Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/110DC8543A7411F1A287C5EDCE1D38B0.roa
File: 110DC8543A7411F1A287C5EDCE1D38B0.roa (raw, json)
Hash identifier: JsMetKACbAXU6O02sZH8APrFlkwO4nBZ5kZ7PBVQWGE=
Subject key identifier: 93:32:03:6B:A8:87:5B:6E:41:84:CD:1A:63:DC:F7:BA:AE:A7:4B:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C5E9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/110DC8543A7411F1A287C5EDCE1D38B0.roa
Signing time: Fri 17 Apr 2026 15:42:40 +0000
ROA not before: Fri 17 Apr 2026 15:42:36 +0000
ROA not after: Sun 24 May 2026 15:42:36 +0000
asID: 54600
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116201 (0x1c5e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 17 15:42:36 2026 GMT
Not After : May 24 15:42:36 2026 GMT
Subject: CN=69e254f0-1cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:5f:d5:65:b0:eb:81:03:df:77:9b:7a:01:
80:be:58:a7:c7:f8:5c:a8:6f:af:1f:a1:f5:33:ed:
40:9f:da:5e:e6:d1:a2:ad:4d:77:8a:90:07:b3:1f:
2f:88:bc:12:85:de:e5:c6:60:68:73:1c:06:0c:ee:
bc:53:80:70:ab:96:8c:13:f7:3a:59:37:ff:06:9a:
a1:34:6e:49:71:67:e0:45:18:0f:0c:bc:8b:2d:e8:
0a:20:21:02:aa:24:ac:8b:fe:ce:fd:bc:50:09:32:
ed:4a:cb:25:e0:42:5f:df:92:2f:d7:ae:cf:77:59:
c6:1b:63:9e:27:b0:18:12:51:34:68:bc:b2:d1:54:
f0:a3:5c:fc:8e:1c:88:10:42:27:3a:e9:3b:b8:e3:
09:e1:3f:80:73:b6:63:59:a6:0b:0d:d5:fd:88:56:
68:20:8c:d7:0c:63:1f:cd:fc:89:6a:68:c5:a0:61:
05:7c:57:ec:95:28:47:9a:77:14:7c:61:f9:0c:ce:
29:6a:52:18:6c:c3:d9:86:81:b0:ec:fe:23:a1:b7:
a1:43:83:2a:07:e5:fb:be:a0:8a:90:9a:80:e7:d8:
9d:38:99:eb:88:38:86:e4:bd:db:5c:78:08:64:a7:
fb:5c:cd:83:c8:b8:ab:5e:06:63:4b:f4:87:5d:1e:
5d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:32:03:6B:A8:87:5B:6E:41:84:CD:1A:63:DC:F7:BA:AE:A7:4B:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/110DC8543A7411F1A287C5EDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
Signature Algorithm: sha256WithRSAEncryption
51:29:ce:ef:65:ab:12:43:92:06:e2:c6:b7:f0:23:63:20:93:
db:14:83:a0:03:fb:9e:b8:36:e6:2c:ce:9e:4f:cc:15:91:cc:
12:30:83:ff:07:98:ac:67:9c:74:1f:f7:ac:60:3d:29:0f:a8:
41:50:ea:11:f4:14:19:42:e0:03:52:c5:9a:ce:51:f8:d2:c3:
2a:e8:6e:58:81:fd:3f:5b:92:fc:01:f8:42:c7:17:75:2a:39:
26:c9:56:47:b1:8a:90:61:c5:16:b5:a1:d2:3d:93:bc:86:6d:
64:55:10:1b:0a:e7:d6:aa:11:bc:82:02:11:39:25:bb:05:9a:
d3:92:ed:0c:fc:ee:0b:6d:ef:aa:94:ee:d5:db:ff:d2:8b:dc:
64:81:16:da:b3:df:59:d7:d4:ed:d1:ac:b0:05:f9:39:8e:3c:
61:f1:aa:65:f1:24:f8:d6:a2:fe:6d:a7:01:de:3f:16:48:cf:
f7:43:cb:c1:e3:a1:c4:c1:7e:60:55:17:d2:02:89:ce:2b:d8:
bf:87:bb:bb:4d:49:aa:5f:bd:81:db:10:0d:8a:1a:38:26:c2:
a7:bf:54:49:fd:a9:13:00:48:e5:dd:3d:33:8c:ed:50:8b:3c:
1b:a6:85:4c:66:73:44:04:28:1d:f3:74:c7:59:15:cd:4e:3e:
b2:56:97:d3
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAcXpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDE3MTU0MjM2WhcNMjYwNTI0MTU0MjM2WjAYMRYw
FAYDVQQDEw02OWUyNTRmMC0xY2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuT1f1WWw64ED33ebegGAvlinx/hcqG+vH6H1M+1An9pe5tGirU13ipAH
sx8viLwShd7lxmBocxwGDO68U4Bwq5aME/c6WTf/BpqhNG5JcWfgRRgPDLyLLegK
ICECqiSsi/7O/bxQCTLtSssl4EJf35Iv167Pd1nGG2OeJ7AYElE0aLyy0VTwo1z8
jhyIEEInOuk7uOMJ4T+Ac7ZjWaYLDdX9iFZoIIzXDGMfzfyJamjFoGEFfFfslShH
mncUfGH5DM4palIYbMPZhoGw7P4jobehQ4MqB+X7vqCKkJqA59idOJnriDiG5L3b
XHgIZKf7XM2DyLirXgZjS/SHXR5dNQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFJMy
A2uoh1tuQYTNGmPc97qup0v+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMTBEQzg1NDNBNzQxMUYxQTI4N0M1RURDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASaWZADBASaWcAwDQYJ
KoZIhvcNAQELBQADggEBAFEpzu9lqxJDkgbixrfwI2Mgk9sUg6AD+564NuYszp5P
zBWRzBIwg/8HmKxnnHQf96xgPSkPqEFQ6hH0FBlC4ANSxZrOUfjSwyrobliB/T9b
kvwB+ELHF3UqOSbJVkexipBhxRa1odI9k7yGbWRVEBsK59aqEbyCAhE5JbsFmtOS
7Qz87gtt76qU7tXb/9KL3GSBFtqz31nX1O3RrLAF+TmOPGHxqmXxJPjWov5tpwHe
PxZIz/dDy8HjocTBfmBVF9ICic4r2L+Hu7tNSapfvYHbEA2KGjgmwqe/VEn9qRMA
SOXdPTOM7VCLPBumhUxmc0QEKB3zdMdZFc1OPrJWl9M=
-----END CERTIFICATE-----
Generated at Sat Apr 18 10:25:30 2026 by rpki-client