Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A89184B01F8811F1BCCAB1AADAE4EC9C.roa
File: A89184B01F8811F1BCCAB1AADAE4EC9C.roa (raw, json)
Hash identifier: obroheXh/K7G7KZ340Ib5TmQnXpKPpn1YrP/m1FWyRY=
Subject key identifier: AD:28:1F:B8:80:C3:17:50:A3:DA:C0:FF:08:2F:BC:50:43:AA:EA:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF5E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A89184B01F8811F1BCCAB1AADAE4EC9C.roa
Signing time: Sat 14 Mar 2026 09:32:03 +0000
ROA not before: Sat 14 Mar 2026 09:31:58 +0000
ROA not after: Sun 31 May 2026 09:31:58 +0000
asID: 399077
IP address blocks: 154.91.87.0/24 maxlen: 24
154.91.88.0/24 maxlen: 24
154.91.89.0/24 maxlen: 24
154.91.90.0/24 maxlen: 24
154.91.91.0/24 maxlen: 24
154.91.92.0/24 maxlen: 24
154.91.93.0/24 maxlen: 24
154.91.94.0/24 maxlen: 24
154.91.95.0/24 maxlen: 24
154.91.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114526 (0x1bf5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 14 09:31:58 2026 GMT
Not After : May 31 09:31:58 2026 GMT
Subject: CN=69b52b13-edfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c9:20:0f:70:40:1c:0f:1b:86:21:cc:7c:15:
31:ea:2c:62:2d:c7:ac:90:5d:48:0c:a4:67:6d:b0:
9c:dd:dd:c1:fc:8c:c5:53:d0:dc:3b:26:8f:94:df:
1a:19:74:d8:0e:1b:21:5c:b6:70:0d:8c:58:42:a9:
3f:d0:ce:50:57:21:bc:14:fd:e7:87:64:6f:13:65:
e0:a6:85:35:f3:16:8e:05:70:35:20:19:60:64:00:
f2:34:c5:2e:5a:41:38:d2:88:ff:38:5f:53:42:10:
1b:e2:b0:ca:91:42:d6:a4:ef:f1:9b:0d:62:50:9b:
56:48:f4:d5:07:d1:65:48:c3:e1:6a:94:da:74:36:
fc:4d:22:1d:83:75:ce:f3:9c:85:b0:79:f2:4b:9b:
2f:0d:24:83:91:28:64:25:5d:f5:81:d4:e7:13:88:
d7:41:28:57:89:19:0e:f1:2c:d7:bf:b2:ba:d3:6c:
59:dd:34:9f:27:67:ab:96:55:b9:0f:51:37:22:d5:
64:7d:7f:53:92:9f:2a:da:86:5d:64:76:3a:69:33:
bd:76:c6:91:b0:4d:d0:59:bd:07:91:fe:ff:fc:d7:
d5:fb:bb:e4:cd:18:0e:99:ba:6f:49:de:66:e2:59:
18:9d:32:49:d6:5f:08:00:59:ac:06:71:06:c3:28:
88:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:28:1F:B8:80:C3:17:50:A3:DA:C0:FF:08:2F:BC:50:43:AA:EA:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A89184B01F8811F1BCCAB1AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.87.0-154.91.96.255
Signature Algorithm: sha256WithRSAEncryption
c5:4f:28:4c:e8:b5:af:bb:4d:11:51:05:a0:8e:c3:af:73:9e:
cd:eb:c4:59:31:24:11:66:e4:bc:ba:fd:1c:6a:c2:70:b3:47:
65:45:73:97:b3:6f:18:b2:96:ac:70:64:c2:db:9e:9c:99:6b:
15:84:48:82:6a:35:a7:2c:74:30:22:b9:90:5b:2b:f8:52:f8:
64:0f:ce:66:b3:10:13:89:7c:1a:35:c3:49:81:f6:d7:f4:aa:
04:a8:58:11:91:38:fe:17:6a:84:97:90:fe:cd:73:ea:03:df:
45:71:26:c7:ee:93:39:d7:f1:f2:dc:9b:72:07:73:70:a5:6e:
71:b8:28:ee:e1:5b:b0:96:83:19:56:eb:64:37:9e:16:56:74:
da:89:55:e0:75:1c:dd:01:2e:be:d1:5c:d7:5f:95:dd:5e:e1:
ef:5c:0c:ad:f5:d9:04:9d:df:91:a0:a0:ed:ff:80:fe:db:4e:
d3:0b:99:20:72:cb:33:ec:99:25:32:ff:a1:d8:a6:d7:ba:ce:
01:4c:b5:26:c2:2a:19:75:d4:97:01:1d:81:38:0b:5a:68:15:
07:4e:37:74:54:fd:e3:68:6e:e5:be:5e:5d:99:ea:41:e6:3b:
d9:95:60:cb:8d:17:01:1e:5e:1b:84:d9:1c:2b:fb:47:81:b1:
13:b1:96:b1
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAb9eMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzE0MDkzMTU4WhcNMjYwNTMxMDkzMTU4WjAYMRYw
FAYDVQQDEw02OWI1MmIxMy1lZGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1skgD3BAHA8bhiHMfBUx6ixiLceskF1IDKRnbbCc3d3B/IzFU9DcOyaP
lN8aGXTYDhshXLZwDYxYQqk/0M5QVyG8FP3nh2RvE2XgpoU18xaOBXA1IBlgZADy
NMUuWkE40oj/OF9TQhAb4rDKkULWpO/xmw1iUJtWSPTVB9FlSMPhapTadDb8TSId
g3XO85yFsHnyS5svDSSDkShkJV31gdTnE4jXQShXiRkO8SzXv7K602xZ3TSfJ2er
llW5D1E3ItVkfX9Tkp8q2oZdZHY6aTO9dsaRsE3QWb0Hkf7//NfV+7vkzRgOmbpv
Sd5m4lkYnTJJ1l8IAFmsBnEGwyiIeQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFK0o
H7iAwxdQo9rA/wgvvFBDqurOMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BODkxODRCMDFGODgxMUYxQkNDQUIxQUFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACaW1cDBACaW2AwDQYJ
KoZIhvcNAQELBQADggEBAMVPKEzota+7TRFRBaCOw69zns3rxFkxJBFm5Ly6/Rxq
wnCzR2VFc5ezbxiylqxwZMLbnpyZaxWESIJqNacsdDAiuZBbK/hS+GQPzmazEBOJ
fBo1w0mB9tf0qgSoWBGROP4XaoSXkP7Nc+oD30VxJsfukznX8fLcm3IHc3ClbnG4
KO7hW7CWgxlW62Q3nhZWdNqJVeB1HN0BLr7RXNdfld1e4e9cDK312QSd35GgoO3/
gP7bTtMLmSByyzPsmSUy/6HYpte6zgFMtSbCKhl11JcBHYE4C1poFQdON3RU/eNo
buW+Xl2Z6kHmO9mVYMuNFwEeXhuE2Rwr+0eBsROxlrE=
-----END CERTIFICATE-----
Generated at Sat Mar 21 21:28:28 2026 by rpki-client