Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4E1A72A492211F18D186419CF1D38B0.roa
File: D4E1A72A492211F18D186419CF1D38B0.roa (raw, json)
Hash identifier: yD9Wccx/YF/n0jSw3105nt4rPQJ35s00TvA5VxiSMNQ=
Subject key identifier: EF:2E:F6:FD:57:91:94:35:78:C4:3A:36:2B:11:44:29:B9:7C:0B:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C985
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4E1A72A492211F18D186419CF1D38B0.roa
Signing time: Wed 06 May 2026 08:08:58 +0000
ROA not before: Wed 06 May 2026 08:08:53 +0000
ROA not after: Mon 17 May 2027 08:08:53 +0000
asID: 18229
IP address blocks: 154.201.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117125 (0x1c985)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 08:08:53 2026 GMT
Not After : May 17 08:08:53 2027 GMT
Subject: CN=69faf71a-0c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:09:5a:a0:40:2a:41:c4:40:ab:cb:ea:c1:4b:
8a:ff:a6:73:67:67:84:fc:6d:ca:12:72:73:b4:44:
59:76:c9:b2:b5:92:17:f8:01:9e:fa:dd:e1:5a:e7:
f6:3a:63:a7:6c:5e:0b:39:7f:d9:bb:a6:eb:b6:c8:
0b:ef:de:ca:61:57:e9:c7:4e:8c:6a:86:5e:e6:ee:
4b:a7:4a:4a:1e:ef:96:2e:f9:56:28:85:fd:5e:9f:
47:a6:dc:b9:de:38:5e:75:d3:bc:69:bb:69:c4:d8:
35:c9:32:f9:6d:e8:59:71:e9:83:e7:ed:ff:5f:d2:
2d:65:a8:b1:d0:3d:50:f0:f4:06:51:59:86:de:fb:
be:01:e2:7f:5a:62:a8:50:9f:1c:f7:f2:47:64:7c:
ad:f7:79:94:89:1a:63:e0:75:74:9d:bf:61:9c:14:
43:91:48:6a:a8:ec:92:6d:a6:81:40:c6:b7:f4:ce:
9b:ad:12:27:15:c8:3f:e0:12:1b:34:e9:5f:80:fa:
a5:e6:d8:49:9f:15:4f:64:76:74:34:ce:22:82:40:
0c:a7:db:f3:d5:3b:ff:1b:39:e0:fd:97:65:19:70:
b7:83:c7:61:84:1f:ad:8c:f5:78:dc:20:2e:c1:ae:
de:bf:35:7c:11:4c:fd:38:91:0c:61:cc:c0:d4:4f:
5d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2E:F6:FD:57:91:94:35:78:C4:3A:36:2B:11:44:29:B9:7C:0B:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4E1A72A492211F18D186419CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.126.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:95:0b:55:2e:d6:47:2e:bc:ef:80:bf:5b:ba:eb:3d:b6:e7:
2a:2f:fd:a3:b5:b4:eb:e5:48:e0:ee:6e:74:e7:0d:2c:40:29:
40:56:eb:3f:e0:b7:2f:93:2c:6a:95:a4:23:e5:b0:91:77:5f:
77:fa:e1:77:a7:5e:61:7f:1d:5d:94:b6:9e:19:d5:c1:58:1d:
76:c6:05:e2:41:6e:b7:9c:a6:cf:da:2c:15:bc:b7:8f:0a:45:
28:49:e1:a7:83:50:8c:c6:2d:c1:b8:10:71:51:d7:47:6f:99:
2d:75:fe:5f:ce:c8:8f:f7:1b:3d:5b:d9:ec:9d:f9:59:71:d8:
fe:0e:83:c6:12:8a:56:28:25:0f:c4:84:f0:fa:bc:ad:7b:3a:
d9:ab:3e:68:98:5f:02:e1:e2:94:62:2e:93:d8:9c:03:2c:db:
e6:62:89:f6:59:e0:3c:27:bf:47:76:99:6a:69:97:7d:a2:02:
f3:a3:bc:77:dd:17:49:27:10:01:11:0d:20:b2:2d:07:b9:9e:
bf:af:5e:6d:06:6a:9d:8c:90:af:45:7e:4c:d6:88:31:69:fd:
6f:00:12:de:34:f0:24:c7:e6:d4:a4:4b:90:f5:02:07:bd:bd:
b9:69:bd:bc:ec:ff:be:3b:b1:3a:96:69:8c:a5:63:a6:95:89:
40:66:c7:18
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcmFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTA2MDgwODUzWhcNMjcwNTE3MDgwODUzWjAYMRYw
FAYDVQQDEw02OWZhZjcxYS0wYzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzQlaoEAqQcRAq8vqwUuK/6ZzZ2eE/G3KEnJztERZdsmytZIX+AGe+t3h
Wuf2OmOnbF4LOX/Zu6brtsgL797KYVfpx06MaoZe5u5Lp0pKHu+WLvlWKIX9Xp9H
pty53jheddO8abtpxNg1yTL5behZcemD5+3/X9ItZaix0D1Q8PQGUVmG3vu+AeJ/
WmKoUJ8c9/JHZHyt93mUiRpj4HV0nb9hnBRDkUhqqOySbaaBQMa39M6brRInFcg/
4BIbNOlfgPql5thJnxVPZHZ0NM4igkAMp9vz1Tv/Gzng/ZdlGXC3g8dhhB+tjPV4
3CAuwa7evzV8EUz9OJEMYczA1E9dnQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFO8u
9v1XkZQ1eMQ6NisRRCm5fAsnMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ENEUxQTcyQTQ5MjIxMUYxOEQxODY0MTlDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsl+MA0GCSqGSIb3DQEB
CwUAA4IBAQC8lQtVLtZHLrzvgL9buus9tucqL/2jtbTr5Ujg7m505w0sQClAVus/
4LcvkyxqlaQj5bCRd193+uF3p15hfx1dlLaeGdXBWB12xgXiQW63nKbP2iwVvLeP
CkUoSeGng1CMxi3BuBBxUddHb5ktdf5fzsiP9xs9W9nsnflZcdj+DoPGEopWKCUP
xITw+rytezrZqz5omF8C4eKUYi6T2JwDLNvmYon2WeA8J79HdplqaZd9ogLzo7x3
3RdJJxABEQ0gsi0HuZ6/r15tBmqdjJCvRX5M1ogxaf1vABLeNPAkx+bUpEuQ9QIH
vb25ab287P++O7E6lmmMpWOmlYlAZscY
-----END CERTIFICATE-----
Generated at Sat May 9 11:03:40 2026 by rpki-client