Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B68AF3FC1F9811F195A81A87DAE4EC9C.roa
File: B68AF3FC1F9811F195A81A87DAE4EC9C.roa (raw, json)
Hash identifier: VCIqL1xOMwqdWw8dWKGCgWkAHXyQWti4aS19jM+mMNc=
Subject key identifier: 03:0A:67:2B:11:90:00:CD:FA:D4:AE:6A:28:DB:E3:58:F5:18:28:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF6A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B68AF3FC1F9811F195A81A87DAE4EC9C.roa
Signing time: Sat 14 Mar 2026 11:26:58 +0000
ROA not before: Sat 14 Mar 2026 11:26:54 +0000
ROA not after: Mon 20 Apr 2026 11:26:54 +0000
asID: 19318
IP address blocks: 154.194.200.0/22 maxlen: 24
154.213.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114538 (0x1bf6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 14 11:26:54 2026 GMT
Not After : Apr 20 11:26:54 2026 GMT
Subject: CN=69b54602-2974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7e:f2:34:74:c1:2b:85:62:07:11:59:ba:58:
a4:38:24:fb:a8:a6:6d:00:2f:64:29:76:fc:26:aa:
8d:ba:68:21:62:88:13:09:dc:15:27:fc:29:cf:36:
2b:bc:86:1f:01:ae:85:c3:de:f0:b4:30:d3:9b:82:
e4:97:94:97:02:74:bb:5e:1f:8c:63:7a:b1:e0:4f:
c4:10:87:a5:85:6b:3b:85:4d:ac:c5:3c:e2:06:71:
e3:69:8e:c9:d7:c2:07:a5:91:6b:f8:43:c7:4a:a0:
2f:8f:d4:bd:f0:fc:60:64:9c:79:d2:40:9c:a1:8d:
6e:42:40:e5:ae:66:b6:ef:cf:58:dd:eb:fd:7f:8d:
cb:f6:4f:cc:30:e7:db:3a:9f:04:2f:15:43:2a:75:
7b:b6:94:7c:2d:ff:6e:32:52:9d:0d:cb:d8:33:ae:
6f:8c:df:a0:87:da:c7:bb:56:75:a6:2b:47:5e:3a:
8f:4f:16:59:59:d6:fe:c4:60:ed:2c:e7:3f:8b:f0:
8f:35:77:39:43:28:57:70:0c:8a:ae:1d:8d:56:e6:
55:3d:c3:06:9f:d7:8c:5c:25:4c:c0:a2:36:d1:29:
7a:96:75:6a:25:58:5c:45:ed:0e:d2:2d:3a:b2:1a:
d0:ec:3f:bd:1e:36:8f:6d:db:58:a9:a9:0a:f2:61:
1e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0A:67:2B:11:90:00:CD:FA:D4:AE:6A:28:DB:E3:58:F5:18:28:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B68AF3FC1F9811F195A81A87DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.200.0/22
154.213.196.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:b2:09:31:1d:5c:3e:b0:65:3d:be:3b:0f:a1:aa:b5:9c:97:
73:66:c5:12:cc:8d:b6:34:53:4a:9b:6b:bd:83:2b:ca:d1:c1:
85:a1:bb:9d:f9:f3:60:2b:06:0a:c8:e9:79:39:45:18:d3:37:
24:a9:dd:11:f5:55:b8:dc:e6:fc:db:ac:60:1e:43:50:2e:17:
f3:42:6c:0f:9d:8e:d6:1b:ea:48:0e:23:59:12:82:c6:0f:9c:
61:fe:37:f0:5c:57:9c:3c:f0:e2:09:f8:9d:cf:95:d3:06:6e:
d6:29:cd:a8:0c:12:a8:21:67:10:a8:97:e2:da:5d:e5:63:14:
3b:5c:de:58:43:ec:0a:3e:43:62:45:20:31:14:1d:9e:41:1e:
86:78:f8:b5:f0:fd:a1:a8:bb:6b:97:db:f0:19:b7:80:2f:3e:
9c:43:19:af:2f:52:50:46:7d:eb:56:a6:30:4e:50:db:e1:2c:
42:ea:99:6d:29:69:71:6a:49:4c:99:d3:e6:8b:c1:03:7d:dc:
2f:db:27:f1:b5:36:c3:93:fe:ab:77:b8:d8:e6:1e:c4:f7:69:
b5:db:f7:8b:98:16:a9:2f:bd:f2:44:11:6b:37:69:c8:50:68:
36:1f:82:8f:bf:5a:50:1d:65:2d:81:8e:03:8a:74:7d:24:10:
69:13:94:69
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAb9qMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzE0MTEyNjU0WhcNMjYwNDIwMTEyNjU0WjAYMRYw
FAYDVQQDEw02OWI1NDYwMi0yOTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt37yNHTBK4ViBxFZulikOCT7qKZtAC9kKXb8JqqNumghYogTCdwVJ/wp
zzYrvIYfAa6Fw97wtDDTm4Lkl5SXAnS7Xh+MY3qx4E/EEIelhWs7hU2sxTziBnHj
aY7J18IHpZFr+EPHSqAvj9S98PxgZJx50kCcoY1uQkDlrma2789Y3ev9f43L9k/M
MOfbOp8ELxVDKnV7tpR8Lf9uMlKdDcvYM65vjN+gh9rHu1Z1pitHXjqPTxZZWdb+
xGDtLOc/i/CPNXc5QyhXcAyKrh2NVuZVPcMGn9eMXCVMwKI20Sl6lnVqJVhcRe0O
0i06shrQ7D+9HjaPbdtYqakK8mEehwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFAMK
ZysRkADN+tSuaijb41j1GCiOMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNjhBRjNGQzFGOTgxMUYxOTVBODFBODdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCmsLIAwQCmtXEMA0GCSqG
SIb3DQEBCwUAA4IBAQC/sgkxHVw+sGU9vjsPoaq1nJdzZsUSzI22NFNKm2u9gyvK
0cGFobud+fNgKwYKyOl5OUUY0zckqd0R9VW43Ob826xgHkNQLhfzQmwPnY7WG+pI
DiNZEoLGD5xh/jfwXFecPPDiCfidz5XTBm7WKc2oDBKoIWcQqJfi2l3lYxQ7XN5Y
Q+wKPkNiRSAxFB2eQR6GePi18P2hqLtrl9vwGbeALz6cQxmvL1JQRn3rVqYwTlDb
4SxC6pltKWlxaklMmdPmi8EDfdwv2yfxtTbDk/6rd7jY5h7E92m12/eLmBapL73y
RBFrN2nIUGg2H4KPv1pQHWUtgY4DinR9JBBpE5Rp
-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:33 2026 by rpki-client