Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFC2EF761E2011F1A0ABF9EEDAE4EC9C.roa
File: AFC2EF761E2011F1A0ABF9EEDAE4EC9C.roa (raw, json)
Hash identifier: CqgxNxpf6em0MV96dgROvsX11jC522N64/Mh0BVVLeE=
Subject key identifier: C5:85:D1:99:51:27:0D:86:C1:83:47:90:75:3E:67:B8:32:9D:61:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF22
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFC2EF761E2011F1A0ABF9EEDAE4EC9C.roa
Signing time: Thu 12 Mar 2026 14:35:17 +0000
ROA not before: Thu 12 Mar 2026 14:35:12 +0000
ROA not after: Wed 03 Jun 2026 14:35:12 +0000
asID: 149440
IP address blocks: 154.81.220.0/24 maxlen: 24
154.91.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114466 (0x1bf22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 12 14:35:12 2026 GMT
Not After : Jun 3 14:35:12 2026 GMT
Subject: CN=69b2cf24-bb05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:35:7d:fd:c5:e8:61:d7:13:de:de:c2:82:
a7:aa:81:21:f3:c4:28:8e:a5:cc:fc:ea:48:62:7c:
06:16:8e:00:72:a0:15:83:ff:42:c4:da:0e:f6:30:
60:55:c2:ed:5f:d4:99:67:22:53:ee:50:04:4b:3e:
b8:92:3e:78:ce:fe:ca:1a:2e:38:86:2e:60:36:57:
ff:9d:54:64:a1:37:dd:1e:e2:32:ab:42:99:84:b4:
86:47:9f:73:7a:70:b5:cb:eb:c7:88:18:d2:90:7f:
cf:e4:98:c6:59:c4:d2:a8:52:7d:3a:5b:4d:c8:24:
14:d8:ec:f4:63:60:4c:f0:4c:f7:c1:6f:41:6b:bf:
2d:ab:2b:c8:3d:dd:3a:fc:ae:2d:d6:c8:28:b3:d1:
ba:f8:8f:58:cb:d5:dc:f7:79:2f:24:d5:90:ac:f0:
67:84:58:4c:b5:82:7d:f6:a8:3f:72:c2:f1:1a:61:
db:71:15:42:74:59:c2:82:dc:69:8e:0d:ed:31:63:
c6:d9:91:74:4b:2e:9c:ce:ad:0b:af:51:6f:2a:aa:
72:31:bf:09:e7:fd:f7:30:8c:36:70:e9:ca:9c:dc:
ce:74:59:39:26:0a:e2:51:78:ff:8b:2f:fb:97:0a:
12:15:64:0b:cc:3c:80:b9:b2:89:e1:1c:73:09:d1:
99:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:85:D1:99:51:27:0D:86:C1:83:47:90:75:3E:67:B8:32:9D:61:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFC2EF761E2011F1A0ABF9EEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.220.0/24
154.91.0.0/24
Signature Algorithm: sha256WithRSAEncryption
91:4e:29:c8:e0:ea:aa:ab:d0:39:96:cf:e5:c2:0c:8f:a5:d8:
c6:38:b1:62:5f:aa:25:f1:80:a3:62:49:25:e5:7e:70:d8:33:
ab:8f:e5:4d:f1:71:ca:97:6c:2d:9c:21:1b:a3:74:32:a6:f1:
b3:81:74:9a:40:85:e8:cc:ce:60:82:1b:20:ef:e2:23:6f:99:
a9:ac:df:0c:30:7a:af:37:a7:44:aa:38:7f:60:4b:9f:43:d4:
e8:92:0c:f9:a5:bb:9f:30:53:af:8d:47:e0:a6:31:31:99:61:
a9:a5:de:80:d3:22:1a:e4:74:57:32:f0:5b:e0:0b:32:d1:04:
2a:2e:da:0b:3a:ce:89:67:b5:8f:a0:78:f6:95:59:77:74:b2:
6d:b4:57:46:df:21:9d:be:0d:a5:46:ab:e4:95:cd:4f:9a:15:
6a:df:f4:1a:04:fe:cb:02:c8:33:fa:a2:92:3c:99:03:39:7a:
a7:e8:a1:42:e6:ac:ff:57:6c:f8:b5:02:23:09:52:32:2f:16:
38:60:4d:fb:80:35:f2:2d:b2:6c:f4:ad:b3:28:69:43:2c:17:
2d:1b:93:a9:2f:72:0e:2d:b3:4c:49:ba:dc:f1:18:79:17:f9:
8f:e3:06:e6:97:e5:89:38:1e:46:eb:40:c2:d4:26:70:9d:ea:
8c:95:e6:ce
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAb8iMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzEyMTQzNTEyWhcNMjYwNjAzMTQzNTEyWjAYMRYw
FAYDVQQDEw02OWIyY2YyNC1iYjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs3M1ff3F6GHXE97ewoKnqoEh88QojqXM/OpIYnwGFo4AcqAVg/9CxNoO
9jBgVcLtX9SZZyJT7lAESz64kj54zv7KGi44hi5gNlf/nVRkoTfdHuIyq0KZhLSG
R59zenC1y+vHiBjSkH/P5JjGWcTSqFJ9OltNyCQU2Oz0Y2BM8Ez3wW9Ba78tqyvI
Pd06/K4t1sgos9G6+I9Yy9Xc93kvJNWQrPBnhFhMtYJ99qg/csLxGmHbcRVCdFnC
gtxpjg3tMWPG2ZF0Sy6czq0Lr1FvKqpyMb8J5/33MIw2cOnKnNzOdFk5JgriUXj/
iy/7lwoSFWQLzDyAubKJ4RxzCdGZ1QIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFMWF
0ZlRJw2GwYNHkHU+Z7gynWGCMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BRkMyRUY3NjFFMjAxMUYxQTBBQkY5RUVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmlHcAwQAmlsAMA0GCSqG
SIb3DQEBCwUAA4IBAQCRTinI4Oqqq9A5ls/lwgyPpdjGOLFiX6ol8YCjYkkl5X5w
2DOrj+VN8XHKl2wtnCEbo3QypvGzgXSaQIXozM5gghsg7+Ijb5mprN8MMHqvN6dE
qjh/YEufQ9Tokgz5pbufMFOvjUfgpjExmWGppd6A0yIa5HRXMvBb4Asy0QQqLtoL
Os6JZ7WPoHj2lVl3dLJttFdG3yGdvg2lRqvklc1PmhVq3/QaBP7LAsgz+qKSPJkD
OXqn6KFC5qz/V2z4tQIjCVIyLxY4YE37gDXyLbJs9K2zKGlDLBctG5OpL3IOLbNM
Sbrc8Rh5F/mP4wbml+WJOB5G60DC1CZwneqMlebO
-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:20 2026 by rpki-client