Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA55BEEA4A8811F1903DB011CF1D38B0.roa
File: EA55BEEA4A8811F1903DB011CF1D38B0.roa (raw, json)
Hash identifier: 9sf89A1hX2xcnbTRyDuuSJeTFcGX57kI4c209qF96/0=
Subject key identifier: 40:81:AD:33:19:9F:CC:1C:51:36:27:82:98:A2:A0:96:D4:87:6A:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CA38
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA55BEEA4A8811F1903DB011CF1D38B0.roa
Signing time: Fri 08 May 2026 02:52:13 +0000
ROA not before: Fri 08 May 2026 02:52:09 +0000
ROA not after: Mon 07 May 2029 02:52:09 +0000
asID: 17561
IP address blocks: 154.208.252.0/24 maxlen: 24
154.208.253.0/24 maxlen: 24
154.208.254.0/24 maxlen: 24
154.208.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117304 (0x1ca38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 02:52:09 2026 GMT
Not After : May 7 02:52:09 2029 GMT
Subject: CN=69fd4fdd-83f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3c:0b:4b:c2:15:26:a9:a1:c5:57:b6:32:e5:
b7:3a:84:e1:56:a2:dd:14:39:1c:0d:91:15:db:ec:
28:a4:93:9a:35:5b:d7:24:29:6e:74:ff:3a:5e:07:
11:20:89:6a:a9:ce:5c:7f:36:0a:59:dc:3e:0c:6c:
d1:cb:15:a1:02:26:31:e7:66:22:c9:ab:28:97:e8:
a8:1d:03:06:0e:c1:67:83:7e:2f:95:96:98:ef:34:
9f:5d:e4:b2:d1:f8:dc:2b:9a:a8:be:42:00:52:3d:
f0:9f:89:ee:a5:4b:dc:26:2b:ff:c2:cb:0c:a6:75:
e8:71:bb:ab:22:58:5a:13:3c:0a:a6:58:d9:ac:8b:
37:91:ba:7d:a6:ab:c0:9d:bb:db:34:1a:a8:0f:ad:
d1:36:71:14:81:33:32:c2:a9:f4:96:8d:7e:b1:cc:
b3:dd:00:3c:9f:44:15:66:d8:3a:10:91:d8:a1:0f:
1f:ac:54:b9:92:b9:ff:d3:96:c0:e2:2c:f9:5a:43:
49:7d:68:3b:43:0b:73:3f:1e:87:93:42:ea:34:01:
c0:2a:a1:91:2b:69:39:50:a4:bc:fa:7b:93:ed:a4:
f9:33:a5:b3:91:19:a7:97:af:52:4e:e7:d4:bd:45:
d1:19:7d:34:38:6c:a9:18:64:e6:65:e5:3e:65:70:
6f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:81:AD:33:19:9F:CC:1C:51:36:27:82:98:A2:A0:96:D4:87:6A:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA55BEEA4A8811F1903DB011CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.252.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:c0:e8:0e:07:c0:ca:96:c8:88:2f:dc:88:76:7f:bd:48:02:
6f:31:3c:d0:05:47:b6:cd:32:ec:21:92:e0:d2:ae:a0:44:dc:
85:ae:16:69:36:c1:9c:d7:49:38:59:fe:c2:d0:6d:a0:a2:5d:
e3:df:62:3b:b6:42:eb:7d:0d:7f:ac:c8:6e:3b:3c:3f:eb:7a:
fd:5a:c0:1c:c2:60:8e:a7:07:29:4d:9f:14:d4:0a:cf:ea:1b:
b6:1a:9a:23:a6:31:f8:16:ad:7c:a0:84:61:98:b9:47:cf:98:
f2:ba:5b:60:06:0f:9b:ab:62:bb:28:26:21:bd:e2:fa:9c:c4:
8d:d5:7c:a9:35:ad:50:30:80:d4:1e:13:59:40:d0:ed:7a:a9:
9d:87:a9:e1:af:5a:8d:2c:2a:e5:61:c2:58:ad:bd:66:52:35:
47:e9:11:06:76:b0:f3:4b:76:a7:25:11:94:71:93:4d:90:e1:
96:72:68:51:05:41:de:02:86:35:66:ed:a0:ff:0a:4b:c1:ae:
7d:8c:bc:34:5d:e2:7d:b7:95:66:9a:88:4e:aa:7c:66:4e:cc:
e1:d9:91:1b:bc:da:0b:fd:62:15:55:58:de:b7:53:29:65:3d:
68:87:ba:1b:3b:16:13:eb:a9:be:4c:ff:16:fc:07:8c:2d:0d:
06:40:aa:a6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAco4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTA4MDI1MjA5WhcNMjkwNTA3MDI1MjA5WjAYMRYw
FAYDVQQDEw02OWZkNGZkZC04M2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxjwLS8IVJqmhxVe2MuW3OoThVqLdFDkcDZEV2+wopJOaNVvXJCludP86
XgcRIIlqqc5cfzYKWdw+DGzRyxWhAiYx52Yiyasol+ioHQMGDsFng34vlZaY7zSf
XeSy0fjcK5qovkIAUj3wn4nupUvcJiv/wssMpnXocburIlhaEzwKpljZrIs3kbp9
pqvAnbvbNBqoD63RNnEUgTMywqn0lo1+scyz3QA8n0QVZtg6EJHYoQ8frFS5krn/
05bA4iz5WkNJfWg7QwtzPx6Hk0LqNAHAKqGRK2k5UKS8+nuT7aT5M6WzkRmnl69S
TufUvUXRGX00OGypGGTmZeU+ZXBvaQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFECB
rTMZn8wcUTYngpiioJbUh2p8MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FQTU1QkVFQTRBODgxMUYxOTAzREIwMTFDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmtD8MA0GCSqGSIb3DQEB
CwUAA4IBAQCMwOgOB8DKlsiIL9yIdn+9SAJvMTzQBUe2zTLsIZLg0q6gRNyFrhZp
NsGc10k4Wf7C0G2gol3j32I7tkLrfQ1/rMhuOzw/63r9WsAcwmCOpwcpTZ8U1ArP
6hu2GpojpjH4Fq18oIRhmLlHz5jyultgBg+bq2K7KCYhveL6nMSN1XypNa1QMIDU
HhNZQNDteqmdh6nhr1qNLCrlYcJYrb1mUjVH6REGdrDzS3anJRGUcZNNkOGWcmhR
BUHeAoY1Zu2g/wpLwa59jLw0XeJ9t5VmmohOqnxmTszh2ZEbvNoL/WIVVVjet1Mp
ZT1oh7obOxYT66m+TP8W/AeMLQ0GQKqm
-----END CERTIFICATE-----
Generated at Sat May 9 11:02:34 2026 by rpki-client