Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D04D11B04A6511F194161DB7CE1D38B0.roa
File: D04D11B04A6511F194161DB7CE1D38B0.roa (raw, json)
Hash identifier: IjxvMwDZLcQrXK4yKYzGEAKAYcrbJqrygGjZoebdg4Q=
Subject key identifier: 9C:8E:AB:E4:52:C8:67:5A:6A:79:56:B0:BA:B7:8B:E6:24:F3:AD:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C9F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D04D11B04A6511F194161DB7CE1D38B0.roa
Signing time: Thu 07 May 2026 22:40:58 +0000
ROA not before: Thu 07 May 2026 22:40:53 +0000
ROA not after: Fri 22 May 2026 22:40:53 +0000
asID: 395886
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117240 (0x1c9f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 22:40:53 2026 GMT
Not After : May 22 22:40:53 2026 GMT
Subject: CN=69fd14f9-c0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3b:22:46:5b:30:30:5b:a3:8c:59:65:10:6e:
20:43:a0:42:49:1b:07:45:d5:c6:b9:fe:87:35:19:
30:66:59:4e:32:a0:0d:69:6c:b4:a5:b5:37:9d:02:
d3:c3:07:3e:02:ae:a5:21:01:d9:b1:3b:58:aa:9e:
46:d4:9a:84:18:c1:32:ae:21:9b:be:74:d1:5b:a5:
cf:3e:d0:99:26:b9:fd:63:d9:18:a2:e5:c1:f5:05:
e9:23:ac:af:5b:f6:f9:da:bc:07:38:da:62:6a:66:
70:a2:85:4e:8a:b0:5e:d8:fc:05:3d:df:3c:9b:4e:
7e:90:3b:cd:c2:2b:4a:28:82:8d:db:a4:6d:7b:9d:
0e:eb:77:58:df:44:bd:3f:ec:a8:93:82:56:97:14:
6e:2c:f1:2f:6a:1f:db:af:09:70:b2:6e:14:eb:44:
66:5d:b7:ba:1c:23:b9:5f:5f:ae:c3:a3:ed:df:40:
e0:aa:90:82:09:4f:03:66:5f:a8:3a:0a:66:cf:f1:
cb:ab:e2:25:84:01:cc:81:91:ba:6c:db:37:8a:7a:
81:2f:f0:73:2c:56:f2:f5:be:09:7d:1d:f5:d5:3e:
5a:36:f6:1b:0d:d4:17:dc:75:be:ec:0b:1b:95:9d:
d2:b7:c7:60:26:b8:8b:6c:df:d0:50:de:6b:f3:6b:
35:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8E:AB:E4:52:C8:67:5A:6A:79:56:B0:BA:B7:8B:E6:24:F3:AD:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D04D11B04A6511F194161DB7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
9e:67:01:cc:75:e2:b3:b1:0f:f6:47:7c:ce:51:9f:1a:4e:ee:
87:98:b6:b1:a9:31:ab:21:ba:a2:5c:ab:bd:3a:10:91:b9:a3:
3c:7f:50:48:cb:8d:aa:41:de:59:75:48:21:4c:5b:ae:a5:f6:
5e:3b:fa:3a:50:1a:87:22:4a:67:69:a5:86:eb:e1:49:61:ca:
45:97:a4:f7:c0:4d:c5:ec:85:d5:55:21:c9:a2:34:10:b4:7c:
e3:e6:da:f0:7e:41:6b:32:ed:a1:e2:d9:46:48:42:f5:7a:10:
b3:74:06:0b:5c:00:0b:54:29:a5:9b:84:ef:b7:81:16:ab:0c:
73:ea:3c:57:91:ab:ee:fa:8c:0d:96:be:76:96:2d:08:9b:ac:
5b:b4:e2:c0:5d:fa:a8:f1:bf:ce:a5:d8:e7:2f:bf:09:20:4a:
1d:e8:3b:37:19:00:b7:89:63:97:3e:c0:fe:68:51:e5:fd:e8:
60:12:66:eb:64:be:2d:1f:25:d9:47:6c:99:91:49:3c:c3:cb:
9b:e8:70:d1:23:04:ba:ea:1a:60:59:01:72:5e:8f:b9:7d:2a:
ed:0b:b4:62:6e:3f:0d:d1:4d:89:9f:9b:57:02:d3:23:51:76:
f9:06:d6:41:c1:a9:dc:dc:3b:ce:1e:e1:27:22:3f:61:18:c8:
63:a5:4e:cc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcn4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTA3MjI0MDUzWhcNMjYwNTIyMjI0MDUzWjAYMRYw
FAYDVQQDEw02OWZkMTRmOS1jMGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxDsiRlswMFujjFllEG4gQ6BCSRsHRdXGuf6HNRkwZllOMqANaWy0pbU3
nQLTwwc+Aq6lIQHZsTtYqp5G1JqEGMEyriGbvnTRW6XPPtCZJrn9Y9kYouXB9QXp
I6yvW/b52rwHONpiamZwooVOirBe2PwFPd88m05+kDvNwitKKIKN26Rte50O63dY
30S9P+yok4JWlxRuLPEvah/brwlwsm4U60RmXbe6HCO5X1+uw6Pt30DgqpCCCU8D
Zl+oOgpmz/HLq+IlhAHMgZG6bNs3inqBL/BzLFby9b4JfR311T5aNvYbDdQX3HW+
7AsblZ3St8dgJriLbN/QUN5r82s1FQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJyO
q+RSyGdaanlWsLq3i+Yk863CMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMDREMTFCMDRBNjUxMUYxOTQxNjFEQjdDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEml7gMA0GCSqGSIb3DQEB
CwUAA4IBAQCeZwHMdeKzsQ/2R3zOUZ8aTu6HmLaxqTGrIbqiXKu9OhCRuaM8f1BI
y42qQd5ZdUghTFuupfZeO/o6UBqHIkpnaaWG6+FJYcpFl6T3wE3F7IXVVSHJojQQ
tHzj5trwfkFrMu2h4tlGSEL1ehCzdAYLXAALVCmlm4Tvt4EWqwxz6jxXkavu+owN
lr52li0Im6xbtOLAXfqo8b/OpdjnL78JIEod6Ds3GQC3iWOXPsD+aFHl/ehgEmbr
ZL4tHyXZR2yZkUk8w8ub6HDRIwS66hpgWQFyXo+5fSrtC7Ribj8N0U2Jn5tXAtMj
UXb5BtZBwanc3DvOHuEnIj9hGMhjpU7M
-----END CERTIFICATE-----
Generated at Sat May 9 11:01:50 2026 by rpki-client