Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4666E76E30D911F1810370D3DAE4EC9C.roa
File: 4666E76E30D911F1810370D3DAE4EC9C.roa (raw, json)
Hash identifier: UmNPKvWGtGJuQFrVvay93xvTUUxljox7al1SgQzcSek=
Subject key identifier: 98:DA:BB:B0:05:5A:03:11:06:EE:9A:B4:26:56:D2:04:39:DB:28:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C318
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4666E76E30D911F1810370D3DAE4EC9C.roa
Signing time: Sun 05 Apr 2026 10:21:58 +0000
ROA not before: Sun 05 Apr 2026 10:21:51 +0000
ROA not after: Sun 03 May 2026 10:21:51 +0000
asID: 1405
IP address blocks: 154.83.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115480 (0x1c318)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 5 10:21:51 2026 GMT
Not After : May 3 10:21:51 2026 GMT
Subject: CN=69d237c5-d1ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:0d:e3:ae:16:b6:c8:c0:51:b9:03:0c:85:
14:ab:c3:91:c5:97:29:7d:95:72:bb:3e:0a:7c:cc:
8e:bb:40:c1:50:f4:19:a8:b9:db:7b:77:98:4d:8e:
69:51:c9:6f:21:c4:98:d9:c4:0c:7c:5d:17:2c:fb:
d6:c1:37:5d:0e:77:5c:5b:16:40:57:15:af:3b:c8:
e7:19:19:c6:b0:e6:dd:5b:93:83:7f:47:cc:b5:c7:
5b:03:60:ca:a2:55:9c:59:0f:4b:bf:e1:d4:3e:76:
0f:2c:67:b4:98:4b:9d:a6:c9:fc:2e:46:1c:24:de:
08:8c:4b:7d:a8:6e:68:84:f8:7e:41:6c:92:55:52:
8f:c7:3c:fb:64:45:23:88:ff:fc:fe:79:29:78:f0:
3b:77:16:b0:69:18:19:87:ff:75:9f:a6:7d:cd:27:
54:b9:e8:7b:3d:ec:fb:b7:73:5e:da:44:4d:a0:6b:
81:9f:11:74:57:3d:66:13:86:98:ce:5f:4c:1d:1c:
f8:e5:0a:3e:de:d7:3b:a8:6a:5f:82:90:d8:8c:1a:
1b:f9:eb:cc:38:15:1a:2c:1f:53:d7:df:a7:c8:b5:
64:0f:60:24:d7:48:6d:2a:c8:c8:b4:95:a8:41:f0:
d7:0c:ea:6e:18:c8:88:ea:08:87:df:69:15:3d:99:
54:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DA:BB:B0:05:5A:03:11:06:EE:9A:B4:26:56:D2:04:39:DB:28:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4666E76E30D911F1810370D3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.88.0/23
Signature Algorithm: sha256WithRSAEncryption
65:70:1e:3d:d5:d1:e0:fb:e7:9c:d4:80:ce:34:3e:02:22:ae:
96:1e:ff:44:1f:39:5a:64:63:94:31:72:46:85:13:3e:ef:df:
f6:41:9c:d0:9e:f9:e3:8b:1e:ef:38:2b:94:5a:7e:4a:5d:6f:
e8:42:31:f2:58:bd:05:1b:be:9e:43:2e:3e:6e:12:cf:51:7a:
02:43:41:7e:de:91:6d:1c:b0:89:bb:77:14:43:17:0f:cb:77:
7a:0c:73:f9:b4:9b:e8:9d:bb:c6:b3:cb:75:96:9e:4c:1f:e3:
9b:28:29:ff:63:43:e9:46:4c:fb:4a:c0:94:84:63:69:06:ac:
d0:e6:3e:77:00:60:08:b7:a0:ae:65:01:e7:9e:37:69:ed:4d:
61:13:43:b6:68:24:1d:50:74:02:67:6a:d5:ee:da:38:0a:7e:
1c:55:0d:4b:7c:4e:5d:d3:dc:d5:7f:dc:23:2c:09:b4:83:df:
4f:a6:ab:3e:26:42:c2:1e:ed:15:c8:78:62:78:7d:7c:c1:3d:
2b:1c:d0:a2:8c:aa:3f:02:7f:16:11:7a:b9:79:54:59:4d:6d:
dc:7a:3b:c1:72:45:52:0a:a4:4f:65:63:33:d0:d0:ec:6a:c8:
b4:12:65:5f:81:47:e4:6b:12:b2:7d:20:c5:35:d4:cd:07:82:
97:7a:e8:15
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcMYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDA1MTAyMTUxWhcNMjYwNTAzMTAyMTUxWjAYMRYw
FAYDVQQDEw02OWQyMzdjNS1kMWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtRgN464WtsjAUbkDDIUUq8ORxZcpfZVyuz4KfMyOu0DBUPQZqLnbe3eY
TY5pUclvIcSY2cQMfF0XLPvWwTddDndcWxZAVxWvO8jnGRnGsObdW5ODf0fMtcdb
A2DKolWcWQ9Lv+HUPnYPLGe0mEudpsn8LkYcJN4IjEt9qG5ohPh+QWySVVKPxzz7
ZEUjiP/8/nkpePA7dxawaRgZh/91n6Z9zSdUueh7Pez7t3Ne2kRNoGuBnxF0Vz1m
E4aYzl9MHRz45Qo+3tc7qGpfgpDYjBob+evMOBUaLB9T19+nyLVkD2Ak10htKsjI
tJWoQfDXDOpuGMiI6giH32kVPZlUFQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJja
u7AFWgMRBu6atCZW0gQ52yg2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NjY2RTc2RTMwRDkxMUYxODEwMzcwRDNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlNYMA0GCSqGSIb3DQEB
CwUAA4IBAQBlcB491dHg++ec1IDOND4CIq6WHv9EHzlaZGOUMXJGhRM+79/2QZzQ
nvnjix7vOCuUWn5KXW/oQjHyWL0FG76eQy4+bhLPUXoCQ0F+3pFtHLCJu3cUQxcP
y3d6DHP5tJvonbvGs8t1lp5MH+ObKCn/Y0PpRkz7SsCUhGNpBqzQ5j53AGAIt6Cu
ZQHnnjdp7U1hE0O2aCQdUHQCZ2rV7to4Cn4cVQ1LfE5d09zVf9wjLAm0g99Ppqs+
JkLCHu0VyHhieH18wT0rHNCijKo/An8WEXq5eVRZTW3cejvBckVSCqRPZWMz0NDs
asi0EmVfgUfkaxKyfSDFNdTNB4KXeugV
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:29:04 2026 by rpki-client