Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B45160A123C11F19B30BFA5DAE4EC9C.roa
File: 3B45160A123C11F19B30BFA5DAE4EC9C.roa (raw, json)
Hash identifier: 71TqXQW74WYsEmYGVrqyhFoyilFUwNg6WufEki2pPEM=
Subject key identifier: E9:AD:67:1D:10:45:70:38:BF:F5:A1:FF:B6:13:A6:41:4F:B2:25:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BBB5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B45160A123C11F19B30BFA5DAE4EC9C.roa
Signing time: Wed 25 Feb 2026 11:22:13 +0000
ROA not before: Wed 25 Feb 2026 11:22:09 +0000
ROA not after: Wed 04 Mar 2026 11:22:09 +0000
asID: 149014
IP address blocks: 154.223.168.0/22 maxlen: 24
154.223.176.0/22 maxlen: 24
154.223.180.0/22 maxlen: 24
154.223.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113589 (0x1bbb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 11:22:09 2026 GMT
Not After : Mar 4 11:22:09 2026 GMT
Subject: CN=699edb65-88c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e6:5b:cf:20:3b:49:3b:00:bc:ca:4b:d9:b2:
41:0d:e5:a5:d9:62:72:01:87:0c:cd:1a:e4:31:ac:
c0:19:27:a3:86:b3:5c:13:5b:e7:ca:56:f7:1a:2a:
b6:ac:be:ad:be:d0:75:47:0e:67:18:04:c4:66:d4:
97:47:8d:51:60:8b:d3:f4:7b:72:ab:c7:4a:a1:b0:
91:0e:44:8b:57:10:6b:f6:94:06:90:d8:9b:c6:c1:
e7:57:67:f0:9d:e4:f5:88:98:a5:c2:e1:84:82:ba:
5c:cd:9c:89:59:07:3d:a8:1a:56:2a:dd:67:b4:ea:
f1:78:5e:96:98:cf:02:d5:77:63:0e:2f:ed:30:8e:
ce:47:ce:d5:de:33:5a:f4:b3:3d:f3:2f:65:da:0f:
b2:3f:f5:18:a0:00:cb:82:fd:10:c6:3f:b0:19:06:
36:0c:97:d0:0c:a4:70:78:84:b2:e3:04:04:f0:57:
c3:34:bd:6e:89:f2:3d:e4:18:e0:70:b1:8e:21:de:
a6:18:95:b0:98:d9:49:3b:56:4a:4e:f6:ae:c6:39:
af:ec:0f:62:ef:fd:ba:f2:88:7c:c0:e1:7d:2d:5a:
49:cb:3d:08:57:5e:22:aa:e0:39:64:72:77:4c:fc:
e3:60:a7:ce:c7:70:4f:35:fe:6a:8d:c2:d9:34:7d:
b8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AD:67:1D:10:45:70:38:BF:F5:A1:FF:B6:13:A6:41:4F:B2:25:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B45160A123C11F19B30BFA5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.168.0/22
154.223.176.0/21
154.223.188.0/22
Signature Algorithm: sha256WithRSAEncryption
27:1e:18:78:bd:f5:85:c7:63:6d:5a:3a:84:35:a9:c6:c2:60:
a1:b2:19:c7:7b:04:a9:14:ac:27:e7:4b:74:bd:c2:5b:7a:57:
3d:63:f2:f1:c5:48:2e:c0:63:93:ce:9a:ec:2a:ca:34:4b:bd:
f9:72:ae:60:ed:95:a5:de:72:7a:9f:50:56:1d:fd:37:7b:18:
b1:ca:63:fd:73:d7:40:d8:d1:9b:c9:5e:16:6e:4a:a9:b7:b0:
18:9a:3d:15:0b:ee:8d:7a:de:16:e3:18:8c:0d:0e:c6:06:79:
ba:cc:4b:88:a0:88:04:f9:67:2e:69:63:59:ab:e1:df:d6:33:
79:34:ba:ac:9a:13:a9:e9:29:d1:9f:b2:07:1e:3b:32:6d:d6:
d6:79:c2:0e:70:b8:23:ac:8f:1a:95:3b:bc:9e:e8:10:0c:4a:
31:51:9b:bd:f9:ea:57:d7:37:5f:5f:6c:10:b2:7a:86:50:d7:
b0:cf:4c:46:fb:d1:5b:78:5a:cb:4a:70:dd:ae:14:2f:74:13:
c7:aa:cc:58:e4:b4:3e:4e:f4:f8:fe:ee:af:94:af:36:45:a0:
19:e9:30:aa:0f:38:4d:2a:fe:0b:45:a1:df:3e:1f:c6:a9:b2:
52:75:1e:44:02:e0:18:cd:4e:4d:7c:dd:92:97:f0:7d:ae:26:
6d:9a:06:5c
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAbu1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjI1MTEyMjA5WhcNMjYwMzA0MTEyMjA5WjAYMRYw
FAYDVQQDEw02OTllZGI2NS04OGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzeZbzyA7STsAvMpL2bJBDeWl2WJyAYcMzRrkMazAGSejhrNcE1vnylb3
Giq2rL6tvtB1Rw5nGATEZtSXR41RYIvT9Htyq8dKobCRDkSLVxBr9pQGkNibxsHn
V2fwneT1iJilwuGEgrpczZyJWQc9qBpWKt1ntOrxeF6WmM8C1XdjDi/tMI7OR87V
3jNa9LM98y9l2g+yP/UYoADLgv0Qxj+wGQY2DJfQDKRweISy4wQE8FfDNL1uifI9
5BjgcLGOId6mGJWwmNlJO1ZKTvauxjmv7A9i7/268oh8wOF9LVpJyz0IV14iquA5
ZHJ3TPzjYKfOx3BPNf5qjcLZNH24xwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFOmt
Zx0QRXA4v/Wh/7YTpkFPsiViMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zQjQ1MTYwQTEyM0MxMUYxOUIzMEJGQTVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCmt+oAwQDmt+wAwQCmt+8
MA0GCSqGSIb3DQEBCwUAA4IBAQAnHhh4vfWFx2NtWjqENanGwmChshnHewSpFKwn
50t0vcJbelc9Y/LxxUguwGOTzprsKso0S735cq5g7ZWl3nJ6n1BWHf03exixymP9
c9dA2NGbyV4Wbkqpt7AYmj0VC+6Net4W4xiMDQ7GBnm6zEuIoIgE+WcuaWNZq+Hf
1jN5NLqsmhOp6SnRn7IHHjsybdbWecIOcLgjrI8alTu8nugQDEoxUZu9+epX1zdf
X2wQsnqGUNewz0xG+9FbeFrLSnDdrhQvdBPHqsxY5LQ+TvT4/u6vlK82RaAZ6TCq
DzhNKv4LRaHfPh/GqbJSdR5EAuAYzU5NfN2Sl/B9riZtmgZc
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:42:25 2026 by rpki-client