Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD2CE7023BCA11F19868CEA8CE1D38B0.roa
File: CD2CE7023BCA11F19868CEA8CE1D38B0.roa (raw, json)
Hash identifier: bL0+sOmJUqwapiK+seWLBQqJ9yI2temOcn1GIxANgYM=
Subject key identifier: F3:BD:02:99:96:94:FC:C6:4D:82:20:0F:9B:F7:21:A3:B7:60:C7:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C5F9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD2CE7023BCA11F19868CEA8CE1D38B0.roa
Signing time: Sun 19 Apr 2026 08:36:04 +0000
ROA not before: Sun 19 Apr 2026 08:35:59 +0000
ROA not after: Mon 01 Jun 2026 08:35:59 +0000
asID: 214413
IP address blocks: 154.193.136.0/21 maxlen: 24
154.193.144.0/22 maxlen: 24
154.193.148.0/22 maxlen: 24
154.193.168.0/22 maxlen: 24
154.193.172.0/22 maxlen: 24
154.193.176.0/22 maxlen: 24
154.193.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Apr 2026 09:27:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116217 (0x1c5f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 19 08:35:59 2026 GMT
Not After : Jun 1 08:35:59 2026 GMT
Subject: CN=69e493f4-e25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:66:ce:74:4a:39:7d:0b:03:59:19:56:ff:40:
71:e5:6a:84:4e:54:28:6e:15:69:b4:ad:1b:81:74:
66:d3:8d:6f:9e:ec:cf:e3:d7:63:f7:75:03:8d:9c:
ca:0c:e2:ab:e2:39:8e:96:8e:d7:e3:1e:2a:ba:fe:
19:c1:57:d4:36:25:6b:0a:f3:59:e7:0c:e4:c8:58:
69:e2:d4:a7:bd:68:3f:66:e0:7e:3b:c9:28:ee:0e:
d3:55:12:c6:e8:d7:9a:3e:b2:8b:fa:34:1f:dc:fb:
90:01:59:dc:3f:14:70:5a:97:88:84:97:3d:16:72:
31:b1:57:f6:47:94:2e:ff:b4:c7:f2:e0:3e:28:dd:
12:b3:29:47:a8:f5:1b:4c:1b:c8:21:e3:97:2b:c7:
c2:a3:d9:a5:d5:9d:b3:40:9a:03:8b:11:a9:0f:9d:
2a:50:97:94:8c:17:fc:37:8f:d3:23:2b:93:5f:0e:
cf:2e:99:38:f2:86:46:35:38:c3:f7:b5:dc:ef:0c:
10:d4:77:4a:02:68:ad:ed:3f:23:3d:5b:f6:0d:a7:
b9:8d:f1:b4:58:6f:2f:0e:20:17:9d:fd:50:b3:0c:
26:97:75:7e:c1:4d:52:da:cb:cb:0b:4b:35:44:16:
a7:f2:cf:6d:5b:d6:a8:9d:85:87:9d:b6:12:6e:1f:
09:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BD:02:99:96:94:FC:C6:4D:82:20:0F:9B:F7:21:A3:B7:60:C7:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD2CE7023BCA11F19868CEA8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.136.0-154.193.151.255
154.193.168.0-154.193.183.255
Signature Algorithm: sha256WithRSAEncryption
21:a5:4a:ea:d7:e3:ab:b0:e5:1a:1f:e7:65:6a:9d:cf:83:d6:
e5:f1:55:43:09:5c:b0:a1:e7:b8:a8:99:5b:8e:d8:dd:e7:5d:
80:f2:38:67:a4:e4:7e:b8:c0:6b:57:fc:31:a3:da:67:64:02:
70:4d:5b:33:8e:04:05:f7:89:b5:6c:d7:3b:fe:87:67:9c:06:
72:21:2b:eb:69:df:4d:5b:18:ab:0a:a2:b5:d0:ac:05:47:4d:
34:80:3f:3e:74:c2:32:a5:41:f0:f6:1f:be:45:9c:d3:d0:30:
b9:b3:fa:e7:b8:59:79:a2:fa:fe:51:9d:a2:9c:e2:cf:1d:37:
c3:27:2e:e3:b8:1c:3e:d7:64:6c:aa:39:72:74:77:cd:09:fd:
7b:db:91:a9:d9:27:c5:6c:40:53:3a:dc:17:0a:a3:89:82:68:
f5:ab:d1:f5:2e:0d:73:b3:53:fa:e0:fc:e5:d1:7d:87:13:ab:
e8:6e:24:1c:65:9e:fc:c0:51:76:a0:22:d7:a3:30:46:b8:ee:
69:f3:0f:7b:89:e4:86:e4:cf:07:ea:bc:28:9d:cb:e5:2a:30:
4b:88:af:3b:b3:c7:c2:85:d4:b1:48:6c:85:93:a4:e8:87:ba:
06:42:66:34:92:52:f4:7d:fb:5f:04:bf:da:44:0f:e6:a4:f8:
29:39:da:d2
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgIDAcX5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDE5MDgzNTU5WhcNMjYwNjAxMDgzNTU5WjAYMRYw
FAYDVQQDEw02OWU0OTNmNC1lMjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA62bOdEo5fQsDWRlW/0Bx5WqETlQobhVptK0bgXRm041vnuzP49dj93UD
jZzKDOKr4jmOlo7X4x4quv4ZwVfUNiVrCvNZ5wzkyFhp4tSnvWg/ZuB+O8ko7g7T
VRLG6NeaPrKL+jQf3PuQAVncPxRwWpeIhJc9FnIxsVf2R5Qu/7TH8uA+KN0SsylH
qPUbTBvIIeOXK8fCo9ml1Z2zQJoDixGpD50qUJeUjBf8N4/TIyuTXw7PLpk48oZG
NTjD97Xc7wwQ1HdKAmit7T8jPVv2Dae5jfG0WG8vDiAXnf1Qswwml3V+wU1S2svL
C0s1RBan8s9tW9aonYWHnbYSbh8JjQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFPO9
ApmWlPzGTYIgD5v3IaO3YMcdMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DRDJDRTcwMjNCQ0ExMUYxOTg2OENFQThDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAOawYgDBAOawZAwDAME
A5rBqAMEA5rBsDANBgkqhkiG9w0BAQsFAAOCAQEAIaVK6tfjq7DlGh/nZWqdz4PW
5fFVQwlcsKHnuKiZW47Y3eddgPI4Z6TkfrjAa1f8MaPaZ2QCcE1bM44EBfeJtWzX
O/6HZ5wGciEr62nfTVsYqwqitdCsBUdNNIA/PnTCMqVB8PYfvkWc09AwubP657hZ
eaL6/lGdopzizx03wycu47gcPtdkbKo5cnR3zQn9e9uRqdknxWxAUzrcFwqjiYJo
9avR9S4Nc7NT+uD85dF9hxOr6G4kHGWe/MBRdqAi16MwRrjuafMPe4nkhuTPB+q8
KJ3L5SowS4ivO7PHwoXUsUhshZOk6Ie6BkJmNJJS9H37XwS/2kQP5qT4KTna0g==
-----END CERTIFICATE-----
Generated at Mon Apr 20 01:49:39 2026 by rpki-client