Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24969B08370411F189D862F5CE1D38B0.roa
File: 24969B08370411F189D862F5CE1D38B0.roa (raw, json)
Hash identifier: bmdi3gVjY+XtLs6r9QaFPbU56035Eo12iWlpr8f/CAc=
Subject key identifier: 88:AA:62:33:99:B3:3B:05:38:C8:83:8C:06:C2:C1:3B:47:CB:82:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C4DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24969B08370411F189D862F5CE1D38B0.roa
Signing time: Mon 13 Apr 2026 06:43:56 +0000
ROA not before: Mon 13 Apr 2026 06:43:51 +0000
ROA not after: Sat 18 Apr 2026 06:43:51 +0000
asID: 209242
IP address blocks: 154.83.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 18 Apr 2026 06:43:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115931 (0x1c4db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 13 06:43:51 2026 GMT
Not After : Apr 18 06:43:51 2026 GMT
Subject: CN=69dc90ac-a233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b9:91:a8:eb:98:7f:11:26:48:55:d7:8b:02:
f9:ac:49:b2:1a:d9:62:15:5d:e2:3d:80:02:df:a6:
11:84:45:4b:1f:ec:86:57:90:cb:db:26:90:8d:6e:
d8:73:63:1a:57:68:fd:ab:0b:f9:ec:2e:85:f3:20:
7d:0c:46:75:b0:eb:41:d2:52:4d:4f:75:d8:13:bc:
46:e9:92:7a:65:d6:31:bb:40:4c:8b:cb:12:f8:5d:
33:0b:1d:ac:04:8a:c2:02:7a:6f:b1:fe:7e:98:9c:
89:d4:1c:e6:5a:f0:08:05:fd:cc:ad:28:2c:e0:1f:
7a:e1:2d:a8:9c:e0:fb:32:e5:1a:f7:42:b9:e1:23:
a5:12:f7:9e:9c:4e:77:ab:1f:c0:68:ec:18:25:5d:
22:ab:07:b5:6a:13:cc:dc:c5:f3:3b:fd:a2:15:32:
5a:89:2c:40:c7:3f:34:a3:59:e3:d5:a2:59:ec:5f:
82:82:a6:d7:fb:02:e2:f7:d8:0f:2e:b0:5e:8f:fd:
21:16:f8:e1:3a:f0:88:8c:65:34:60:20:89:f3:15:
e9:0c:0a:31:5e:b6:fb:49:22:a0:3d:f9:d1:2d:4d:
25:70:c9:33:b4:b9:3b:29:3f:1c:f0:53:07:0d:5b:
56:55:69:29:80:98:46:1e:a9:e3:10:8b:1f:58:9f:
cd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AA:62:33:99:B3:3B:05:38:C8:83:8C:06:C2:C1:3B:47:CB:82:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24969B08370411F189D862F5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.22.0/23
Signature Algorithm: sha256WithRSAEncryption
48:2e:86:0f:a4:a7:c1:86:98:f9:ef:ae:38:54:ba:0e:12:18:
05:9c:f3:93:b7:d5:b0:ff:f7:9b:1c:37:81:05:36:1d:e6:f1:
e2:1c:82:f3:d0:eb:17:bf:fe:0c:cc:0e:8e:e9:47:fb:c0:b6:
7b:20:35:ed:6b:05:bc:5f:bf:7a:42:48:df:46:20:ed:0d:e9:
be:23:5a:8a:19:70:27:b5:08:47:b7:77:75:a4:30:16:ee:3d:
ab:8d:bd:13:bc:65:d5:60:0f:6c:6a:e6:f5:f1:9b:12:22:09:
a5:6c:e4:a1:9c:9c:6f:9b:d7:22:6a:ad:b3:e1:e8:87:b1:eb:
db:8f:be:7a:39:14:d5:96:0c:01:63:0e:ee:b3:ae:ac:28:90:
df:1d:43:69:cb:46:f2:be:a2:9e:75:fa:40:a6:20:a2:e9:37:
fe:b6:29:d4:0e:5a:9c:f8:dc:9f:30:a8:95:25:73:b1:c2:fd:
e2:76:b8:43:35:f2:00:70:96:46:04:2a:d9:55:fe:3d:d4:9f:
93:7f:85:14:29:df:95:29:de:2b:09:e9:11:2d:51:32:5f:92:
28:a2:66:12:6f:7f:22:1e:46:26:7c:c7:96:fa:f3:cf:83:fb:
72:df:58:18:f7:dd:f3:ad:b3:c2:29:68:77:c8:67:82:ad:bf:
c9:7a:8e:b2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcTbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDEzMDY0MzUxWhcNMjYwNDE4MDY0MzUxWjAYMRYw
FAYDVQQDEw02OWRjOTBhYy1hMjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt7mRqOuYfxEmSFXXiwL5rEmyGtliFV3iPYAC36YRhEVLH+yGV5DL2yaQ
jW7Yc2MaV2j9qwv57C6F8yB9DEZ1sOtB0lJNT3XYE7xG6ZJ6ZdYxu0BMi8sS+F0z
Cx2sBIrCAnpvsf5+mJyJ1BzmWvAIBf3MrSgs4B964S2onOD7MuUa90K54SOlEvee
nE53qx/AaOwYJV0iqwe1ahPM3MXzO/2iFTJaiSxAxz80o1nj1aJZ7F+CgqbX+wLi
99gPLrBej/0hFvjhOvCIjGU0YCCJ8xXpDAoxXrb7SSKgPfnRLU0lcMkztLk7KT8c
8FMHDVtWVWkpgJhGHqnjEIsfWJ/N7wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIiq
YjOZszsFOMiDjAbCwTtHy4KDMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yNDk2OUIwODM3MDQxMUYxODlEODYyRjVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlMWMA0GCSqGSIb3DQEB
CwUAA4IBAQBILoYPpKfBhpj57644VLoOEhgFnPOTt9Ww//ebHDeBBTYd5vHiHILz
0OsXv/4MzA6O6Uf7wLZ7IDXtawW8X796QkjfRiDtDem+I1qKGXAntQhHt3d1pDAW
7j2rjb0TvGXVYA9saub18ZsSIgmlbOShnJxvm9ciaq2z4eiHsevbj756ORTVlgwB
Yw7us66sKJDfHUNpy0byvqKedfpApiCi6Tf+tinUDlqc+NyfMKiVJXOxwv3idrhD
NfIAcJZGBCrZVf491J+Tf4UUKd+VKd4rCekRLVEyX5IoomYSb38iHkYmfMeW+vPP
g/ty31gY993zrbPCKWh3yGeCrb/Jeo6y
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:26:14 2026 by rpki-client