Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C465AD521F7D11F1B48194ECDAE4EC9C.roa
File: C465AD521F7D11F1B48194ECDAE4EC9C.roa (raw, json)
Hash identifier: 6xMz6OOgIaHB5mAxeuhdbGm2Z+08N0gEKSdiAW5hLcs=
Subject key identifier: 01:B7:DE:19:0D:70:E3:BD:D5:63:DB:70:46:E1:74:60:53:A3:5E:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF56
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C465AD521F7D11F1B48194ECDAE4EC9C.roa
Signing time: Sat 14 Mar 2026 08:14:05 +0000
ROA not before: Sat 14 Mar 2026 08:14:01 +0000
ROA not after: Sat 19 Sep 2026 08:14:01 +0000
asID: 13335
IP address blocks: 154.193.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114518 (0x1bf56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 14 08:14:01 2026 GMT
Not After : Sep 19 08:14:01 2026 GMT
Subject: CN=69b518cd-9f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9c:40:02:f1:43:00:55:6a:2f:17:f2:da:74:
0e:65:4c:04:ef:8b:90:15:0d:8a:12:13:17:f8:0d:
c9:c8:da:9e:d1:25:da:3c:19:1e:34:2a:f8:a8:58:
7d:42:d8:b9:04:fd:e8:31:16:12:e9:a5:1c:03:2c:
a6:9f:f8:40:6a:ef:f3:eb:c7:2e:cc:03:84:5c:e9:
86:f6:f1:4d:dd:07:af:00:41:4a:75:aa:10:71:7f:
0e:81:e0:2a:08:53:9e:a8:d7:e4:e7:7d:2b:18:7f:
f0:b9:6e:09:f2:11:e3:a2:cd:51:fd:d6:22:aa:78:
d4:aa:fd:92:aa:0d:54:18:01:23:66:e3:6a:ad:78:
79:4b:04:e6:ff:59:d7:9e:76:0f:fc:a0:6d:2e:a7:
15:5e:19:3a:f7:e5:39:be:93:b7:df:ac:83:9c:6f:
09:c0:e8:b1:33:d0:bd:40:a0:48:4b:62:be:58:6c:
9c:6a:c8:bf:b2:ad:86:68:4d:d3:28:2a:00:1d:cf:
09:32:ba:4f:52:86:ce:b0:2d:d7:6f:61:46:5c:e2:
fd:44:54:b8:35:e4:68:89:5c:6b:1b:8d:95:4f:a4:
bf:30:49:40:c8:b2:d1:f3:65:06:94:90:2e:2f:56:
7c:d8:83:be:57:a9:8f:90:00:e9:77:09:29:32:6e:
14:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B7:DE:19:0D:70:E3:BD:D5:63:DB:70:46:E1:74:60:53:A3:5E:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C465AD521F7D11F1B48194ECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.184.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:24:a7:e9:3f:5f:60:1e:59:c1:89:37:3d:67:e1:00:c5:71:
73:fa:b1:16:85:ce:7d:0b:92:fb:9d:89:97:43:5f:31:d3:0a:
69:55:04:c8:c6:5f:73:13:06:66:49:4c:da:69:25:23:8a:bc:
4b:ab:76:2b:c4:6e:e0:49:ff:f8:9e:71:bf:de:ee:51:95:92:
93:92:12:23:cc:f2:fd:f7:5b:bd:a9:39:4f:be:b9:cf:e9:20:
66:02:b2:ca:08:d9:3e:25:ff:3f:79:a5:58:8d:a1:aa:cc:00:
1d:31:7a:ea:bd:85:ec:ca:a1:f7:0f:43:df:af:34:6c:a0:9b:
e5:07:05:20:3a:71:38:38:12:57:27:6a:8e:cc:2e:d3:af:6c:
a6:5e:ce:32:43:79:1f:65:47:8a:29:95:ea:93:25:c3:c9:25:
54:2e:d5:93:dc:94:21:f3:b2:43:69:ad:c6:f0:ed:83:81:ce:
85:68:11:df:a4:30:b0:57:5a:bf:4c:44:9f:e8:aa:dd:29:ff:
dc:45:7d:2a:5b:4b:13:e2:ba:93:2c:eb:2a:d7:f3:43:b5:57:
9e:1d:11:e6:5a:ba:27:d2:4d:97:56:20:fa:a1:c8:c4:15:fd:
bd:7c:84:51:99:a2:31:10:cb:82:1d:43:f0:96:4e:4f:82:4c:
a4:5a:74:31
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAb9WMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzE0MDgxNDAxWhcNMjYwOTE5MDgxNDAxWjAYMRYw
FAYDVQQDEw02OWI1MThjZC05ZjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqpxAAvFDAFVqLxfy2nQOZUwE74uQFQ2KEhMX+A3JyNqe0SXaPBkeNCr4
qFh9Qti5BP3oMRYS6aUcAyymn/hAau/z68cuzAOEXOmG9vFN3QevAEFKdaoQcX8O
geAqCFOeqNfk530rGH/wuW4J8hHjos1R/dYiqnjUqv2Sqg1UGAEjZuNqrXh5SwTm
/1nXnnYP/KBtLqcVXhk69+U5vpO336yDnG8JwOixM9C9QKBIS2K+WGycasi/sq2G
aE3TKCoAHc8JMrpPUobOsC3Xb2FGXOL9RFS4NeRoiVxrG42VT6S/MElAyLLR82UG
lJAuL1Z82IO+V6mPkADpdwkpMm4U7wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAG3
3hkNcOO91WPbcEbhdGBTo14KMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNDY1QUQ1MjFGN0QxMUYxQjQ4MTk0RUNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsG4MA0GCSqGSIb3DQEB
CwUAA4IBAQDSJKfpP19gHlnBiTc9Z+EAxXFz+rEWhc59C5L7nYmXQ18x0wppVQTI
xl9zEwZmSUzaaSUjirxLq3YrxG7gSf/4nnG/3u5RlZKTkhIjzPL991u9qTlPvrnP
6SBmArLKCNk+Jf8/eaVYjaGqzAAdMXrqvYXsyqH3D0PfrzRsoJvlBwUgOnE4OBJX
J2qOzC7Tr2ymXs4yQ3kfZUeKKZXqkyXDySVULtWT3JQh87JDaa3G8O2Dgc6FaBHf
pDCwV1q/TESf6KrdKf/cRX0qW0sT4rqTLOsq1/NDtVeeHRHmWron0k2XViD6ocjE
Ff29fIRRmaIxEMuCHUPwlk5PgkykWnQx
-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:23 2026 by rpki-client