Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/342ACBAA11FE11F1901012AFDAE4EC9C.roa
File: 342ACBAA11FE11F1901012AFDAE4EC9C.roa (raw, json)
Hash identifier: WS/umd6B7cnSzsSlAduaok+cEdy/L8OQ/jFlZPp7cwU=
Subject key identifier: 7A:C4:D8:A5:9D:C7:7B:61:93:17:8A:93:D1:83:2A:41:17:58:36:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB83
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/342ACBAA11FE11F1901012AFDAE4EC9C.roa
Signing time: Wed 25 Feb 2026 03:58:12 +0000
ROA not before: Wed 25 Feb 2026 03:58:07 +0000
ROA not after: Thu 05 Mar 2026 03:58:07 +0000
asID: 214143
IP address blocks: 154.223.248.0/21 maxlen: 24
154.223.248.0/22 maxlen: 24
154.223.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113539 (0x1bb83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 03:58:07 2026 GMT
Not After : Mar 5 03:58:07 2026 GMT
Subject: CN=699e7354-ecac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a3:c7:1e:67:6f:7a:f2:5b:ba:57:93:95:f6:
32:61:73:05:38:6a:43:63:2f:73:48:95:54:aa:ea:
d1:7e:56:c3:ef:15:c3:53:73:1b:d2:59:56:83:2d:
e2:4c:97:d9:0b:9c:18:7e:91:a5:1e:6e:74:a8:2b:
e0:09:d6:46:9c:7d:03:00:31:67:5b:6c:9f:e1:75:
15:5e:cd:95:98:5d:3b:7f:fc:65:39:88:9c:d9:06:
bc:3b:70:cd:c9:f4:6f:3d:58:87:ea:4d:11:70:6c:
ac:af:ca:2e:9e:3f:cf:58:d4:e3:b7:fb:72:ee:fa:
5c:ba:e7:7a:57:4c:bf:f3:4d:cc:7a:6b:ed:b3:ab:
c6:19:37:a1:2a:56:5e:b5:50:d6:ec:b1:8f:9c:7d:
03:e5:3b:9d:6c:08:6c:b9:e6:1b:ce:80:2a:d1:33:
7f:ff:b3:b6:e6:9e:80:a0:1c:a6:d4:95:05:6e:8c:
26:fa:f6:3d:26:0f:a0:6d:eb:02:90:15:a0:0a:48:
33:da:24:80:74:72:14:66:ec:81:69:a9:25:82:60:
ca:60:47:c7:9e:f4:96:5b:c2:cb:c0:a6:1b:43:39:
cf:01:2e:38:db:e0:4a:12:88:d5:e3:66:dd:ff:19:
6b:1f:0c:67:b5:06:57:52:23:ae:f1:36:11:6b:17:
59:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C4:D8:A5:9D:C7:7B:61:93:17:8A:93:D1:83:2A:41:17:58:36:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/342ACBAA11FE11F1901012AFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.248.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:aa:b2:d1:f2:3e:ed:70:6d:57:9f:a3:6d:66:b1:e7:39:89:
c5:90:c4:30:40:7d:db:40:9d:9f:e2:a0:a4:6b:ad:ee:4b:57:
1e:60:46:9b:bc:c8:61:f1:73:45:d2:98:b2:a2:65:2e:ef:d2:
e9:0d:c5:33:05:39:b1:f9:1f:1d:14:66:95:e7:a4:67:c5:1b:
a0:ad:7f:fe:34:fd:92:bd:dd:8f:2b:a3:06:d8:0e:6f:93:1e:
b2:32:ee:cd:df:36:d1:50:f3:ba:da:b2:1d:73:00:ad:ac:f4:
fe:94:14:d6:6e:a7:98:67:6b:5e:d2:00:20:4e:55:40:8e:4e:
15:ee:22:c2:e5:70:d5:4e:e8:68:45:8d:72:ab:ed:47:cc:96:
ca:0b:40:86:37:a7:dd:2e:0a:ea:43:31:ca:85:ba:85:3c:b9:
93:d0:72:0b:3f:1d:52:0a:70:d6:1a:ff:6b:ae:f6:72:29:ab:
a3:8c:d4:fa:56:81:c9:fb:2c:eb:d5:5e:4d:43:e2:f0:24:ec:
9a:77:5e:45:4a:27:d0:87:2d:43:da:85:7c:65:26:2f:1e:3d:
70:69:fb:60:21:49:b1:17:ae:53:fb:39:a1:16:fc:22:53:b8:
6d:f4:58:c8:78:cf:e2:02:38:eb:bb:a8:07:79:b1:b5:25:3f:
fd:65:ac:a8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbuDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjI1MDM1ODA3WhcNMjYwMzA1MDM1ODA3WjAYMRYw
FAYDVQQDEw02OTllNzM1NC1lY2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyqPHHmdvevJbuleTlfYyYXMFOGpDYy9zSJVUqurRflbD7xXDU3Mb0llW
gy3iTJfZC5wYfpGlHm50qCvgCdZGnH0DADFnW2yf4XUVXs2VmF07f/xlOYic2Qa8
O3DNyfRvPViH6k0RcGysr8ounj/PWNTjt/ty7vpcuud6V0y/803Memvts6vGGTeh
KlZetVDW7LGPnH0D5TudbAhsueYbzoAq0TN//7O25p6AoBym1JUFbowm+vY9Jg+g
besCkBWgCkgz2iSAdHIUZuyBaaklgmDKYEfHnvSWW8LLwKYbQznPAS442+BKEojV
42bd/xlrHwxntQZXUiOu8TYRaxdZHwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHrE
2KWdx3thkxeKk9GDKkEXWDayMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNDJBQ0JBQTExRkUxMUYxOTAxMDEyQUZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmt/4MA0GCSqGSIb3DQEB
CwUAA4IBAQBbqrLR8j7tcG1Xn6NtZrHnOYnFkMQwQH3bQJ2f4qCka63uS1ceYEab
vMhh8XNF0piyomUu79LpDcUzBTmx+R8dFGaV56RnxRugrX/+NP2Svd2PK6MG2A5v
kx6yMu7N3zbRUPO62rIdcwCtrPT+lBTWbqeYZ2te0gAgTlVAjk4V7iLC5XDVTuho
RY1yq+1HzJbKC0CGN6fdLgrqQzHKhbqFPLmT0HILPx1SCnDWGv9rrvZyKaujjNT6
VoHJ+yzr1V5NQ+LwJOyad15FSifQhy1D2oV8ZSYvHj1waftgIUmxF65T+zmhFvwi
U7ht9FjIeM/iAjjru6gHebG1JT/9Zayo
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:49 2026 by rpki-client