Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/258A00CE0BDD11F1A3F6977FDAE4EC9C.roa
File: 258A00CE0BDD11F1A3F6977FDAE4EC9C.roa (raw, json)
Hash identifier: 4xkFreSwd1bUqG+JLttwb6eXpiGHv9w36Xzr6w8l7dI=
Subject key identifier: A9:48:04:C5:59:D6:74:34:92:26:DF:0F:1C:19:20:03:49:D1:4E:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B9FF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/258A00CE0BDD11F1A3F6977FDAE4EC9C.roa
Signing time: Tue 17 Feb 2026 08:46:27 +0000
ROA not before: Tue 17 Feb 2026 08:46:22 +0000
ROA not after: Wed 26 Aug 2026 08:46:22 +0000
asID: 28458
IP address blocks: 154.197.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113151 (0x1b9ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 17 08:46:22 2026 GMT
Not After : Aug 26 08:46:22 2026 GMT
Subject: CN=69942ae3-db83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:cb:50:69:41:36:fe:e6:5d:89:5a:da:d7:
ff:96:6a:f0:57:f3:16:6a:5d:a0:32:1e:58:fd:48:
33:a7:44:87:f4:44:70:9e:6d:e5:ed:83:12:f9:17:
22:24:29:35:90:42:4e:09:97:1d:03:9b:e7:9d:69:
52:28:84:96:24:1f:9d:a7:34:d1:de:e7:47:11:20:
b7:f1:df:86:1b:cd:57:eb:93:b0:9c:fb:ce:94:0c:
d1:6f:c1:6f:4f:05:1f:83:4b:6f:54:56:94:1e:a5:
5c:4e:32:65:09:1a:5c:4e:76:41:3a:10:57:6b:e9:
35:d6:cc:1a:5b:f1:88:c4:24:05:19:4b:cf:0f:eb:
e7:0e:a2:fc:65:05:c1:f7:98:de:3e:00:be:0c:c4:
b5:97:72:d9:ca:07:c2:44:c1:9b:39:d9:c6:da:7b:
25:ed:cf:0d:40:5b:7e:82:d6:92:61:cd:f4:3d:b4:
ef:82:d6:bf:f6:2a:06:91:a8:82:d2:49:c0:42:4d:
96:aa:52:aa:7a:6b:48:3a:55:02:e7:4e:3c:26:4a:
59:64:d4:45:b3:d5:73:fa:51:e1:58:67:4d:7f:4f:
e8:fd:3c:44:1e:35:c7:d2:64:20:af:06:e7:b4:57:
8a:e4:b1:a2:d7:6f:84:60:e4:81:5e:b7:84:41:84:
04:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:48:04:C5:59:D6:74:34:92:26:DF:0F:1C:19:20:03:49:D1:4E:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/258A00CE0BDD11F1A3F6977FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.58.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:0d:b3:9d:67:52:10:94:7f:e9:43:e0:52:91:c4:22:61:74:
39:e5:41:b5:56:c1:ec:9b:7f:68:ca:ab:3b:fe:f7:fb:19:f2:
a2:68:a9:46:c2:4d:2d:9a:aa:84:c3:c1:7f:ca:02:e6:a9:12:
50:05:61:42:b4:9b:95:f3:67:fb:8f:46:d5:99:0e:91:10:1e:
34:47:8d:61:12:03:61:f3:43:5d:34:6f:f9:98:3b:c9:36:07:
b5:cf:16:36:94:cf:45:9b:33:25:31:a7:32:25:1a:03:c6:0a:
4c:a5:44:ff:02:8f:d1:e6:a3:25:b1:26:c9:16:62:73:db:e0:
af:e7:8c:7d:87:28:ec:e9:c2:a7:6e:3e:08:a4:42:9b:20:bf:
8e:44:25:58:bd:03:b1:59:d4:e3:45:41:49:78:a1:5a:81:fc:
7c:6a:22:57:df:91:13:ae:2a:d3:f9:3a:96:32:47:b6:c2:5c:
de:df:fd:3c:a8:8e:1f:f1:62:c0:1f:ec:d0:72:e0:57:df:97:
4f:35:df:3b:15:ce:06:15:95:67:1b:99:92:fd:18:a4:cf:cb:
d4:17:bc:6f:2f:fb:3f:6c:70:b7:0b:70:9f:7a:cf:e2:a7:d7:
13:50:2c:da:7e:85:13:b7:e5:cf:35:f0:7a:d7:e1:00:06:f5:
0a:7d:c2:9d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbn/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjE3MDg0NjIyWhcNMjYwODI2MDg0NjIyWjAYMRYw
FAYDVQQDEw02OTk0MmFlMy1kYjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt+rLUGlBNv7mXYla2tf/lmrwV/MWal2gMh5Y/Ugzp0SH9ERwnm3l7YMS
+RciJCk1kEJOCZcdA5vnnWlSKISWJB+dpzTR3udHESC38d+GG81X65OwnPvOlAzR
b8FvTwUfg0tvVFaUHqVcTjJlCRpcTnZBOhBXa+k11swaW/GIxCQFGUvPD+vnDqL8
ZQXB95jePgC+DMS1l3LZygfCRMGbOdnG2nsl7c8NQFt+gtaSYc30PbTvgta/9ioG
kaiC0knAQk2WqlKqemtIOlUC5048JkpZZNRFs9Vz+lHhWGdNf0/o/TxEHjXH0mQg
rwbntFeK5LGi12+EYOSBXreEQYQEBQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKlI
BMVZ1nQ0kibfDxwZIANJ0U6GMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yNThBMDBDRTBCREQxMUYxQTNGNjk3N0ZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsU6MA0GCSqGSIb3DQEB
CwUAA4IBAQDBDbOdZ1IQlH/pQ+BSkcQiYXQ55UG1VsHsm39oyqs7/vf7GfKiaKlG
wk0tmqqEw8F/ygLmqRJQBWFCtJuV82f7j0bVmQ6REB40R41hEgNh80NdNG/5mDvJ
Nge1zxY2lM9FmzMlMacyJRoDxgpMpUT/Ao/R5qMlsSbJFmJz2+Cv54x9hyjs6cKn
bj4IpEKbIL+ORCVYvQOxWdTjRUFJeKFagfx8aiJX35ETrirT+TqWMke2wlze3/08
qI4f8WLAH+zQcuBX35dPNd87Fc4GFZVnG5mS/Rikz8vUF7xvL/s/bHC3C3Cfes/i
p9cTUCzafoUTt+XPNfB61+EABvUKfcKd
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:44:11 2026 by rpki-client