Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E09BFA7C448911F190142C1ECF1D38B0.roa
File: E09BFA7C448911F190142C1ECF1D38B0.roa (raw, json)
Hash identifier: Dfp8UWgc+W/7CBPEWd43UFIiX5Y1o2viH2IX/goP7AQ=
Subject key identifier: C5:CD:33:75:FD:78:64:18:D7:30:39:61:8C:92:0C:5A:52:80:AB:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C825
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E09BFA7C448911F190142C1ECF1D38B0.roa
Signing time: Thu 30 Apr 2026 11:44:00 +0000
ROA not before: Thu 30 Apr 2026 11:43:55 +0000
ROA not after: Fri 05 Jun 2026 11:43:55 +0000
asID: 44559
IP address blocks: 154.209.144.0/24 maxlen: 24
154.209.145.0/24 maxlen: 24
154.209.152.0/24 maxlen: 24
154.209.153.0/24 maxlen: 24
154.209.154.0/24 maxlen: 24
154.209.155.0/24 maxlen: 24
154.209.157.0/24 maxlen: 24
154.209.158.0/24 maxlen: 24
154.209.195.0/24 maxlen: 24
154.209.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116773 (0x1c825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 11:43:55 2026 GMT
Not After : Jun 5 11:43:55 2026 GMT
Subject: CN=69f34080-aed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8d:c6:bd:17:a2:ac:07:23:3c:42:de:8b:d7:
9c:5c:1c:d0:84:11:4c:a9:0d:bf:78:a0:47:ad:be:
08:fc:57:04:41:d1:3d:b7:d5:2e:2c:34:c6:19:15:
c5:d1:85:f6:45:c4:9c:ee:11:6d:3f:80:e0:00:b9:
f5:df:86:86:d7:2c:6a:f0:2a:fd:65:4f:2b:2a:5c:
b1:32:33:4f:74:f6:e2:c9:cb:24:bb:d8:b1:1c:a8:
fb:cc:45:3b:71:b7:2b:8c:96:f4:ed:12:6b:d1:c9:
4c:0d:88:89:54:b9:22:df:18:1a:fd:45:67:71:4c:
dc:66:48:a7:4d:a2:36:bd:37:35:b6:69:42:be:4e:
2d:93:fb:9d:23:79:20:75:36:2d:4a:c5:de:99:cb:
ee:14:43:e2:fa:d2:62:38:20:b2:30:79:b8:58:3a:
b6:20:e9:87:02:ec:60:25:7a:8d:73:8b:85:fe:1d:
d7:3c:21:3a:9e:fa:72:c0:70:a5:5b:2b:23:ce:f2:
71:7d:c9:d3:79:ca:bf:71:c7:62:26:dd:e9:26:14:
ab:2f:4d:22:25:3e:c2:c1:fd:15:ef:1e:9f:6d:07:
7e:78:43:21:d8:da:1e:b6:f4:76:0e:67:92:7d:92:
62:35:35:3f:6c:7d:e1:21:54:8b:d4:d9:9d:cf:85:
03:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CD:33:75:FD:78:64:18:D7:30:39:61:8C:92:0C:5A:52:80:AB:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E09BFA7C448911F190142C1ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.144.0/23
154.209.152.0/22
154.209.157.0-154.209.158.255
154.209.195.0-154.209.196.255
Signature Algorithm: sha256WithRSAEncryption
ad:a3:74:e3:d4:c0:b0:db:57:e0:9d:45:6d:d0:b1:ec:17:a9:
06:e5:f1:0a:c4:bb:97:5a:85:93:69:a5:b0:39:17:b1:2a:1d:
a1:58:43:9d:98:90:41:5b:a7:1e:e4:f0:68:ff:6f:ef:eb:5d:
04:af:04:84:ac:7b:0d:f5:25:90:c9:b3:c3:4f:3e:33:0b:6d:
0e:0b:17:03:e7:9e:7d:18:8e:76:ec:97:73:74:4c:c4:2a:31:
77:f0:29:6a:8e:fd:f1:11:3d:dd:a0:0a:11:f8:e6:d7:29:9d:
5c:e2:2f:14:1a:38:20:94:60:6a:3c:c0:79:2f:98:f0:73:6e:
35:b0:7a:db:96:48:2e:d3:0b:b9:73:48:77:4c:27:a3:c4:18:
cf:e6:4c:cc:97:24:c1:64:04:37:41:69:89:f7:34:e2:1c:3e:
3a:69:b9:56:ae:9a:a2:9e:c6:59:78:c5:fa:13:da:df:b3:58:
50:91:a6:9e:41:4b:04:0d:cd:85:8b:0f:96:b1:c6:7b:2d:4e:
3b:86:bf:81:3e:99:79:53:d0:1d:d5:c7:01:47:97:11:91:35:
a4:f3:ca:ba:88:05:0c:ba:de:4f:eb:81:32:85:8f:ec:ed:6d:
cd:c5:a4:d3:bd:6d:05:66:fd:21:cc:cf:04:19:c7:9d:3f:62:
a5:68:16:a2
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgIDAcglMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDMwMTE0MzU1WhcNMjYwNjA1MTE0MzU1WjAYMRYw
FAYDVQQDEw02OWYzNDA4MC1hZWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2I3GvReirAcjPELei9ecXBzQhBFMqQ2/eKBHrb4I/FcEQdE9t9UuLDTG
GRXF0YX2RcSc7hFtP4DgALn134aG1yxq8Cr9ZU8rKlyxMjNPdPbiycsku9ixHKj7
zEU7cbcrjJb07RJr0clMDYiJVLki3xga/UVncUzcZkinTaI2vTc1tmlCvk4tk/ud
I3kgdTYtSsXemcvuFEPi+tJiOCCyMHm4WDq2IOmHAuxgJXqNc4uF/h3XPCE6nvpy
wHClWysjzvJxfcnTecq/ccdiJt3pJhSrL00iJT7Cwf0V7x6fbQd+eEMh2NoetvR2
DmeSfZJiNTU/bH3hIVSL1Nmdz4UDWwIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFMXN
M3X9eGQY1zA5YYySDFpSgKu8MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FMDlCRkE3QzQ0ODkxMUYxOTAxNDJDMUVDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQBmtGQAwQCmtGYMAwDBACa
0Z0DBACa0Z4wDAMEAJrRwwMEAJrRxDANBgkqhkiG9w0BAQsFAAOCAQEAraN049TA
sNtX4J1FbdCx7BepBuXxCsS7l1qFk2mlsDkXsSodoVhDnZiQQVunHuTwaP9v7+td
BK8EhKx7DfUlkMmzw08+MwttDgsXA+eefRiOduyXc3RMxCoxd/Apao798RE93aAK
Efjm1ymdXOIvFBo4IJRgajzAeS+Y8HNuNbB625ZILtMLuXNId0wno8QYz+ZMzJck
wWQEN0Fpifc04hw+Omm5Vq6aop7GWXjF+hPa37NYUJGmnkFLBA3NhYsPlrHGey1O
O4a/gT6ZeVPQHdXHAUeXEZE1pPPKuogFDLreT+uBMoWP7O1tzcWk071tBWb9IczP
BBnHnT9ipWgWog==
-----END CERTIFICATE-----
Generated at Sat May 9 11:01:59 2026 by rpki-client