Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDD8D9801B9B11F1B050B1BADAE4EC9C.roa
File: CDD8D9801B9B11F1B050B1BADAE4EC9C.roa (raw, json)
Hash identifier: Prs6/3AU/quh1TbaQAGvZ529vS/fV4U+sivjTR0Z93s=
Subject key identifier: 6C:97:96:A7:1D:78:45:42:68:2B:3A:56:14:D6:13:DF:8F:A0:FE:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE7C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDD8D9801B9B11F1B050B1BADAE4EC9C.roa
Signing time: Mon 09 Mar 2026 09:39:01 +0000
ROA not before: Mon 09 Mar 2026 09:38:57 +0000
ROA not after: Thu 19 Mar 2026 09:38:57 +0000
asID: 45669
IP address blocks: 154.80.0.0/17 maxlen: 24
154.81.224.0/19 maxlen: 24
154.91.160.0/22 maxlen: 24
154.91.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 15 Mar 2026 13:49:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114300 (0x1be7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 9 09:38:57 2026 GMT
Not After : Mar 19 09:38:57 2026 GMT
Subject: CN=69ae9535-b249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:b9:bf:8a:26:53:35:76:c4:29:26:86:9c:
17:4c:db:5c:b8:f1:0d:d1:eb:b0:92:58:dd:67:11:
9f:a2:04:5d:d0:a1:29:d7:e6:f0:bc:f7:1f:0c:c2:
2a:89:c1:71:6a:37:b7:ba:57:da:de:d0:e7:16:8d:
14:11:7d:37:4e:9b:84:23:69:4b:43:4e:99:12:44:
38:65:bc:24:c0:34:e9:84:15:fa:fc:04:47:2b:2f:
85:49:7e:0d:c4:fa:be:03:d3:66:86:b3:2b:bf:90:
bc:de:ae:8d:6d:a3:bb:7c:0e:05:3e:b8:33:4a:da:
ff:ad:7c:9e:d2:3a:56:5a:89:ac:59:d4:06:ca:f4:
0d:46:3c:35:e4:fb:86:4e:1f:5b:dc:0a:41:a3:13:
c8:7a:bd:27:d1:6f:21:aa:6d:db:2f:67:b1:51:fc:
59:97:c8:51:5f:51:00:89:7a:01:25:71:ce:8d:c0:
fd:d8:7a:c9:cf:1a:cf:73:81:a4:e7:62:b7:62:6f:
38:a2:c3:09:7c:5e:ab:88:6f:69:27:0f:af:dc:dd:
dd:59:34:89:c2:ba:90:ae:11:0a:59:57:42:67:0d:
4b:9c:0d:9e:3c:76:8f:1b:55:03:ef:1a:c9:b4:2c:
f4:5f:f1:50:07:02:b6:9c:14:c1:22:81:6d:40:2b:
16:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:97:96:A7:1D:78:45:42:68:2B:3A:56:14:D6:13:DF:8F:A0:FE:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDD8D9801B9B11F1B050B1BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.0.0/17
154.81.224.0/19
154.91.160.0-154.91.165.255
Signature Algorithm: sha256WithRSAEncryption
b0:08:ab:fb:85:bc:01:78:ef:53:a9:71:0d:3e:6e:52:aa:ac:
ad:c4:4c:d0:6c:9f:51:65:72:29:03:da:50:16:b2:a7:78:f4:
14:b4:c4:5d:7a:b5:d0:34:b7:5a:b3:98:1c:9d:c8:f9:e6:47:
7e:a7:60:03:07:b2:c6:20:4d:ad:4a:51:26:a7:b3:d5:1c:f1:
15:6e:29:40:f2:75:df:81:9e:d5:2b:7d:50:64:12:4d:7e:2e:
66:33:a9:e0:f2:d4:0a:c9:77:c4:f2:45:5a:6e:8e:e1:62:49:
c1:a9:fe:e2:bd:9c:98:de:6c:2f:5a:d7:41:49:43:8f:0e:40:
49:31:62:47:1c:1b:b3:18:f6:d9:35:24:69:25:7e:f6:dd:6e:
d7:0c:97:07:cf:c9:37:00:60:09:ec:d1:2e:11:f2:6b:01:57:
14:ed:c9:7f:8e:e4:96:fc:bc:9a:d5:69:f9:94:1c:87:6e:81:
80:9e:1b:0a:e9:8b:64:a5:33:57:9a:8c:f5:23:a4:06:a1:62:
24:95:fa:30:45:83:7b:0f:0a:af:8f:d3:6b:9e:67:2c:0e:e0:
39:09:1c:52:27:2d:13:f4:80:19:9a:a7:72:5e:93:a5:e5:3b:
c8:5c:2d:ec:5e:bc:75:3a:26:9a:69:35:79:73:39:1c:0a:04:
d4:a3:33:01
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAb58MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzA5MDkzODU3WhcNMjYwMzE5MDkzODU3WjAYMRYw
FAYDVQQDEw02OWFlOTUzNS1iMjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwXO5v4omUzV2xCkmhpwXTNtcuPEN0euwkljdZxGfogRd0KEp1+bwvPcf
DMIqicFxaje3ulfa3tDnFo0UEX03TpuEI2lLQ06ZEkQ4ZbwkwDTphBX6/ARHKy+F
SX4NxPq+A9NmhrMrv5C83q6NbaO7fA4FPrgzStr/rXye0jpWWomsWdQGyvQNRjw1
5PuGTh9b3ApBoxPIer0n0W8hqm3bL2exUfxZl8hRX1EAiXoBJXHOjcD92HrJzxrP
c4Gk52K3Ym84osMJfF6riG9pJw+v3N3dWTSJwrqQrhEKWVdCZw1LnA2ePHaPG1UD
7xrJtCz0X/FQBwK2nBTBIoFtQCsWCwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFGyX
lqcdeEVCaCs6VhTWE9+PoP71MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DREQ4RDk4MDFCOUIxMUYxQjA1MEIxQkFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQHmlAAAwQFmlHgMAwDBAWa
W6ADBAGaW6QwDQYJKoZIhvcNAQELBQADggEBALAIq/uFvAF471OpcQ0+blKqrK3E
TNBsn1FlcikD2lAWsqd49BS0xF16tdA0t1qzmBydyPnmR36nYAMHssYgTa1KUSan
s9Uc8RVuKUDydd+BntUrfVBkEk1+LmYzqeDy1ArJd8TyRVpujuFiScGp/uK9nJje
bC9a10FJQ48OQEkxYkccG7MY9tk1JGklfvbdbtcMlwfPyTcAYAns0S4R8msBVxTt
yX+O5Jb8vJrVafmUHIdugYCeGwrpi2SlM1eajPUjpAahYiSV+jBFg3sPCq+P02ue
ZywO4DkJHFInLRP0gBmap3Jek6XlO8hcLexevHU6JpppNXlzORwKBNSjMwE=
-----END CERTIFICATE-----
Generated at Fri Mar 13 22:17:27 2026 by rpki-client