Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4288E5BE2AE111F1B7D04EC8DAE4EC9C.roa
File: 4288E5BE2AE111F1B7D04EC8DAE4EC9C.roa (raw, json)
Hash identifier: DjfJly/TJ/77JZ7MIQ4U6yEe4CBLkO57AG7ynKtyUgo=
Subject key identifier: 92:35:95:3B:AF:D2:15:4A:2A:32:13:8D:60:B7:D6:1A:79:AF:C2:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C187
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4288E5BE2AE111F1B7D04EC8DAE4EC9C.roa
Signing time: Sat 28 Mar 2026 20:04:00 +0000
ROA not before: Sat 28 Mar 2026 20:03:55 +0000
ROA not after: Sat 16 May 2026 20:03:55 +0000
asID: 137899
IP address blocks: 154.222.16.0/20 maxlen: 24
154.222.16.0/21 maxlen: 24
154.222.16.0/22 maxlen: 24
154.222.20.0/22 maxlen: 24
154.222.24.0/21 maxlen: 24
154.222.24.0/22 maxlen: 24
154.222.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115079 (0x1c187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 28 20:03:55 2026 GMT
Not After : May 16 20:03:55 2026 GMT
Subject: CN=69c83430-7636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b5:d1:72:b8:5c:7c:d2:28:12:27:4f:5b:2b:
f1:20:11:e7:65:5e:39:d5:79:32:ed:39:b5:ba:aa:
d6:0c:c8:94:0d:c7:03:f7:1d:2c:41:55:0c:a2:f4:
13:51:77:fa:5a:d6:c5:ff:1c:9e:c5:8f:df:45:b7:
cb:67:57:10:e4:c9:28:99:b3:83:52:c1:51:17:25:
b3:6c:4d:5d:bb:06:7a:fe:1c:f1:1d:92:82:d7:4f:
a7:ec:37:86:bf:bd:eb:05:ae:99:1e:6d:a7:b4:46:
f1:29:26:af:74:7a:0d:1b:35:88:b9:68:b1:b3:b9:
6a:31:8c:79:00:c1:a1:3a:4f:08:59:74:f1:94:52:
cf:03:61:b0:4e:1d:30:ee:74:10:c2:7a:af:0b:5c:
86:ec:03:59:0e:9d:46:b3:23:1a:e9:72:cd:8e:1e:
7d:6e:fd:09:cf:21:93:87:08:97:29:69:f0:12:d6:
cd:35:0d:ab:1b:74:01:0c:e6:4a:e8:05:14:34:f1:
e4:3d:a9:04:d3:24:89:33:7e:79:b3:08:df:ba:51:
34:5b:a0:25:d5:13:cb:24:c3:68:92:41:0a:99:f5:
8d:be:aa:e7:71:b3:1e:40:fd:8b:92:8a:0e:e3:fc:
c7:57:34:13:03:e2:ed:44:56:e0:97:6b:41:00:f3:
f5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:35:95:3B:AF:D2:15:4A:2A:32:13:8D:60:B7:D6:1A:79:AF:C2:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4288E5BE2AE111F1B7D04EC8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:a1:05:bd:60:0f:8e:55:9e:d4:54:57:b3:45:f0:f0:5b:de:
9a:97:ee:b0:ba:1e:ae:f2:71:64:9d:6a:99:73:c9:c6:68:c2:
f4:9d:37:11:ba:89:7b:64:1b:7a:4b:66:8e:dd:21:34:17:85:
a3:2e:95:a3:e0:44:7a:7d:b2:ba:0c:68:80:b0:3b:20:de:e8:
91:2d:40:e9:25:9a:20:06:bd:76:9e:b3:28:3e:e0:c5:f4:9d:
c6:11:a7:8d:1f:bc:a0:b2:da:5d:a8:5d:0c:19:a4:b2:25:6f:
c0:8d:ce:f9:a1:4c:2f:f2:1b:20:b4:fa:ff:07:fe:e5:2b:30:
68:c4:25:ee:0c:8b:4b:82:79:aa:d9:e8:d5:85:99:61:94:43:
64:ae:78:d8:6b:a7:de:dd:63:8f:24:52:b9:dd:63:b4:a3:ae:
11:ff:c5:f6:bc:ce:e6:19:ad:b3:40:4f:82:a0:b1:cc:c0:d1:
c9:c4:50:fc:0f:47:87:3e:d9:3f:8d:27:3d:a8:97:10:3f:cd:
87:f5:e8:ab:0c:22:c1:c2:9a:dd:f6:68:be:ba:2d:7f:d8:ed:
f5:85:c9:6a:23:5b:f0:00:bd:f5:4b:5b:b9:79:81:d4:25:88:
61:77:59:aa:81:1a:77:9e:ae:f2:e6:a8:14:44:c8:97:70:4f:
1c:84:f1:07
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcGHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzI4MjAwMzU1WhcNMjYwNTE2MjAwMzU1WjAYMRYw
FAYDVQQDEw02OWM4MzQzMC03NjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAurXRcrhcfNIoEidPWyvxIBHnZV451Xky7Tm1uqrWDMiUDccD9x0sQVUM
ovQTUXf6WtbF/xyexY/fRbfLZ1cQ5MkombODUsFRFyWzbE1duwZ6/hzxHZKC10+n
7DeGv73rBa6ZHm2ntEbxKSavdHoNGzWIuWixs7lqMYx5AMGhOk8IWXTxlFLPA2Gw
Th0w7nQQwnqvC1yG7ANZDp1GsyMa6XLNjh59bv0JzyGThwiXKWnwEtbNNQ2rG3QB
DOZK6AUUNPHkPakE0ySJM355swjfulE0W6Al1RPLJMNokkEKmfWNvqrncbMeQP2L
kooO4/zHVzQTA+LtRFbgl2tBAPP1PQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJI1
lTuv0hVKKjITjWC31hp5r8I2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80Mjg4RTVCRTJBRTExMUYxQjdEMDRFQzhEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmt4QMA0GCSqGSIb3DQEB
CwUAA4IBAQCPoQW9YA+OVZ7UVFezRfDwW96al+6wuh6u8nFknWqZc8nGaML0nTcR
uol7ZBt6S2aO3SE0F4WjLpWj4ER6fbK6DGiAsDsg3uiRLUDpJZogBr12nrMoPuDF
9J3GEaeNH7ygstpdqF0MGaSyJW/Ajc75oUwv8hsgtPr/B/7lKzBoxCXuDItLgnmq
2ejVhZlhlENkrnjYa6fe3WOPJFK53WO0o64R/8X2vM7mGa2zQE+CoLHMwNHJxFD8
D0eHPtk/jSc9qJcQP82H9eirDCLBwprd9mi+ui1/2O31hclqI1vwAL31S1u5eYHU
JYhhd1mqgRp3nq7y5qgURMiXcE8chPEH
-----END CERTIFICATE-----
Generated at Sat Apr 18 10:24:36 2026 by rpki-client