1:93:34:BF:78:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A463C1E853B111F1986482BFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.202.0-154.215.207.255
154.215.209.0-154.215.211.255
Signature Algorithm: sha256WithRSAEncryption
75:f6:0c:c0:79:76:53:26:9e:c5:e9:e4:b2:18:16:03:90:10:
c4:7a:10:0a:fd:05:f8:c1:57:22:4e:c7:46:bf:49:b3:eb:a7:
bd:1f:4c:48:7a:a4:bc:d7:44:f7:c7:83:f6:ac:0b:e9:a2:ba:
55:0b:77:ee:53:ad:09:8d:e6:15:23:e4:51:f2:ea:ee:8c:7d:
74:a5:c6:0c:94:a3:55:96:2a:cc:e6:d7:88:a1:ec:bb:1d:3e:
d9:a9:3d:53:41:f1:d7:e9:76:63:03:0f:50:cb:15:19:4d:d4:
0c:b3:88:bd:73:aa:82:a5:3c:ce:23:45:24:21:24:6a:65:a7:
7e:ac:14:e9:a1:35:24:d4:4e:e2:db:87:f0:4e:2a:78:d6:73:
6c:6d:bf:88:bf:aa:a7:1d:c5:f2:a3:b3:69:c3:17:b0:29:d8:
4e:e1:f4:15:69:ef:60:38:e2:9a:d8:c3:62:ad:0b:41:29:39:
63:10:53:f2:43:f9:be:20:79:68:6f:57:06:7a:b7:d6:a0:72:
a7:5f:66:00:97:04:17:d5:93:6f:1c:a2:4d:59:02:45:10:fd:
60:a5:5e:fb:66:6b:a6:50:94:90:20:12:10:65:67:8d:92:63:
9a:e9:00:2b:a4:91:d3:61:d7:51:d5:c3:dc:f5:6e:71:f8:c8:
0f:2f:74:19
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgIDAcygMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTE5MTgzNjIxWhcNMjkwNDA5MTgzNjIxWjAYMRYw
FAYDVQQDEw02YTBjYWRhYS05MGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA48uzmPuY6Esnr/a5NILoc7rZWfEmJRMs83rMIZRIbEncdw90XAgCyKw+
+IIkkwcNpuCE3v9oI5uccDoJE8VVI9XUC3u37VuUtFz8eqOmBk644aWf/JfmEGOV
Ayya5uIKIjbDLvtZS1lc7fu6C5UUZUtvvOgwc5cX6doXw8IDvjmy2JAqWNTbHjgj
LL/djUhbTa0/emPosWWqJBGZzoY+9EMBQv/YIzU1Ba85Bf5ms36gMxcRrdPmRhuR
qX4CbQJVfK2aoxs3BiFyeB3SyeqhVzvOqQv5EFHXxklYntsJs5DWesmHM7kjkLZh
/UrWSd7oK3USHz3i12+pIOt3GJA4JQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFEdN
KPN87jcu4QUcp5q00ZM0v3ipMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BNDYzQzFFODUzQjExMUYxOTg2NDgyQkZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAGa18oDBASa18AwDAME
AJrX0QMEAprX0DANBgkqhkiG9w0BAQsFAAOCAQEAdfYMwHl2UyaexenkshgWA5AQ
xHoQCv0F+MFXIk7HRr9Js+unvR9MSHqkvNdE98eD9qwL6aK6VQt37lOtCY3mFSPk
UfLq7ox9dKXGDJSjVZYqzObXiKHsux0+2ak9U0Hx1+l2YwMPUMsVGU3UDLOIvXOq
gqU8ziNFJCEkamWnfqwU6aE1JNRO4tuH8E4qeNZzbG2/iL+qpx3F8qOzacMXsCnY
TuH0FWnvYDjimtjDYq0LQSk5YxBT8kP5viB5aG9XBnq31qByp19mAJcEF9WTbxyi
TVkCRRD9YKVe+2ZrplCUkCASEGVnjZJjmukAK6SR02HXUdXD3PVucfjIDy90GQ==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:43:09 2026 by rpki-client