Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D8B6594311F11F1BA9A0ADFDAE4EC9C.roa
File: 2D8B6594311F11F1BA9A0ADFDAE4EC9C.roa (raw, json)
Hash identifier: LO2Z17qzvgWyVIJ7MfXCTciOkcXEOjTWAMg+2leTRp0=
Subject key identifier: 61:49:BA:04:85:F4:DC:3E:AA:A5:EB:85:35:32:1A:FA:A4:CC:4A:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C341
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D8B6594311F11F1BA9A0ADFDAE4EC9C.roa
Signing time: Sun 05 Apr 2026 18:42:21 +0000
ROA not before: Sun 05 Apr 2026 18:42:16 +0000
ROA not after: Sat 09 May 2026 18:42:16 +0000
asID: 151352
IP address blocks: 154.82.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115521 (0x1c341)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 5 18:42:16 2026 GMT
Not After : May 9 18:42:16 2026 GMT
Subject: CN=69d2ad0c-a072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:47:41:46:cf:77:ea:8d:c5:b9:83:70:ec:31:
86:d2:03:c9:98:0c:36:90:5d:09:70:f4:67:b2:86:
b3:df:ed:fa:8b:70:82:cb:2b:63:72:b7:47:a2:49:
b6:cd:8b:3d:7f:0e:b0:79:1e:ef:f6:45:0a:d5:53:
7b:7b:da:fa:36:1f:87:7c:e0:e5:41:bd:e5:ef:58:
9f:94:75:d8:c5:a6:5c:50:1b:4c:5a:94:d2:1f:19:
89:1a:df:63:18:fc:65:9a:42:b4:f2:2e:5e:f4:09:
35:c4:09:51:e1:9f:6e:03:8b:40:36:dc:40:fe:96:
a9:f6:45:d1:62:5f:57:d9:dd:b1:c2:1b:f1:f7:53:
d4:f9:06:4f:5b:b3:f4:2d:35:82:02:ba:4c:92:0e:
55:1f:e5:b8:07:00:95:e3:62:9c:d9:24:da:c0:a4:
8a:8a:2f:3f:1d:08:93:07:98:51:23:4d:4f:95:10:
4e:64:36:27:c4:01:a9:a9:f1:99:08:c1:9a:1e:21:
04:fe:91:bd:c5:60:f0:e9:25:f1:c0:ec:e1:78:80:
25:da:c8:cc:59:b0:fc:fa:bb:f5:3d:d1:d3:f3:f8:
81:8e:78:11:ee:dd:6a:45:b3:ce:50:e8:77:74:72:
6b:94:54:32:36:4f:40:46:30:65:bc:09:d4:90:d6:
b1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:49:BA:04:85:F4:DC:3E:AA:A5:EB:85:35:32:1A:FA:A4:CC:4A:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D8B6594311F11F1BA9A0ADFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.136.0/23
Signature Algorithm: sha256WithRSAEncryption
34:0c:83:94:19:9a:de:23:34:6c:de:53:48:63:6d:ca:54:6c:
f7:86:b4:b0:95:6c:7c:50:90:f0:1c:1d:67:4e:e3:70:e7:20:
a7:00:2c:4f:f2:cb:52:cc:fa:96:5a:aa:f9:7a:16:18:b6:51:
fd:ff:5b:cf:3f:f2:eb:61:9b:ba:9f:1a:cf:08:24:fa:6c:89:
86:03:40:41:e0:20:78:60:a4:3f:f3:05:b0:d3:2b:9b:21:23:
f5:bb:1f:28:6d:04:31:9a:56:4e:15:2f:7e:67:75:43:29:0a:
24:97:e3:39:99:f7:2e:93:e7:b8:dd:49:d1:95:66:a2:c6:e6:
03:6a:3e:4e:f9:54:a7:49:97:c0:cb:f3:82:18:ef:6f:8a:36:
fe:a9:61:50:35:a0:33:bd:8b:7a:c7:7e:f6:f2:76:fb:5a:f0:
c9:a7:b0:14:24:ee:67:cc:20:3b:08:69:38:94:5d:32:b0:5b:
69:71:70:bd:e1:83:50:d1:8e:bb:e8:f0:20:93:c6:6c:da:8c:
7c:b3:6c:5d:f8:45:77:ef:ee:d4:0e:53:9c:6a:e1:aa:19:52:
36:b1:12:8b:6c:1a:be:f6:6b:b5:05:d3:3a:6b:13:37:6d:75:
55:91:3c:4c:1b:1d:0a:34:95:76:1e:9e:78:ca:3b:3d:0b:65:
04:6c:44:b0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcNBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDA1MTg0MjE2WhcNMjYwNTA5MTg0MjE2WjAYMRYw
FAYDVQQDEw02OWQyYWQwYy1hMDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzEdBRs936o3FuYNw7DGG0gPJmAw2kF0JcPRnsoaz3+36i3CCyytjcrdH
okm2zYs9fw6weR7v9kUK1VN7e9r6Nh+HfODlQb3l71iflHXYxaZcUBtMWpTSHxmJ
Gt9jGPxlmkK08i5e9Ak1xAlR4Z9uA4tANtxA/pap9kXRYl9X2d2xwhvx91PU+QZP
W7P0LTWCArpMkg5VH+W4BwCV42Kc2STawKSKii8/HQiTB5hRI01PlRBOZDYnxAGp
qfGZCMGaHiEE/pG9xWDw6SXxwOzheIAl2sjMWbD8+rv1PdHT8/iBjngR7t1qRbPO
UOh3dHJrlFQyNk9ARjBlvAnUkNaxuQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGFJ
ugSF9Nw+qqXrhTUyGvqkzEqfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yRDhCNjU5NDMxMUYxMUYxQkE5QTBBREZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlKIMA0GCSqGSIb3DQEB
CwUAA4IBAQA0DIOUGZreIzRs3lNIY23KVGz3hrSwlWx8UJDwHB1nTuNw5yCnACxP
8stSzPqWWqr5ehYYtlH9/1vPP/LrYZu6nxrPCCT6bImGA0BB4CB4YKQ/8wWw0yub
ISP1ux8obQQxmlZOFS9+Z3VDKQokl+M5mfcuk+e43UnRlWaixuYDaj5O+VSnSZfA
y/OCGO9vijb+qWFQNaAzvYt6x3728nb7WvDJp7AUJO5nzCA7CGk4lF0ysFtpcXC9
4YNQ0Y676PAgk8Zs2ox8s2xd+EV37+7UDlOcauGqGVI2sRKLbBq+9mu1BdM6axM3
bXVVkTxMGx0KNJV2Hp54yjs9C2UEbESw
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:28:55 2026 by rpki-client