Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A74B773E458D11F195D4A7C4CE1D38B0.roa
File: A74B773E458D11F195D4A7C4CE1D38B0.roa (raw, json)
Hash identifier: HB4JJmLaFvXO0xYEzFY2cZAj/IamKGy20LxzwpIaYCA=
Subject key identifier: 60:AE:E7:3D:B2:01:47:18:B2:81:B7:26:67:56:B7:CE:3F:20:70:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C8E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A74B773E458D11F195D4A7C4CE1D38B0.roa
Signing time: Fri 01 May 2026 18:43:33 +0000
ROA not before: Fri 01 May 2026 18:43:28 +0000
ROA not after: Fri 05 Jun 2026 18:43:28 +0000
asID: 202656
IP address blocks: 154.219.237.0/24 maxlen: 24
154.219.238.0/24 maxlen: 24
154.219.239.0/24 maxlen: 24
154.219.240.0/24 maxlen: 24
154.219.241.0/24 maxlen: 24
154.219.242.0/24 maxlen: 24
154.219.243.0/24 maxlen: 24
154.219.249.0/24 maxlen: 24
154.221.52.0/24 maxlen: 24
154.222.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116963 (0x1c8e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 18:43:28 2026 GMT
Not After : Jun 5 18:43:28 2026 GMT
Subject: CN=69f4f455-80df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:28:50:80:89:4d:1e:a0:ae:57:6f:dc:37:74:
18:76:a2:a8:2b:8e:be:89:48:c3:b7:87:e3:8c:98:
8f:c4:39:73:7a:c4:d0:9d:92:20:f8:b4:2a:a1:35:
0b:9f:6b:4a:88:ae:a4:59:a8:6f:0d:b0:45:c5:e2:
f6:14:f5:b7:20:7c:e7:e2:65:3d:2d:b9:b6:32:85:
e5:0d:5c:b9:04:ca:69:da:df:82:9f:e5:0a:d0:65:
2a:d5:ae:f1:7d:c3:f7:1c:4c:3a:cc:31:80:39:84:
df:80:c3:a9:66:b8:fb:3c:30:a3:d8:40:e5:fd:7c:
57:d5:65:57:1c:6c:f4:4d:ec:3b:ed:36:4b:56:af:
e9:d4:e5:b2:7a:61:0c:b8:17:56:1d:4f:44:7d:dd:
6f:83:9a:f4:7a:e6:6a:5a:7f:13:6d:44:93:17:56:
6f:ad:e4:70:8d:f4:53:dd:20:9d:3e:40:37:28:1f:
08:1f:54:32:23:c3:e4:dc:38:fc:3a:87:1e:1e:76:
30:bc:22:13:70:a5:c0:ec:23:f3:96:e2:f2:3a:aa:
93:21:46:5e:d4:b1:11:b0:64:39:4e:62:69:e6:50:
07:4b:19:33:8b:30:c1:b6:36:a1:9c:26:05:ec:6a:
17:e5:50:66:10:57:a1:d6:69:47:7e:2f:cc:fc:b5:
7b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AE:E7:3D:B2:01:47:18:B2:81:B7:26:67:56:B7:CE:3F:20:70:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A74B773E458D11F195D4A7C4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.237.0-154.219.243.255
154.219.249.0/24
154.221.52.0/24
154.222.197.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:58:30:9c:ca:53:60:a6:f8:7b:11:6f:4d:7a:71:2a:dd:e8:
9d:6a:13:ef:33:a4:c3:ad:8f:58:70:d7:6f:f2:60:d7:ca:86:
cc:eb:c0:f6:52:d0:12:94:93:91:55:5f:a0:22:e3:17:67:6f:
0f:46:83:b0:c7:5d:c7:1e:93:22:32:ad:31:45:ff:15:58:27:
e3:04:d3:e4:d1:e4:67:ec:8c:6d:5d:62:0a:f8:92:27:37:09:
ca:94:b9:25:44:60:e4:5a:4a:a2:69:9a:6c:2a:56:2a:dd:0e:
af:c0:d5:31:32:95:09:a6:b9:69:37:2e:e4:33:28:f3:e5:56:
ac:55:a3:32:af:e9:3f:c4:e5:02:ce:19:06:19:64:45:83:57:
70:f3:fe:3d:e5:4b:91:5e:1a:0b:18:18:7a:e6:69:56:0e:e6:
d3:eb:fe:80:c3:65:73:ab:d1:af:1f:61:a4:02:79:6d:33:00:
70:c7:62:5a:92:5c:8c:f8:91:e4:98:36:28:35:54:f9:cd:1b:
e1:6f:03:d1:01:6f:43:37:a8:18:7b:44:09:4c:85:59:fb:d2:
63:9b:ba:4e:6e:b0:de:b5:c6:e2:99:68:c7:94:f1:a8:9e:3d:
41:f9:82:31:93:f0:40:5c:7a:76:be:c1:3e:51:8b:3b:5b:7e:
54:30:f1:4d
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIDAcjjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTAxMTg0MzI4WhcNMjYwNjA1MTg0MzI4WjAYMRYw
FAYDVQQDEw02OWY0ZjQ1NS04MGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2ShQgIlNHqCuV2/cN3QYdqKoK46+iUjDt4fjjJiPxDlzesTQnZIg+LQq
oTULn2tKiK6kWahvDbBFxeL2FPW3IHzn4mU9Lbm2MoXlDVy5BMpp2t+Cn+UK0GUq
1a7xfcP3HEw6zDGAOYTfgMOpZrj7PDCj2EDl/XxX1WVXHGz0Tew77TZLVq/p1OWy
emEMuBdWHU9Efd1vg5r0euZqWn8TbUSTF1ZvreRwjfRT3SCdPkA3KB8IH1QyI8Pk
3Dj8OoceHnYwvCITcKXA7CPzluLyOqqTIUZe1LERsGQ5TmJp5lAHSxkzizDBtjah
nCYF7GoX5VBmEFeh1mlHfi/M/LV7UQIDAQABo4ICvzCCArswHQYDVR0OBBYEFGCu
5z2yAUcYsoG3JmdWt84/IHD1MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BNzRCNzczRTQ1OEQxMUYxOTVENEE3QzRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBACa2+0DBAKa2/ADBACa
2/kDBACa3TQDBACa3sUwDQYJKoZIhvcNAQELBQADggEBAJ1YMJzKU2Cm+HsRb016
cSrd6J1qE+8zpMOtj1hw12/yYNfKhszrwPZS0BKUk5FVX6Ai4xdnbw9Gg7DHXcce
kyIyrTFF/xVYJ+ME0+TR5GfsjG1dYgr4kic3CcqUuSVEYORaSqJpmmwqVirdDq/A
1TEylQmmuWk3LuQzKPPlVqxVozKv6T/E5QLOGQYZZEWDV3Dz/j3lS5FeGgsYGHrm
aVYO5tPr/oDDZXOr0a8fYaQCeW0zAHDHYlqSXIz4keSYNig1VPnNG+FvA9EBb0M3
qBh7RAlMhVn70mObuk5usN61xuKZaMeU8aiePUH5gjGT8EBcena+wT5RiztbflQw
8U0=
-----END CERTIFICATE-----
Generated at Sat May 9 11:02:59 2026 by rpki-client