Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4119F64187211F1ACAA33CEDAE4EC9C.roa
File: F4119F64187211F1ACAA33CEDAE4EC9C.roa (raw, json)
Hash identifier: fIxU19/P/06iD2INpxu0RrL/A1e7UhQLPwIwaW0jb78=
Subject key identifier: 67:BA:52:35:71:E9:E2:DC:D6:8F:B9:E9:31:1E:8A:B0:3C:95:78:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BDBD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4119F64187211F1ACAA33CEDAE4EC9C.roa
Signing time: Thu 05 Mar 2026 09:09:02 +0000
ROA not before: Thu 05 Mar 2026 09:08:59 +0000
ROA not after: Thu 09 Apr 2026 09:08:59 +0000
asID: 54801
IP address blocks: 154.86.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114109 (0x1bdbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 5 09:08:59 2026 GMT
Not After : Apr 9 09:08:59 2026 GMT
Subject: CN=69a9482e-aa01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:79:4b:c3:b2:37:5f:86:3c:7b:5e:07:65:bf:
a1:80:11:e2:61:9b:7e:51:cb:6f:70:4d:76:10:fd:
2f:53:c5:09:bd:3c:12:91:e9:eb:c4:7a:e5:b5:b9:
73:d0:67:f0:8b:f9:dd:ca:fe:15:b0:6e:44:f5:db:
57:6b:cf:09:7f:78:be:6b:e5:77:98:14:42:1e:bf:
a6:8f:4e:fb:e3:8c:18:17:56:30:87:cc:91:b4:84:
a6:73:67:b5:10:af:6e:4e:85:a4:1a:b9:62:d3:21:
e4:07:d0:e4:d3:fa:60:ac:ef:c4:0b:e0:8f:89:2d:
de:bb:9e:9b:97:c0:92:68:d2:dc:ae:b4:21:de:58:
0d:1b:7e:31:e9:6a:de:88:13:09:d5:12:5b:e9:62:
50:54:be:83:41:3d:46:78:f3:ba:29:f4:76:5a:bc:
c0:c9:83:04:01:f4:4d:63:7f:cf:22:e6:15:84:29:
16:74:f6:8b:c9:4d:0e:f9:e7:de:e8:1b:a0:31:05:
3e:20:bf:72:e2:cf:76:ec:93:29:1a:07:d2:48:aa:
76:e1:84:a2:a1:ff:5c:ed:ca:47:c7:8b:a0:ff:10:
a0:ec:2b:2a:74:bd:3a:b5:1f:c3:37:0e:63:74:62:
4d:8d:1b:2e:20:fc:08:1c:1a:c2:f6:06:2f:2a:4c:
50:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BA:52:35:71:E9:E2:DC:D6:8F:B9:E9:31:1E:8A:B0:3C:95:78:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4119F64187211F1ACAA33CEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.0.0/24
Signature Algorithm: sha256WithRSAEncryption
35:65:b9:d2:f3:1e:4e:8e:92:ff:a5:f5:da:18:68:ad:d0:e3:
9b:7f:9c:b4:63:f1:4a:38:d1:9a:7c:48:64:2c:8d:c5:2e:64:
86:ad:e1:3b:c5:e7:c1:e4:f3:b8:8b:d3:e1:95:94:bb:07:47:
c8:46:8a:bc:7a:93:03:de:95:79:9c:55:2f:e1:c9:07:48:c8:
af:66:c0:2c:a1:3c:36:94:d7:f0:b9:da:d4:54:e6:ca:c9:39:
e8:1c:57:c0:37:3a:a4:84:66:cd:bb:d5:36:75:df:05:b0:e6:
8d:53:e0:e7:d9:1a:69:66:ff:10:a9:3c:5d:23:e1:a5:de:e6:
03:70:72:50:25:a4:d3:a4:3d:2c:33:4a:18:ed:31:04:b0:06:
a0:e1:8f:8a:98:99:b3:a3:b3:2e:de:83:db:fe:fb:83:b5:cc:
5b:eb:16:56:3e:9a:eb:89:76:b4:ef:d3:78:1b:80:29:d1:25:
ee:32:3e:fd:4b:18:72:14:ef:83:0b:6c:89:e0:6c:63:ff:4b:
cb:a1:46:82:07:7c:7b:b0:d3:7f:24:85:b7:28:6f:ce:f5:16:
af:62:76:50:2d:f7:b1:50:dc:89:21:f9:f2:b2:bc:db:75:74:
47:70:99:b8:63:b1:73:b5:ac:76:96:49:e6:0f:a9:6e:84:b9:
3d:7b:e8:df
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAb29MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzA1MDkwODU5WhcNMjYwNDA5MDkwODU5WjAYMRYw
FAYDVQQDEw02OWE5NDgyZS1hYTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq3lLw7I3X4Y8e14HZb+hgBHiYZt+UctvcE12EP0vU8UJvTwSkenrxHrl
tblz0Gfwi/ndyv4VsG5E9dtXa88Jf3i+a+V3mBRCHr+mj07744wYF1Ywh8yRtISm
c2e1EK9uToWkGrli0yHkB9Dk0/pgrO/EC+CPiS3eu56bl8CSaNLcrrQh3lgNG34x
6WreiBMJ1RJb6WJQVL6DQT1GePO6KfR2WrzAyYMEAfRNY3/PIuYVhCkWdPaLyU0O
+efe6BugMQU+IL9y4s927JMpGgfSSKp24YSiof9c7cpHx4ug/xCg7CsqdL06tR/D
Nw5jdGJNjRsuIPwIHBrC9gYvKkxQEwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGe6
UjVx6eLc1o+56TEeirA8lXjOMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GNDExOUY2NDE4NzIxMUYxQUNBQTMzQ0VEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlYAMA0GCSqGSIb3DQEB
CwUAA4IBAQA1ZbnS8x5OjpL/pfXaGGit0OObf5y0Y/FKONGafEhkLI3FLmSGreE7
xefB5PO4i9PhlZS7B0fIRoq8epMD3pV5nFUv4ckHSMivZsAsoTw2lNfwudrUVObK
yTnoHFfANzqkhGbNu9U2dd8FsOaNU+Dn2RppZv8QqTxdI+Gl3uYDcHJQJaTTpD0s
M0oY7TEEsAag4Y+KmJmzo7Mu3oPb/vuDtcxb6xZWPprriXa079N4G4Ap0SXuMj79
SxhyFO+DC2yJ4Gxj/0vLoUaCB3x7sNN/JIW3KG/O9RavYnZQLfexUNyJIfnysrzb
dXRHcJm4Y7Fztax2lknmD6luhLk9e+jf
-----END CERTIFICATE-----
Generated at Tue Mar 24 16:20:36 2026 by rpki-client