Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C33486A249F211F1BD708309CF1D38B0.roa
File: C33486A249F211F1BD708309CF1D38B0.roa (raw, json)
Hash identifier: qAfaoKCujibihQ2GstRHrWUTHZF5QXFXD206PzoP9ks=
Subject key identifier: D9:AA:31:5C:FB:DB:14:3B:BF:22:64:D1:F1:24:29:8C:21:E1:DC:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C9C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C33486A249F211F1BD708309CF1D38B0.roa
Signing time: Thu 07 May 2026 08:57:23 +0000
ROA not before: Thu 07 May 2026 08:57:18 +0000
ROA not after: Sun 21 Jun 2026 08:57:18 +0000
asID: 63099
IP address blocks: 154.222.84.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117188 (0x1c9c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 08:57:18 2026 GMT
Not After : Jun 21 08:57:18 2026 GMT
Subject: CN=69fc53f3-990c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:26:b5:78:5a:8d:78:00:b7:ce:b9:47:0f:d0:
4d:10:bf:f9:f8:7c:f2:82:c7:b9:8b:17:9b:3b:ad:
b5:6a:e5:93:db:06:9b:6c:e8:e5:8e:cf:b6:56:03:
88:f7:49:eb:4d:96:bf:18:59:3f:a1:5a:cc:0d:d8:
4f:8b:cb:fd:2f:21:a7:2b:3b:30:15:9c:cc:79:36:
08:8b:8f:1c:6f:89:63:b9:f2:42:45:03:15:62:fa:
f4:c4:bd:16:5c:b9:82:2e:3b:08:2b:c1:e7:08:68:
70:46:85:db:aa:ac:0a:1f:24:36:33:7f:8b:d7:f2:
10:ed:b8:b9:ea:24:bb:df:ce:8f:b4:fc:c4:20:86:
5a:6a:26:f1:35:2d:85:1d:21:57:12:65:60:02:f3:
a3:3e:07:72:70:8b:54:6c:f5:f6:67:0e:fb:af:ba:
32:70:35:7b:b0:52:13:ea:e1:f0:a5:35:fc:64:0d:
1c:01:f5:60:76:49:de:4a:5d:ff:b6:97:06:29:94:
5c:1a:ff:d4:04:68:5b:94:de:be:a1:b3:6b:dd:6c:
4b:17:14:d4:c8:69:29:ab:3a:8f:46:64:6d:fa:d2:
56:4b:1f:02:d2:08:df:5f:c3:af:5b:fb:35:c4:3a:
cb:f1:34:0b:cd:c3:35:94:28:75:2a:12:1c:6b:46:
32:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AA:31:5C:FB:DB:14:3B:BF:22:64:D1:F1:24:29:8C:21:E1:DC:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C33486A249F211F1BD708309CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.84.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:1c:3b:79:1a:c8:66:40:a6:38:54:16:2a:41:df:1e:c1:11:
c3:11:9e:c2:a8:39:49:08:06:20:d9:6f:b0:7b:5f:c7:37:84:
cb:9f:57:bc:dd:42:0b:ae:56:d4:85:a1:11:3f:b6:c9:0d:46:
e8:ba:dd:e2:8e:c9:22:b7:a4:0f:4c:33:78:ee:e3:30:02:69:
c0:d5:ca:2a:6d:69:99:d3:d3:5c:39:e2:bc:44:5c:56:13:9b:
db:71:29:c4:eb:e6:47:45:bb:3b:4a:04:82:a7:aa:3d:2b:df:
61:cc:da:e6:b3:15:53:77:c4:e5:1d:ca:e2:90:6c:f4:36:5f:
3c:6d:ba:40:9a:95:f8:3d:60:ff:fd:97:cb:ca:d1:b4:39:43:
2c:75:07:30:72:0d:ec:30:85:a6:7f:7c:08:ef:2a:f8:e1:39:
b3:dc:7d:72:d0:cf:13:d1:aa:f4:7d:95:0d:7b:f9:f7:d3:82:
19:67:e4:15:c8:1d:52:a8:76:c9:9b:a4:d9:d4:15:b8:e3:83:
df:81:46:0e:f2:9c:06:06:44:01:0b:27:ec:44:e8:d3:2c:74:
57:77:68:6d:7b:1f:b1:20:b5:aa:6b:bf:6c:91:a4:d1:9e:d9:
f8:11:20:32:1a:51:06:c2:45:ff:0b:be:57:18:fb:ee:05:b7:
d2:1e:09:bb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcnEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTA3MDg1NzE4WhcNMjYwNjIxMDg1NzE4WjAYMRYw
FAYDVQQDEw02OWZjNTNmMy05OTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1Sa1eFqNeAC3zrlHD9BNEL/5+Hzygse5ixebO621auWT2wabbOjljs+2
VgOI90nrTZa/GFk/oVrMDdhPi8v9LyGnKzswFZzMeTYIi48cb4ljufJCRQMVYvr0
xL0WXLmCLjsIK8HnCGhwRoXbqqwKHyQ2M3+L1/IQ7bi56iS7386PtPzEIIZaaibx
NS2FHSFXEmVgAvOjPgdycItUbPX2Zw77r7oycDV7sFIT6uHwpTX8ZA0cAfVgdkne
Sl3/tpcGKZRcGv/UBGhblN6+obNr3WxLFxTUyGkpqzqPRmRt+tJWSx8C0gjfX8Ov
W/s1xDrL8TQLzcM1lCh1KhIca0YyjwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNmq
MVz72xQ7vyJk0fEkKYwh4dxIMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMzM0ODZBMjQ5RjIxMUYxQkQ3MDgzMDlDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmt5UMA0GCSqGSIb3DQEB
CwUAA4IBAQAuHDt5GshmQKY4VBYqQd8ewRHDEZ7CqDlJCAYg2W+we1/HN4TLn1e8
3UILrlbUhaERP7bJDUbout3ijskit6QPTDN47uMwAmnA1coqbWmZ09NcOeK8RFxW
E5vbcSnE6+ZHRbs7SgSCp6o9K99hzNrmsxVTd8TlHcrikGz0Nl88bbpAmpX4PWD/
/ZfLytG0OUMsdQcwcg3sMIWmf3wI7yr44Tmz3H1y0M8T0ar0fZUNe/n304IZZ+QV
yB1SqHbJm6TZ1BW444PfgUYO8pwGBkQBCyfsROjTLHRXd2htex+xILWqa79skaTR
ntn4ESAyGlEGwkX/C75XGPvuBbfSHgm7
-----END CERTIFICATE-----
Generated at Sat May 9 11:02:15 2026 by rpki-client