Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB0B02484ED111F1A1ECE7A5CE1D38B0.roa
File: FB0B02484ED111F1A1ECE7A5CE1D38B0.roa (raw, json)
Hash identifier: 9ueGLznEnPtr3IDRlKxFTxv+OnFuEFeNMFjnNkH9tv8=
Subject key identifier: E2:F8:AA:0C:6F:23:CC:25:46:C3:78:98:80:86:0F:89:67:B4:31:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CB6B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB0B02484ED111F1A1ECE7A5CE1D38B0.roa
Signing time: Wed 13 May 2026 13:45:20 +0000
ROA not before: Wed 13 May 2026 13:45:15 +0000
ROA not after: Tue 16 Jun 2026 13:45:15 +0000
asID: 22773
IP address blocks: 154.194.3.0/24 maxlen: 24
154.202.24.0/24 maxlen: 24
154.202.25.0/24 maxlen: 24
154.202.26.0/24 maxlen: 24
154.202.27.0/24 maxlen: 24
154.202.28.0/24 maxlen: 24
154.213.218.0/24 maxlen: 24
154.213.219.0/24 maxlen: 24
154.213.221.0/24 maxlen: 24
154.213.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 May 2026 08:26:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117611 (0x1cb6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 13 13:45:15 2026 GMT
Not After : Jun 16 13:45:15 2026 GMT
Subject: CN=6a048070-9535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d5:4e:7e:f6:f9:d8:a3:ef:f8:71:82:78:1d:
3d:71:2d:6d:84:86:96:2e:80:2e:1c:fb:d0:3d:9b:
29:fd:e1:59:a7:92:05:36:7a:04:7f:99:9c:39:78:
98:d9:2c:07:c2:99:dc:31:3b:75:d6:6d:d2:96:16:
e4:ab:ae:8b:6b:02:48:3f:4f:c4:10:4d:7b:6d:83:
23:d9:ca:09:67:b9:1c:5e:ec:44:2a:f4:2a:55:20:
93:e6:2d:0e:ca:f7:07:df:ac:eb:fd:b8:4d:bc:55:
b1:37:42:e4:5c:30:bd:81:39:d8:2d:77:2f:c3:d2:
cd:f1:8e:62:e1:57:0c:f3:e0:a3:6f:a6:f7:3e:2b:
e1:d8:17:9a:49:5f:b6:91:d8:c9:b4:29:b9:0e:b8:
35:50:77:7a:5a:9c:67:41:70:a8:0b:0e:f0:31:07:
1f:c9:3d:d3:9d:fc:28:ff:a3:d9:f7:b5:50:b8:b5:
6a:32:f3:6b:7e:d9:08:cd:4c:47:5e:1b:87:07:f9:
1d:e6:e8:d0:a6:0b:7d:2b:d9:a5:a2:04:b9:9e:1b:
f6:9d:fe:66:52:91:8e:a4:17:69:2d:b2:34:49:f6:
81:65:a0:11:f3:cf:c8:1d:8a:b1:a2:26:d9:2f:38:
92:6c:77:3e:ac:4b:37:13:e6:d8:fd:ae:bb:1c:9d:
db:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F8:AA:0C:6F:23:CC:25:46:C3:78:98:80:86:0F:89:67:B4:31:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB0B02484ED111F1A1ECE7A5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.3.0/24
154.202.24.0-154.202.28.255
154.213.218.0/23
154.213.221.0-154.213.222.255
Signature Algorithm: sha256WithRSAEncryption
42:4e:ca:93:08:9c:12:55:ad:37:b6:aa:5e:a0:8b:52:3b:2a:
47:41:52:00:bd:83:34:ad:f8:48:28:17:19:64:89:11:cb:63:
3c:09:68:de:c6:77:b1:88:c0:fd:4b:57:28:e1:2c:8a:98:3a:
fb:15:57:f8:84:4b:24:ee:97:f4:d0:4e:ee:ee:c7:83:42:b0:
9d:ef:e6:36:34:fc:46:a3:d0:15:a9:b4:4d:60:ef:94:1f:36:
3c:12:8d:61:9c:d0:07:2a:2a:91:80:7f:74:fe:ae:60:34:b5:
c7:58:08:46:3d:02:a5:6c:e8:fc:9f:bc:3f:74:07:d9:eb:20:
79:1d:59:68:cf:09:87:cb:30:dc:13:06:0e:e1:8b:ad:cc:7a:
ed:44:bf:89:56:38:f4:0f:f1:9c:97:c2:9a:60:6c:ae:01:c1:
d2:4b:de:de:bd:74:7e:d6:ab:16:af:a9:79:e8:34:bc:22:3b:
c5:f3:a0:d2:d0:45:0c:e9:4c:41:03:72:07:6c:b7:33:8c:20:
5c:51:7c:3f:41:c6:58:8a:47:f4:1b:5e:06:dd:28:e5:f8:f3:
92:ee:6d:4b:d2:f3:8a:dc:75:c0:de:d5:d2:43:a9:71:82:27:
55:9f:5b:10:2a:b3:f5:a8:26:10:01:91:05:4b:45:74:7a:80:
42:03:e5:2b
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgIDActrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTEzMTM0NTE1WhcNMjYwNjE2MTM0NTE1WjAYMRYw
FAYDVQQDEw02YTA0ODA3MC05NTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0NVOfvb52KPv+HGCeB09cS1thIaWLoAuHPvQPZsp/eFZp5IFNnoEf5mc
OXiY2SwHwpncMTt11m3Slhbkq66LawJIP0/EEE17bYMj2coJZ7kcXuxEKvQqVSCT
5i0OyvcH36zr/bhNvFWxN0LkXDC9gTnYLXcvw9LN8Y5i4VcM8+Cjb6b3Pivh2Bea
SV+2kdjJtCm5Drg1UHd6WpxnQXCoCw7wMQcfyT3Tnfwo/6PZ97VQuLVqMvNrftkI
zUxHXhuHB/kd5ujQpgt9K9mlogS5nhv2nf5mUpGOpBdpLbI0SfaBZaAR88/IHYqx
oibZLziSbHc+rEs3E+bY/a67HJ3bBQIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFOL4
qgxvI8wlRsN4mICGD4lntDGQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GQjBCMDI0ODRFRDExMUYxQTFFQ0U3QTVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQAmsIDMAwDBAOayhgDBACa
yhwDBAGa1dowDAMEAJrV3QMEAJrV3jANBgkqhkiG9w0BAQsFAAOCAQEAQk7Kkwic
ElWtN7aqXqCLUjsqR0FSAL2DNK34SCgXGWSJEctjPAlo3sZ3sYjA/UtXKOEsipg6
+xVX+IRLJO6X9NBO7u7Hg0Kwne/mNjT8RqPQFam0TWDvlB82PBKNYZzQByoqkYB/
dP6uYDS1x1gIRj0CpWzo/J+8P3QH2esgeR1ZaM8Jh8sw3BMGDuGLrcx67US/iVY4
9A/xnJfCmmBsrgHB0kve3r10ftarFq+peeg0vCI7xfOg0tBFDOlMQQNyB2y3M4wg
XFF8P0HGWIpH9BteBt0o5fjzku5tS9Lzitx1wN7V0kOpcYInVZ9bECqz9agmEAGR
BUtFdHqAQgPlKw==
-----END CERTIFICATE-----
Generated at Wed May 20 21:18:54 2026 by rpki-client