Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E92AC680430511F1B0C3A6E6CE1D38B0.roa
File: E92AC680430511F1B0C3A6E6CE1D38B0.roa (raw, json)
Hash identifier: gnSe8nJ0r2t6isz+eM37wYs8NHtDXIZ1zcIREqDnwrs=
Subject key identifier: 7E:6C:0E:30:79:7C:77:B0:37:14:BE:8C:F6:09:AB:12:5C:52:91:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C7B7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E92AC680430511F1B0C3A6E6CE1D38B0.roa
Signing time: Tue 28 Apr 2026 13:26:49 +0000
ROA not before: Tue 28 Apr 2026 13:26:45 +0000
ROA not after: Wed 03 Jun 2026 13:26:45 +0000
asID: 198652
IP address blocks: 154.83.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116663 (0x1c7b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 13:26:45 2026 GMT
Not After : Jun 3 13:26:45 2026 GMT
Subject: CN=69f0b599-c72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:91:88:f7:8c:ca:6f:db:b7:14:aa:18:02:9d:
78:98:9a:e1:b9:6b:fe:83:da:b8:08:f8:fa:96:3f:
c9:97:ae:6a:9b:7e:e4:f4:35:fd:ec:42:f5:df:3e:
c5:de:57:50:35:a7:2c:db:3b:42:1a:12:d2:3f:eb:
9b:93:f8:13:55:98:d1:69:70:a2:58:ca:06:31:b0:
a3:f7:5d:dd:ca:cf:f5:79:3d:33:3b:8d:83:32:02:
7f:7f:6a:c5:78:d6:18:4f:71:28:78:70:c1:85:a6:
12:09:8a:1d:ba:17:4d:5a:e3:eb:9c:2d:e0:17:f7:
45:fb:e2:6d:f4:21:9d:28:65:68:e5:2e:01:c5:b0:
e8:80:aa:49:42:31:5f:0e:06:f5:6b:ee:41:91:9c:
22:79:6c:11:4e:cd:f7:4d:65:c7:a2:72:71:ae:5d:
0d:8f:b9:1d:aa:b5:d6:1e:ca:ea:29:83:d6:57:2a:
c6:20:bd:36:22:0c:17:64:96:b8:71:ca:3d:f0:77:
3a:1f:3b:8e:fb:ce:75:66:45:88:9f:86:3b:c9:41:
e8:f1:51:fc:de:40:51:c0:86:fd:27:93:12:39:6c:
d3:c5:47:8c:c3:7b:2e:43:1c:05:2b:94:f7:8b:18:
db:48:49:cc:62:64:0f:d7:d2:1e:43:bf:72:7b:85:
3e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6C:0E:30:79:7C:77:B0:37:14:BE:8C:F6:09:AB:12:5C:52:91:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E92AC680430511F1B0C3A6E6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.210.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:38:4a:ad:2e:14:c2:a6:89:7a:25:65:dd:3b:b6:53:0c:ef:
a2:4a:28:c3:f5:65:a7:28:ad:90:ac:b0:2c:c4:d5:1b:4d:7d:
2d:c2:2f:e8:b8:d3:5d:e2:a2:e0:ea:f5:ae:35:ef:56:c1:d0:
f0:52:78:1e:77:be:34:e1:64:8d:f8:97:bb:58:4f:b4:76:47:
94:b7:be:c7:cd:7c:bd:ca:d1:81:22:b8:65:50:f2:93:dc:10:
83:3e:42:55:28:11:a3:7d:c0:98:b8:2b:02:6e:93:4f:37:62:
c8:cc:b9:27:4c:9b:52:71:7d:26:e4:9d:b4:60:9f:d5:c8:58:
3b:5f:83:27:4b:d8:21:0a:0c:1f:70:82:1c:c0:22:58:b3:1f:
47:83:40:c1:82:6d:4c:50:4d:56:07:60:71:ac:96:ab:89:17:
ed:db:ae:59:85:9b:86:c5:54:b4:6c:e2:37:e5:84:fa:80:85:
c4:0b:45:bb:a7:bc:0a:3b:55:b6:33:42:7e:48:48:93:54:51:
b2:09:74:a2:50:09:22:13:95:2f:b0:aa:ba:88:52:46:c1:58:
d5:66:0e:fe:22:88:ab:b3:3b:40:e7:2f:9f:bd:ab:42:c1:6c:
0f:4c:cb:71:0a:ab:cb:83:d4:4c:13:69:20:8e:03:52:f9:bf:
2b:5c:65:04
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAce3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDI4MTMyNjQ1WhcNMjYwNjAzMTMyNjQ1WjAYMRYw
FAYDVQQDEw02OWYwYjU5OS1jNzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyZGI94zKb9u3FKoYAp14mJrhuWv+g9q4CPj6lj/Jl65qm37k9DX97EL1
3z7F3ldQNacs2ztCGhLSP+ubk/gTVZjRaXCiWMoGMbCj913dys/1eT0zO42DMgJ/
f2rFeNYYT3EoeHDBhaYSCYoduhdNWuPrnC3gF/dF++Jt9CGdKGVo5S4BxbDogKpJ
QjFfDgb1a+5BkZwieWwRTs33TWXHonJxrl0Nj7kdqrXWHsrqKYPWVyrGIL02IgwX
ZJa4cco98Hc6HzuO+851ZkWIn4Y7yUHo8VH83kBRwIb9J5MSOWzTxUeMw3suQxwF
K5T3ixjbSEnMYmQP19IeQ79ye4U+7QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFH5s
DjB5fHewNxS+jPYJqxJcUpHyMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FOTJBQzY4MDQzMDUxMUYxQjBDM0E2RTZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlPSMA0GCSqGSIb3DQEB
CwUAA4IBAQAtOEqtLhTCpol6JWXdO7ZTDO+iSijD9WWnKK2QrLAsxNUbTX0twi/o
uNNd4qLg6vWuNe9WwdDwUnged7404WSN+Je7WE+0dkeUt77HzXy9ytGBIrhlUPKT
3BCDPkJVKBGjfcCYuCsCbpNPN2LIzLknTJtScX0m5J20YJ/VyFg7X4MnS9ghCgwf
cIIcwCJYsx9Hg0DBgm1MUE1WB2BxrJariRft265ZhZuGxVS0bOI35YT6gIXEC0W7
p7wKO1W2M0J+SEiTVFGyCXSiUAkiE5UvsKq6iFJGwVjVZg7+IoirsztA5y+fvatC
wWwPTMtxCqvLg9RME2kgjgNS+b8rXGUE
-----END CERTIFICATE-----
Generated at Sat May 9 11:03:00 2026 by rpki-client