Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9C8E17C163811F196E35E9ADAE4EC9C.roa
File: C9C8E17C163811F196E35E9ADAE4EC9C.roa (raw, json)
Hash identifier: 6CWeGIbTpZvBIhZs9e2c+SkexaPiSGcDLCRqafM/muU=
Subject key identifier: 3C:A0:67:D1:67:5C:75:AD:59:5E:DC:E9:61:C3:C3:68:FE:6F:74:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BD07
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9C8E17C163811F196E35E9ADAE4EC9C.roa
Signing time: Mon 02 Mar 2026 13:07:38 +0000
ROA not before: Mon 02 Mar 2026 13:07:34 +0000
ROA not after: Thu 09 Apr 2026 13:07:34 +0000
asID: 138915
IP address blocks: 154.93.50.0/24 maxlen: 24
154.93.51.0/24 maxlen: 24
154.93.54.0/23 maxlen: 24
154.93.56.0/23 maxlen: 24
154.93.58.0/24 maxlen: 24
154.93.59.0/24 maxlen: 24
154.93.60.0/24 maxlen: 24
154.93.61.0/24 maxlen: 24
154.93.62.0/24 maxlen: 24
154.93.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Mar 2026 00:06:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113927 (0x1bd07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 2 13:07:34 2026 GMT
Not After : Apr 9 13:07:34 2026 GMT
Subject: CN=69a58b9a-288c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:01:b0:17:c1:d8:af:69:49:7c:d2:94:dd:
9d:c4:46:9e:e6:f7:8d:17:1e:d4:32:a2:db:b1:54:
f5:a6:4e:60:ce:54:13:80:99:0d:5b:00:fa:b4:ac:
5d:90:2b:f8:11:eb:39:b0:54:08:fe:f4:b4:a3:b6:
5b:3d:ce:23:92:ac:9a:70:1d:9e:37:6f:9d:da:d6:
98:80:62:b1:e5:05:e8:3c:ea:43:12:e4:93:2d:ae:
e4:0d:ab:b4:da:aa:c3:71:56:64:d9:a2:aa:f8:4c:
34:64:81:62:ff:5b:06:31:f3:9e:41:6c:8d:0f:9f:
5d:89:c4:70:33:46:4e:ed:72:7a:6f:05:c2:1c:61:
21:8e:68:6b:e1:a3:04:3a:7a:3d:ad:2b:1c:06:65:
b9:bf:af:dc:02:40:68:77:88:09:69:8c:0e:84:1f:
06:64:79:ce:21:fd:15:8b:1e:fe:d9:7c:1a:b5:1b:
27:f0:e3:7d:f7:c4:25:68:e9:20:b1:ff:9e:9f:62:
e4:5c:1c:9d:7f:b7:c1:f6:35:c2:d0:ad:50:c5:5f:
b2:59:91:23:c7:c8:ac:78:29:83:36:6b:89:5f:88:
3f:df:97:ca:57:e3:8c:07:75:8e:a6:ef:22:21:1e:
02:ca:5a:6c:b1:c6:8b:a8:12:36:e7:39:6f:70:a1:
13:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A0:67:D1:67:5C:75:AD:59:5E:DC:E9:61:C3:C3:68:FE:6F:74:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9C8E17C163811F196E35E9ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.50.0/23
154.93.54.0-154.93.63.255
Signature Algorithm: sha256WithRSAEncryption
4e:86:4a:f3:7a:5c:b7:fa:78:3a:a9:f8:fd:c2:a9:bc:c0:0a:
63:6d:60:69:6b:cd:30:9c:b9:b3:bf:0b:fd:d3:ab:1d:5a:6f:
4b:93:02:b0:cf:71:f8:fe:7b:f0:05:ea:5a:60:72:99:93:47:
22:22:0f:56:c3:2c:fd:4a:c2:9d:50:a7:19:cd:3a:e1:bc:ee:
65:e9:e7:f7:2a:f8:90:6f:0d:54:2b:b6:d8:2d:56:24:4c:24:
9a:a3:7f:e8:97:b6:4a:dd:1c:9e:98:9e:10:7a:b3:3e:4f:83:
68:c4:19:ac:4f:2f:85:4d:07:a3:82:5e:6a:2f:6d:9c:f9:73:
58:d8:52:b0:0c:90:33:f9:d2:24:f8:45:7a:b2:8d:f0:4f:63:
37:b8:5f:92:ae:7e:46:86:66:65:8b:82:40:45:20:aa:73:b7:
24:4b:e1:9c:e1:c3:9a:04:90:71:5f:c2:76:ee:06:b6:2f:e3:
f4:f4:be:47:57:6a:36:1c:77:47:99:c2:d1:35:72:2b:8d:d0:
78:8f:fe:48:db:ed:3b:68:ae:4e:8d:27:0c:fd:87:8e:a1:7c:
3a:5c:8e:8c:cf:1a:54:ec:13:52:29:fb:0c:77:fe:1a:ef:13:
7b:98:1d:28:85:78:d7:4f:d0:66:da:e2:bd:24:73:5d:c0:7f:
3e:e7:25:3d
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAb0HMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzAyMTMwNzM0WhcNMjYwNDA5MTMwNzM0WjAYMRYw
FAYDVQQDEw02OWE1OGI5YS0yODhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsBQBsBfB2K9pSXzSlN2dxEae5veNFx7UMqLbsVT1pk5gzlQTgJkNWwD6
tKxdkCv4Ees5sFQI/vS0o7ZbPc4jkqyacB2eN2+d2taYgGKx5QXoPOpDEuSTLa7k
Dau02qrDcVZk2aKq+Ew0ZIFi/1sGMfOeQWyND59dicRwM0ZO7XJ6bwXCHGEhjmhr
4aMEOno9rSscBmW5v6/cAkBod4gJaYwOhB8GZHnOIf0Vix7+2XwatRsn8ON998Ql
aOkgsf+en2LkXBydf7fB9jXC0K1QxV+yWZEjx8iseCmDNmuJX4g/35fKV+OMB3WO
pu8iIR4CylpsscaLqBI25zlvcKETrwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFDyg
Z9FnXHWtWV7c6WHDw2j+b3QaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DOUM4RTE3QzE2MzgxMUYxOTZFMzVFOUFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBml0yMAwDBAGaXTYDBAaa
XQAwDQYJKoZIhvcNAQELBQADggEBAE6GSvN6XLf6eDqp+P3CqbzACmNtYGlrzTCc
ubO/C/3Tqx1ab0uTArDPcfj+e/AF6lpgcpmTRyIiD1bDLP1Kwp1QpxnNOuG87mXp
5/cq+JBvDVQrttgtViRMJJqjf+iXtkrdHJ6YnhB6sz5Pg2jEGaxPL4VNB6OCXmov
bZz5c1jYUrAMkDP50iT4RXqyjfBPYze4X5KufkaGZmWLgkBFIKpztyRL4Zzhw5oE
kHFfwnbuBrYv4/T0vkdXajYcd0eZwtE1ciuN0HiP/kjb7Ttork6NJwz9h46hfDpc
jozPGlTsE1Ip+wx3/hrvE3uYHSiFeNdP0Gba4r0kc13Afz7nJT0=
-----END CERTIFICATE-----
Generated at Thu Mar 5 22:17:34 2026 by rpki-client