Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30786D4AFE8611F0B3DC4784DAE4EC9C.roa
File: 30786D4AFE8611F0B3DC4784DAE4EC9C.roa (raw, json)
Hash identifier: KXLwTOQ49v47qkToGD6+aKIhG8PhGd4muaH+0C6ZAWw=
Subject key identifier: B4:1D:3D:39:BA:7E:32:27:36:9B:F8:03:0C:81:55:48:D5:A7:74:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B7D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30786D4AFE8611F0B3DC4784DAE4EC9C.roa
Signing time: Sat 31 Jan 2026 09:21:14 +0000
ROA not before: Sat 31 Jan 2026 09:21:10 +0000
ROA not after: Sun 08 Mar 2026 09:21:10 +0000
asID: 48031
IP address blocks: 154.222.216.0/24 maxlen: 24
154.222.217.0/24 maxlen: 24
154.222.218.0/24 maxlen: 24
154.222.219.0/24 maxlen: 24
154.222.220.0/24 maxlen: 24
154.222.221.0/24 maxlen: 24
154.222.222.0/24 maxlen: 24
154.222.242.0/24 maxlen: 24
154.222.252.0/24 maxlen: 24
154.223.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112598 (0x1b7d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 09:21:10 2026 GMT
Not After : Mar 8 09:21:10 2026 GMT
Subject: CN=697dc98a-a85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0a:71:b0:21:bc:37:b4:6c:c6:bc:18:38:bd:
dd:73:41:a0:0e:ae:80:02:03:7b:54:d4:bb:41:6d:
37:52:cb:89:35:eb:95:6e:40:f7:25:3c:23:b6:1d:
de:3e:8f:ad:ac:ff:ff:53:f9:62:a2:46:21:ab:dd:
ce:e6:34:51:d2:34:9b:3d:60:77:5c:41:93:a6:e1:
f6:1d:b7:a7:fd:dd:51:2c:db:ee:c6:25:c1:33:0e:
b5:6c:2b:fd:e7:ae:ba:36:e7:80:ce:bb:2a:1b:2a:
1b:e3:c1:53:60:40:9d:33:f5:46:bd:6f:08:90:c4:
52:72:2a:5b:81:db:60:07:c1:ab:c1:43:8f:06:5a:
69:15:47:c2:89:5e:3c:a8:09:61:62:d3:81:d6:f9:
7a:cc:c6:4f:46:62:68:ca:f3:4b:50:39:3f:3a:aa:
67:32:21:0c:86:cd:43:5b:21:08:19:fd:dd:1b:b4:
84:20:dd:7c:86:5d:47:92:b1:de:01:db:1e:1b:58:
52:60:71:ac:7d:ca:c0:db:57:82:00:9c:99:68:bd:
65:26:f5:6f:a9:14:ea:f6:4e:02:40:4a:e8:1d:c5:
67:cd:2f:f1:96:20:1b:66:70:11:8f:ea:94:22:37:
3b:fd:8e:d8:ba:ed:ee:68:72:3e:b0:7c:d5:4a:6e:
33:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1D:3D:39:BA:7E:32:27:36:9B:F8:03:0C:81:55:48:D5:A7:74:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30786D4AFE8611F0B3DC4784DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.216.0-154.222.222.255
154.222.242.0/24
154.222.252.0/24
154.223.81.0/24
Signature Algorithm: sha256WithRSAEncryption
33:6f:11:51:0c:3d:da:93:7d:7f:43:a4:f7:91:84:a0:63:66:
f3:92:9b:24:ce:62:3e:8f:ed:1f:77:42:99:9f:a6:b7:e4:be:
3e:b7:e9:6d:01:56:6f:a0:af:79:a8:32:29:90:fe:c2:bc:e1:
14:d5:72:f6:bb:97:41:0e:33:21:f0:d7:af:fa:e1:cd:45:bb:
b3:2d:88:66:9f:27:70:2f:c0:b1:fb:29:6a:6b:5b:81:4b:28:
08:3a:4a:6d:24:47:01:6f:01:22:cc:dc:7c:55:2e:59:c0:8d:
e1:09:36:e0:fb:f8:f7:6f:59:5d:00:5a:b9:47:3e:b0:23:77:
bd:04:65:91:9c:1c:3d:7d:03:b7:68:36:04:45:54:8d:61:87:
09:f1:33:dd:ae:12:c9:8d:1e:47:34:12:f4:b3:77:e9:bb:bd:
a4:be:06:9f:a2:77:92:58:8d:14:e0:e1:c5:0c:6d:4d:8a:ad:
46:3c:b5:08:9b:75:16:19:df:2c:fd:da:6e:11:b1:fa:a6:a7:
a2:01:ae:d2:9d:03:be:0e:4f:71:30:5e:a3:1e:06:c6:41:97:
c3:14:d8:77:db:70:75:6f:90:31:75:b0:a9:ce:e5:5c:0b:18:
d4:b8:05:a2:3f:d5:b5:aa:ee:a3:7e:e3:53:c6:4f:4b:a5:59:
43:d5:e0:09
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIDAbfWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMTMxMDkyMTEwWhcNMjYwMzA4MDkyMTEwWjAYMRYw
FAYDVQQDEw02OTdkYzk4YS1hODVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAugpxsCG8N7RsxrwYOL3dc0GgDq6AAgN7VNS7QW03UsuJNeuVbkD3JTwj
th3ePo+trP//U/liokYhq93O5jRR0jSbPWB3XEGTpuH2Hben/d1RLNvuxiXBMw61
bCv95666NueAzrsqGyob48FTYECdM/VGvW8IkMRScipbgdtgB8GrwUOPBlppFUfC
iV48qAlhYtOB1vl6zMZPRmJoyvNLUDk/OqpnMiEMhs1DWyEIGf3dG7SEIN18hl1H
krHeAdseG1hSYHGsfcrA21eCAJyZaL1lJvVvqRTq9k4CQEroHcVnzS/xliAbZnAR
j+qUIjc7/Y7Yuu3uaHI+sHzVSm4z2wIDAQABo4ICvzCCArswHQYDVR0OBBYEFLQd
PTm6fjInNpv4AwyBVUjVp3SFMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zMDc4NkQ0QUZFODYxMUYwQjNEQzQ3ODREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAOa3tgDBACa3t4DBACa
3vIDBACa3vwDBACa31EwDQYJKoZIhvcNAQELBQADggEBADNvEVEMPdqTfX9DpPeR
hKBjZvOSmyTOYj6P7R93Qpmfprfkvj636W0BVm+gr3moMimQ/sK84RTVcva7l0EO
MyHw16/64c1Fu7MtiGafJ3AvwLH7KWprW4FLKAg6Sm0kRwFvASLM3HxVLlnAjeEJ
NuD7+PdvWV0AWrlHPrAjd70EZZGcHD19A7doNgRFVI1hhwnxM92uEsmNHkc0EvSz
d+m7vaS+Bp+id5JYjRTg4cUMbU2KrUY8tQibdRYZ3yz92m4Rsfqmp6IBrtKdA74O
T3EwXqMeBsZBl8MU2HfbcHVvkDF1sKnO5VwLGNS4BaI/1bWq7qN+41PGT0ulWUPV
4Ak=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:21 2026 by rpki-client