Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C391949A1E1511F1B40CB0B0DAE4EC9C.roa
File: C391949A1E1511F1B40CB0B0DAE4EC9C.roa (raw, json)
Hash identifier: D3MZuwymu3OnXq+jyA2Kj5YNjwN5Ix3bpmIBtea80SM=
Subject key identifier: 93:D2:69:42:D8:3E:09:5C:24:FE:BA:4C:3B:91:68:56:E9:F7:A8:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF14
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C391949A1E1511F1B40CB0B0DAE4EC9C.roa
Signing time: Thu 12 Mar 2026 13:17:05 +0000
ROA not before: Thu 12 Mar 2026 13:17:00 +0000
ROA not after: Thu 16 Apr 2026 13:17:00 +0000
asID: 271916
IP address blocks: 154.205.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Mar 2026 00:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114452 (0x1bf14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 12 13:17:00 2026 GMT
Not After : Apr 16 13:17:00 2026 GMT
Subject: CN=69b2bcd1-22a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f2:9c:29:3a:31:a8:90:d4:43:80:c2:22:4d:
48:73:57:82:87:0f:d4:23:a2:e4:d6:fa:14:83:42:
fb:f0:b3:2d:9c:e2:61:f3:be:90:6b:35:b2:e0:41:
cd:38:8c:04:0e:0f:59:4e:7c:fb:0a:16:14:9a:23:
6b:70:63:49:e9:bb:ad:ee:dd:37:4d:44:d8:13:38:
51:48:d6:25:16:a9:58:ad:5d:57:50:2e:67:6e:c9:
01:97:61:2d:86:31:2e:62:be:b4:a6:b3:08:21:cd:
a5:e5:90:65:3e:2f:d8:60:c0:5d:4a:09:40:fe:09:
36:84:7d:91:a7:c3:e0:04:23:d3:c4:59:8a:ff:e1:
bc:0f:4d:87:ef:c3:bf:5c:a1:fa:cf:4c:c8:24:18:
a6:9a:46:4a:88:12:e5:d5:13:bf:50:d4:c9:64:95:
5c:4e:5b:77:29:3e:8a:ab:e7:67:9a:2b:be:b0:ed:
41:73:92:10:d8:2f:3d:ec:1e:fb:f8:06:06:b3:95:
dd:dc:a4:76:38:40:e8:a6:45:eb:c7:dd:e9:b6:3f:
67:1b:e5:f2:9a:0d:8e:37:d3:98:8b:19:b3:f9:43:
3e:f0:dd:78:7b:e6:2c:1a:04:c0:ef:35:88:ba:9a:
e8:86:f7:7b:e5:3d:b5:be:f9:64:24:42:9d:52:5e:
8a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D2:69:42:D8:3E:09:5C:24:FE:BA:4C:3B:91:68:56:E9:F7:A8:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C391949A1E1511F1B40CB0B0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.24.0/22
Signature Algorithm: sha256WithRSAEncryption
60:b7:ab:22:14:48:b3:ac:b4:8a:dc:6c:a9:fe:0f:1f:97:97:
62:02:74:ba:bd:c2:ca:ab:8c:f7:d8:47:4e:75:57:1a:eb:4d:
93:31:ad:12:ae:7a:d0:ec:a7:54:e7:97:08:cf:df:4d:a4:5c:
8a:b2:c5:38:b1:a2:b5:ee:76:0b:de:8b:2b:f9:2e:3c:19:93:
83:9a:98:cd:1a:6f:7a:ff:72:82:6d:9f:73:d0:17:48:38:56:
e9:36:2c:fc:02:35:4c:5f:eb:e3:70:b0:fd:68:ee:59:62:1b:
db:82:6e:ac:a2:00:98:e6:ba:53:79:82:e9:79:38:e5:71:7b:
dd:d1:31:e2:1d:00:7f:6d:84:c8:cb:fa:a7:4d:5d:c6:a2:30:
8d:3c:8f:97:6d:e1:5a:e5:51:7b:81:a7:03:eb:e6:d4:c6:bb:
38:c6:9d:d1:90:c8:23:90:97:4f:ad:1a:9f:57:25:d5:f9:07:
a8:bc:7b:bb:dd:68:95:a9:bd:55:8b:cb:83:23:0b:50:42:fb:
5b:ec:80:a1:5a:63:c4:e2:46:ea:05:c6:a4:0f:59:a2:ce:94:
24:4e:19:c2:46:13:12:4b:2e:5a:aa:5b:e7:7e:f0:1f:08:74:
8a:21:ac:02:7c:f3:91:00:63:e7:40:04:69:0f:1f:fb:2f:9a:
00:ec:e9:a5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAb8UMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzEyMTMxNzAwWhcNMjYwNDE2MTMxNzAwWjAYMRYw
FAYDVQQDEw02OWIyYmNkMS0yMmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxPKcKToxqJDUQ4DCIk1Ic1eChw/UI6Lk1voUg0L78LMtnOJh876QazWy
4EHNOIwEDg9ZTnz7ChYUmiNrcGNJ6but7t03TUTYEzhRSNYlFqlYrV1XUC5nbskB
l2EthjEuYr60prMIIc2l5ZBlPi/YYMBdSglA/gk2hH2Rp8PgBCPTxFmK/+G8D02H
78O/XKH6z0zIJBimmkZKiBLl1RO/UNTJZJVcTlt3KT6Kq+dnmiu+sO1Bc5IQ2C89
7B77+AYGs5Xd3KR2OEDopkXrx93ptj9nG+Xymg2ON9OYixmz+UM+8N14e+YsGgTA
7zWIuprohvd75T21vvlkJEKdUl6KkwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJPS
aULYPglcJP66TDuRaFbp96iEMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMzkxOTQ5QTFFMTUxMUYxQjQwQ0IwQjBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCms0YMA0GCSqGSIb3DQEB
CwUAA4IBAQBgt6siFEizrLSK3Gyp/g8fl5diAnS6vcLKq4z32EdOdVca602TMa0S
rnrQ7KdU55cIz99NpFyKssU4saK17nYL3osr+S48GZODmpjNGm96/3KCbZ9z0BdI
OFbpNiz8AjVMX+vjcLD9aO5ZYhvbgm6sogCY5rpTeYLpeTjlcXvd0THiHQB/bYTI
y/qnTV3GojCNPI+XbeFa5VF7gacD6+bUxrs4xp3RkMgjkJdPrRqfVyXV+QeovHu7
3WiVqb1Vi8uDIwtQQvtb7IChWmPE4kbqBcakD1mizpQkThnCRhMSSy5aqlvnfvAf
CHSKIawCfPORAGPnQARpDx/7L5oA7Oml
-----END CERTIFICATE-----
Generated at Mon Mar 16 05:47:43 2026 by rpki-client