Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F318B25E161111F1AFB4A4AEDAE4EC9C.roa
File: F318B25E161111F1AFB4A4AEDAE4EC9C.roa (raw, json)
Hash identifier: b3w19x5YdNITyaSKHSMBHtd+qkbYFDD4VbwgZ0kiFII=
Subject key identifier: 76:39:68:CE:B1:F4:3D:7A:8A:F3:C5:81:12:4A:50:03:0A:33:40:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BCC6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F318B25E161111F1AFB4A4AEDAE4EC9C.roa
Signing time: Mon 02 Mar 2026 08:29:37 +0000
ROA not before: Mon 02 Mar 2026 08:29:33 +0000
ROA not after: Fri 02 Mar 2029 08:29:33 +0000
asID: 17561
IP address blocks: 154.198.64.0/24 maxlen: 24
154.198.65.0/24 maxlen: 24
154.198.66.0/24 maxlen: 24
154.198.67.0/24 maxlen: 24
154.198.68.0/24 maxlen: 24
154.198.69.0/24 maxlen: 24
154.198.70.0/24 maxlen: 24
154.198.71.0/24 maxlen: 24
154.198.72.0/24 maxlen: 24
154.198.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113862 (0x1bcc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 2 08:29:33 2026 GMT
Not After : Mar 2 08:29:33 2029 GMT
Subject: CN=69a54a71-afb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e0:7c:3c:50:11:20:84:5f:7c:c2:6a:43:ca:
7e:23:d5:aa:7a:60:b6:8d:b2:04:4f:2d:a7:9e:9a:
09:43:7b:ea:20:55:39:e4:df:c5:78:5a:88:99:15:
22:e6:0e:bd:8a:c3:78:23:5c:3b:48:f2:ed:26:01:
7d:a8:32:23:be:df:f8:28:73:55:22:e1:c6:b1:3b:
8f:42:4d:02:21:14:1c:a9:cb:db:8a:7e:3f:7b:db:
26:b8:70:56:5b:ed:75:69:87:7a:b2:84:a4:ce:21:
ad:85:7b:bf:17:77:bf:fe:8c:13:22:bc:87:25:71:
96:33:d2:63:c6:2e:83:78:34:42:36:de:9f:3d:d9:
ca:ae:6b:95:76:3b:f6:2e:22:f1:27:45:1e:c3:10:
83:81:73:df:50:39:a8:4b:d8:eb:a5:0e:82:db:a9:
0e:c6:28:85:af:23:ff:6f:ab:49:b4:c3:b4:13:03:
04:b1:da:de:a9:a9:52:f6:d9:bc:62:52:37:a5:4d:
80:c6:c8:5a:35:76:cc:75:75:e6:2f:ac:b6:51:d5:
3d:f0:8e:ea:03:aa:e5:7e:f0:44:42:53:73:4f:f7:
3a:5e:9a:3c:03:f2:ad:5b:ad:76:0f:81:9f:33:76:
9d:a7:8f:54:d3:5c:2c:42:eb:c4:ee:bf:cc:29:5f:
c8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:39:68:CE:B1:F4:3D:7A:8A:F3:C5:81:12:4A:50:03:0A:33:40:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F318B25E161111F1AFB4A4AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.64.0-154.198.73.255
Signature Algorithm: sha256WithRSAEncryption
af:c0:62:b3:ca:3f:7c:36:41:91:c9:b1:ad:e5:1b:9c:3c:2f:
9a:ed:01:f1:5d:ce:a1:9e:4b:74:e8:b0:47:ea:bb:21:18:b5:
8a:94:0a:f6:42:27:d6:fe:fc:a0:8b:9a:ca:2e:2c:98:92:05:
de:70:62:06:1b:98:b6:4a:51:13:28:d4:9b:53:84:86:9e:95:
de:5e:aa:03:72:49:d0:d0:47:52:fa:c7:7c:55:21:71:09:69:
5e:46:4a:20:cb:86:ab:3a:20:15:bc:ad:0e:0e:b9:25:98:6d:
6d:46:21:ea:0a:34:1f:dd:16:1a:30:21:21:cc:82:6d:8b:ff:
a2:71:55:fa:a7:e6:ab:21:05:a9:5e:f5:f7:cc:cf:51:97:5e:
67:b9:e8:4a:e7:bd:c2:10:3f:54:ad:f0:93:3e:91:8b:d3:40:
86:79:64:66:59:2b:a7:a4:f6:59:7a:86:fb:22:cd:52:ff:fe:
c8:95:73:5b:f0:54:34:21:c6:70:07:40:d9:e3:8f:e7:46:fd:
21:57:bc:00:a6:d8:54:31:59:29:e2:75:42:7d:3f:d6:9e:89:
cc:a1:aa:4a:ba:9c:78:38:66:1e:de:5a:e5:c1:f2:db:a1:f8:
f7:16:7b:e5:e2:c4:25:73:05:c3:72:30:b9:55:49:c8:f4:10:
71:23:e5:d4
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAbzGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzAyMDgyOTMzWhcNMjkwMzAyMDgyOTMzWjAYMRYw
FAYDVQQDEw02OWE1NGE3MS1hZmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy+B8PFARIIRffMJqQ8p+I9WqemC2jbIETy2nnpoJQ3vqIFU55N/FeFqI
mRUi5g69isN4I1w7SPLtJgF9qDIjvt/4KHNVIuHGsTuPQk0CIRQcqcvbin4/e9sm
uHBWW+11aYd6soSkziGthXu/F3e//owTIryHJXGWM9Jjxi6DeDRCNt6fPdnKrmuV
djv2LiLxJ0UewxCDgXPfUDmoS9jrpQ6C26kOxiiFryP/b6tJtMO0EwMEsdreqalS
9tm8YlI3pU2AxshaNXbMdXXmL6y2UdU98I7qA6rlfvBEQlNzT/c6Xpo8A/KtW612
D4GfM3adp49U01wsQuvE7r/MKV/IMwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFHY5
aM6x9D16ivPFgRJKUAMKM0BgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GMzE4QjI1RTE2MTExMUYxQUZCNEE0QUVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAaaxkADBAGaxkgwDQYJ
KoZIhvcNAQELBQADggEBAK/AYrPKP3w2QZHJsa3lG5w8L5rtAfFdzqGeS3TosEfq
uyEYtYqUCvZCJ9b+/KCLmsouLJiSBd5wYgYbmLZKURMo1JtThIaeld5eqgNySdDQ
R1L6x3xVIXEJaV5GSiDLhqs6IBW8rQ4OuSWYbW1GIeoKNB/dFhowISHMgm2L/6Jx
Vfqn5qshBale9ffMz1GXXme56ErnvcIQP1St8JM+kYvTQIZ5ZGZZK6ek9ll6hvsi
zVL//siVc1vwVDQhxnAHQNnjj+dG/SFXvACm2FQxWSnidUJ9P9aeicyhqkq6nHg4
Zh7eWuXB8tuh+PcWe+XixCVzBcNyMLlVScj0EHEj5dQ=
-----END CERTIFICATE-----
Generated at Tue Mar 24 16:15:56 2026 by rpki-client