Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FFBBC38372211F193FAECAACE1D38B0.roa
File: 4FFBBC38372211F193FAECAACE1D38B0.roa (raw, json)
Hash identifier: mluuhZIScHkTRaBZhR1CTvhTtlCo9TMdo/Rfp0qTEWU=
Subject key identifier: C9:86:A2:AE:A3:89:33:B9:D1:58:A9:81:2E:07:CD:EE:A5:D0:94:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C4FC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FFBBC38372211F193FAECAACE1D38B0.roa
Signing time: Mon 13 Apr 2026 10:19:54 +0000
ROA not before: Mon 13 Apr 2026 10:19:49 +0000
ROA not after: Sun 17 May 2026 10:19:49 +0000
asID: 22773
IP address blocks: 154.85.13.0/24 maxlen: 24
154.90.152.0/24 maxlen: 24
154.90.153.0/24 maxlen: 24
154.90.154.0/24 maxlen: 24
154.90.155.0/24 maxlen: 24
154.90.156.0/24 maxlen: 24
154.90.157.0/24 maxlen: 24
154.90.158.0/24 maxlen: 24
154.90.159.0/24 maxlen: 24
154.94.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115964 (0x1c4fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 13 10:19:49 2026 GMT
Not After : May 17 10:19:49 2026 GMT
Subject: CN=69dcc34a-1f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:35:65:34:cd:90:fc:ef:75:78:23:6f:f1:c0:
b0:6c:40:72:9f:bd:cd:d3:11:8c:a6:db:9c:b4:8a:
9f:2d:23:eb:3e:fa:98:51:ce:71:f2:e0:04:a3:4f:
a7:cf:74:96:94:a3:a8:08:a0:9c:75:96:64:2e:04:
a5:9a:36:b2:ac:aa:7f:8e:a6:a1:60:be:e7:43:fb:
af:09:73:80:3d:b5:58:74:73:16:92:17:c3:82:4d:
7d:98:30:85:07:3d:76:75:a4:55:4c:b0:5b:3f:e1:
68:67:18:7b:d3:cf:8b:18:bc:a3:79:be:15:8b:12:
f2:50:82:d4:dd:44:95:6d:2b:99:18:60:4c:da:bf:
89:bd:3c:25:c6:9c:8d:d6:b7:f0:a1:0a:24:6a:d8:
ca:ce:57:2e:af:af:95:42:92:a0:d4:01:75:8a:1a:
80:e9:b4:55:9e:06:49:8d:c5:51:2c:87:6e:48:01:
0c:1d:90:25:1a:24:cc:f6:d2:15:a5:c4:7c:ae:3d:
fb:b2:5e:2c:d7:48:67:b6:de:ed:01:b4:bc:31:23:
ee:1e:80:24:89:f7:ea:28:fa:75:d2:6c:5e:3f:ef:
39:4b:0c:39:80:d7:66:32:71:45:0f:c7:93:cb:06:
00:88:1a:a1:b2:8e:e3:17:c1:ae:78:8e:33:02:14:
bb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:86:A2:AE:A3:89:33:B9:D1:58:A9:81:2E:07:CD:EE:A5:D0:94:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FFBBC38372211F193FAECAACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.13.0/24
154.90.152.0/21
154.94.63.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:04:03:81:0f:0b:53:2b:30:d7:d6:72:1e:7c:a4:7d:4a:59:
2e:db:33:26:5f:78:7d:5e:91:9a:ec:d0:91:c3:67:c6:ee:28:
a0:6c:41:2b:8c:fb:24:a8:75:0d:fb:e0:ae:64:57:5a:bc:a0:
11:c5:4e:d5:aa:0c:25:a1:9b:b5:19:4e:66:45:b0:75:93:b6:
f7:75:aa:eb:0d:5c:bb:4e:30:66:ae:eb:fc:71:a5:b9:e1:9e:
7f:9f:69:7f:d4:61:01:73:5e:1a:12:72:d8:73:43:29:de:4b:
ec:55:fe:a9:c9:c3:fc:37:7a:88:11:77:fa:d2:e7:c5:67:7a:
17:2a:10:e5:fb:d6:c3:97:b2:a8:57:a9:d3:71:f7:5b:42:ec:
37:3a:28:fd:d5:8f:32:2a:fc:5c:df:70:c0:03:0a:cb:02:e8:
66:10:e1:c4:a4:14:ce:67:9a:88:76:be:5e:0d:9b:fd:73:54:
a0:5e:9f:bd:e4:96:6c:aa:ff:a1:6e:17:c4:8b:23:78:cc:49:
bb:2e:30:8f:fe:af:9b:18:fb:8a:f4:80:96:7f:4c:0b:e7:fd:
09:e5:b2:10:a7:a9:89:e4:81:d2:47:ff:20:fa:fa:5d:e8:61:
58:80:37:d5:65:5a:d5:ce:4d:4b:9f:f5:ef:05:e1:da:cb:5c:
7a:1c:46:00
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAcT8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDEzMTAxOTQ5WhcNMjYwNTE3MTAxOTQ5WjAYMRYw
FAYDVQQDEw02OWRjYzM0YS0xZjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuzVlNM2Q/O91eCNv8cCwbEByn73N0xGMptuctIqfLSPrPvqYUc5x8uAE
o0+nz3SWlKOoCKCcdZZkLgSlmjayrKp/jqahYL7nQ/uvCXOAPbVYdHMWkhfDgk19
mDCFBz12daRVTLBbP+FoZxh708+LGLyjeb4VixLyUILU3USVbSuZGGBM2r+JvTwl
xpyN1rfwoQokatjKzlcur6+VQpKg1AF1ihqA6bRVngZJjcVRLIduSAEMHZAlGiTM
9tIVpcR8rj37sl4s10hntt7tAbS8MSPuHoAkiffqKPp10mxeP+85Sww5gNdmMnFF
D8eTywYAiBqhso7jF8GueI4zAhS7jQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFMmG
oq6jiTO50VipgS4Hze6l0JSLMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80RkZCQkMzODM3MjIxMUYxOTNGQUVDQUFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAmlUNAwQDmlqYAwQAml4/
MA0GCSqGSIb3DQEBCwUAA4IBAQDMBAOBDwtTKzDX1nIefKR9Slku2zMmX3h9XpGa
7NCRw2fG7iigbEErjPskqHUN++CuZFdavKARxU7VqgwloZu1GU5mRbB1k7b3darr
DVy7TjBmruv8caW54Z5/n2l/1GEBc14aEnLYc0Mp3kvsVf6pycP8N3qIEXf60ufF
Z3oXKhDl+9bDl7KoV6nTcfdbQuw3Oij91Y8yKvxc33DAAwrLAuhmEOHEpBTOZ5qI
dr5eDZv9c1SgXp+95JZsqv+hbhfEiyN4zEm7LjCP/q+bGPuK9ICWf0wL5/0J5bIQ
p6mJ5IHSR/8g+vpd6GFYgDfVZVrVzk1Ln/XvBeHay1x6HEYA
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:25:31 2026 by rpki-client