Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0DBCFA41EAF11F188AFE1BBDAE4EC9C.roa
File: D0DBCFA41EAF11F188AFE1BBDAE4EC9C.roa (raw, json)
Hash identifier: E9ez8AS/h1o3qsUt+/4MDKVrbT7CB7AnjGIzBg/Gyk8=
Subject key identifier: C8:DF:2D:00:26:EA:54:34:45:F7:7A:9F:F5:00:0C:AB:4B:00:34:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF47
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0DBCFA41EAF11F188AFE1BBDAE4EC9C.roa
Signing time: Fri 13 Mar 2026 07:39:50 +0000
ROA not before: Fri 13 Mar 2026 07:39:45 +0000
ROA not after: Tue 16 Jun 2026 07:39:45 +0000
asID: 142002
IP address blocks: 154.83.26.0/24 maxlen: 24
154.83.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114503 (0x1bf47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 13 07:39:45 2026 GMT
Not After : Jun 16 07:39:45 2026 GMT
Subject: CN=69b3bf46-43a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ae:90:ff:18:89:3c:9c:b7:0c:75:e8:b7:a8:
96:86:18:3d:68:cf:73:a2:ad:6d:7a:6d:30:e2:31:
4d:50:c7:e1:42:9c:52:3e:d6:b7:77:cf:ae:a9:04:
9a:fa:3e:60:ab:cd:8b:2b:3f:84:56:07:b8:0d:eb:
77:7f:c9:a1:b5:e0:bb:72:68:d2:c1:56:a7:13:c6:
19:9b:2a:20:fa:a2:ec:f4:7f:32:67:37:63:13:35:
f9:6c:aa:95:7d:99:e7:1f:55:4b:f9:aa:4c:1d:f8:
08:e9:8b:55:be:cc:35:ab:02:2a:20:03:97:d8:94:
18:3d:13:d5:5b:ef:ed:bb:61:bc:4e:b1:63:a5:25:
1c:da:b1:ed:df:db:66:d7:27:2d:7b:39:50:f0:dc:
87:65:ef:3c:46:56:9e:92:a4:48:1b:4d:64:ac:75:
0f:81:6e:d5:f7:f7:97:42:48:a1:36:52:d2:fe:06:
f0:58:7a:0e:0c:4c:87:4a:56:5c:b2:06:a1:67:bf:
31:ec:76:dc:ee:c2:c3:19:83:71:01:d8:63:3d:37:
c8:fc:20:43:21:cc:49:9f:33:2d:3d:ec:d2:a0:f6:
84:86:a1:15:3b:a9:37:cb:9d:93:3e:f5:df:ad:14:
f4:54:0f:bc:4f:cd:a9:c8:7a:43:7e:c3:fa:cd:20:
9c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DF:2D:00:26:EA:54:34:45:F7:7A:9F:F5:00:0C:AB:4B:00:34:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0DBCFA41EAF11F188AFE1BBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.26.0/23
Signature Algorithm: sha256WithRSAEncryption
17:c0:65:3e:c1:bb:26:40:62:2b:c2:6e:68:b9:98:c8:e5:b3:
bd:91:dd:17:cd:b1:a6:6c:55:11:72:5d:38:9c:d5:b7:c3:1e:
92:51:aa:bc:b8:ff:7f:99:93:3c:02:c3:6b:9f:29:a5:dc:db:
2b:bd:86:39:b4:ba:e5:4a:dc:88:06:54:93:3c:9b:e4:e6:96:
03:ea:3a:76:a1:9d:e8:c0:46:c6:3b:bc:f6:e3:24:b7:4e:d9:
a3:9c:4f:5c:44:20:14:da:4f:92:47:89:b6:01:c8:4a:dd:77:
c4:0a:33:af:e3:ae:78:02:c4:05:36:e9:60:5b:82:e8:3e:09:
7b:43:f8:2a:1d:e9:b6:51:5f:72:83:c7:13:2e:63:16:4a:33:
a5:78:38:80:73:ea:6c:0e:b2:df:d4:43:17:3b:9c:fa:ce:ed:
1f:0d:29:d4:cc:70:21:f3:f6:33:fc:d2:8a:81:6d:11:d3:76:
bc:cf:d6:0f:05:0b:3a:1c:47:0a:f5:02:dd:99:11:cd:e7:4e:
1b:4a:94:99:6c:47:0a:ab:0c:1f:e2:31:dc:2d:62:85:70:1d:
3a:2b:43:02:20:9e:80:ef:06:ff:b6:1e:3f:a1:22:e1:5a:51:
62:4b:f5:5b:6b:d4:59:94:88:93:2a:46:89:ac:ae:45:7a:2d:
24:96:6e:70
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAb9HMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzEzMDczOTQ1WhcNMjYwNjE2MDczOTQ1WjAYMRYw
FAYDVQQDEw02OWIzYmY0Ni00M2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0q6Q/xiJPJy3DHXot6iWhhg9aM9zoq1tem0w4jFNUMfhQpxSPta3d8+u
qQSa+j5gq82LKz+EVge4Det3f8mhteC7cmjSwVanE8YZmyog+qLs9H8yZzdjEzX5
bKqVfZnnH1VL+apMHfgI6YtVvsw1qwIqIAOX2JQYPRPVW+/tu2G8TrFjpSUc2rHt
39tm1yctezlQ8NyHZe88RlaekqRIG01krHUPgW7V9/eXQkihNlLS/gbwWHoODEyH
SlZcsgahZ78x7Hbc7sLDGYNxAdhjPTfI/CBDIcxJnzMtPezSoPaEhqEVO6k3y52T
PvXfrRT0VA+8T82pyHpDfsP6zSCcqwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMjf
LQAm6lQ0Rfd6n/UADKtLADSSMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMERCQ0ZBNDFFQUYxMUYxODhBRkUxQkJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlMaMA0GCSqGSIb3DQEB
CwUAA4IBAQAXwGU+wbsmQGIrwm5ouZjI5bO9kd0XzbGmbFURcl04nNW3wx6SUaq8
uP9/mZM8AsNrnyml3NsrvYY5tLrlStyIBlSTPJvk5pYD6jp2oZ3owEbGO7z24yS3
TtmjnE9cRCAU2k+SR4m2AchK3XfECjOv4654AsQFNulgW4LoPgl7Q/gqHem2UV9y
g8cTLmMWSjOleDiAc+psDrLf1EMXO5z6zu0fDSnUzHAh8/Yz/NKKgW0R03a8z9YP
BQs6HEcK9QLdmRHN504bSpSZbEcKqwwf4jHcLWKFcB06K0MCIJ6A7wb/th4/oSLh
WlFiS/Vba9RZlIiTKkaJrK5Fei0klm5w
-----END CERTIFICATE-----
Generated at Tue Mar 24 16:15:47 2026 by rpki-client