Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D052C80E3FB011F1BCAD2519CF1D38B0.roa
File: D052C80E3FB011F1BCAD2519CF1D38B0.roa (raw, json)
Hash identifier: qtCbJi8nZhkup3QBVbJzbm2mMuHXgwjYlI4hxVCT3xM=
Subject key identifier: 2A:62:8E:88:FB:60:CC:5E:9D:0C:80:04:37:1B:64:1B:D0:C4:E1:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C705
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D052C80E3FB011F1BCAD2519CF1D38B0.roa
Signing time: Fri 24 Apr 2026 07:40:07 +0000
ROA not before: Fri 24 Apr 2026 07:40:02 +0000
ROA not after: Sat 30 May 2026 07:40:02 +0000
asID: 328608
IP address blocks: 154.91.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 May 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116485 (0x1c705)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 07:40:02 2026 GMT
Not After : May 30 07:40:02 2026 GMT
Subject: CN=69eb1e57-0d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:61:dc:c1:bb:9a:89:41:0c:00:49:32:70:56:
23:ba:27:82:57:cf:ec:aa:dd:17:66:a3:ab:fd:ae:
7c:e5:7f:11:33:93:5d:fd:66:0f:57:e8:68:3c:f3:
a1:16:2c:1a:b8:78:6c:9f:e2:dd:07:52:bc:29:dc:
59:8d:07:6d:a1:bb:3f:c0:83:53:79:e3:f3:b8:70:
17:2c:ec:3d:5a:ac:b7:83:60:a4:62:5f:4c:30:39:
a9:11:6a:a2:b7:95:35:0c:1f:bf:63:9d:9f:23:04:
bf:85:0c:f7:15:65:5c:34:e0:0c:96:d6:0f:9e:cf:
2c:24:d1:e1:04:6e:05:59:fd:cc:19:a3:43:92:6a:
b4:3a:c6:f7:a2:7e:73:d4:86:5e:9c:04:02:5b:df:
2a:9d:31:7e:a9:ac:ec:3a:fa:9c:28:90:83:57:a4:
ce:5a:93:05:19:17:74:54:a7:8e:60:b8:61:6a:64:
ab:e4:b4:f4:40:c5:69:30:8d:f3:82:94:14:86:5a:
60:3c:b1:4e:28:ac:65:f8:37:62:e0:02:19:6c:d6:
1b:1a:68:5f:f8:8f:11:7a:24:fe:36:c5:88:50:53:
f1:f0:c1:69:f0:83:95:f5:4e:aa:9f:28:f9:4a:84:
de:7d:9f:cb:35:8d:7d:37:1a:8d:85:d6:46:ff:5a:
0a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:62:8E:88:FB:60:CC:5E:9D:0C:80:04:37:1B:64:1B:D0:C4:E1:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D052C80E3FB011F1BCAD2519CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.37.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:95:62:97:02:28:65:a3:76:2d:18:ca:8f:49:80:44:a9:97:
c5:d1:73:69:8a:ba:8d:a3:ae:c0:b6:c5:dc:60:c0:fe:03:91:
36:51:cb:77:91:41:3f:60:2c:89:b6:77:91:f2:7a:96:c6:c5:
02:cc:20:fa:3f:25:d6:ed:0e:ef:79:8e:f8:f1:16:de:27:bb:
0f:e2:b0:70:7a:33:6a:39:da:47:b1:8c:31:ed:12:e8:d0:8b:
1d:98:9e:4d:59:cf:55:b3:23:8c:7c:b7:43:cd:91:a1:b8:d3:
58:91:2e:42:e8:2f:13:d5:94:9f:9b:98:09:cf:d9:ef:c1:1d:
20:dd:72:22:ff:22:79:10:a6:ac:da:05:37:17:7a:16:7a:14:
d8:8d:6c:55:0c:a3:59:79:b6:00:c3:3d:c3:a0:4b:71:f9:05:
2d:55:35:22:0d:31:fe:68:1d:ad:a0:7d:52:22:93:c4:a7:b3:
6a:6a:74:9a:09:ed:1b:e1:68:4c:e4:eb:20:76:9b:53:d6:8a:
c2:e2:19:cd:19:03:e9:f9:b7:c7:62:d9:4e:0f:ef:f4:74:6b:
4d:1b:84:3b:c1:cf:72:f6:cb:d9:e0:d4:1c:2c:3e:b6:fb:d6:
70:b7:43:a6:b2:9d:62:a2:8e:7b:92:2b:cc:6b:bb:11:61:2a:
0a:71:f8:6c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAccFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDI0MDc0MDAyWhcNMjYwNTMwMDc0MDAyWjAYMRYw
FAYDVQQDEw02OWViMWU1Ny0wZDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArmHcwbuaiUEMAEkycFYjuieCV8/sqt0XZqOr/a585X8RM5Nd/WYPV+ho
PPOhFiwauHhsn+LdB1K8KdxZjQdtobs/wINTeePzuHAXLOw9Wqy3g2CkYl9MMDmp
EWqit5U1DB+/Y52fIwS/hQz3FWVcNOAMltYPns8sJNHhBG4FWf3MGaNDkmq0Osb3
on5z1IZenAQCW98qnTF+qazsOvqcKJCDV6TOWpMFGRd0VKeOYLhhamSr5LT0QMVp
MI3zgpQUhlpgPLFOKKxl+Ddi4AIZbNYbGmhf+I8ReiT+NsWIUFPx8MFp8IOV9U6q
nyj5SoTefZ/LNY19NxqNhdZG/1oKIQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCpi
joj7YMxenQyABDcbZBvQxOG4MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMDUyQzgwRTNGQjAxMUYxQkNBRDI1MTlDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlslMA0GCSqGSIb3DQEB
CwUAA4IBAQC2lWKXAihlo3YtGMqPSYBEqZfF0XNpirqNo67AtsXcYMD+A5E2Uct3
kUE/YCyJtneR8nqWxsUCzCD6PyXW7Q7veY748RbeJ7sP4rBwejNqOdpHsYwx7RLo
0IsdmJ5NWc9VsyOMfLdDzZGhuNNYkS5C6C8T1ZSfm5gJz9nvwR0g3XIi/yJ5EKas
2gU3F3oWehTYjWxVDKNZebYAwz3DoEtx+QUtVTUiDTH+aB2toH1SIpPEp7NqanSa
Ce0b4WhM5OsgdptT1orC4hnNGQPp+bfHYtlOD+/0dGtNG4Q7wc9y9svZ4NQcLD62
+9Zwt0Omsp1ioo57kivMa7sRYSoKcfhs
-----END CERTIFICATE-----
Generated at Thu May 7 23:48:40 2026 by rpki-client