Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5384F9AAFF4611F08B0520A2DAE4EC9C.roa
File: 5384F9AAFF4611F08B0520A2DAE4EC9C.roa (raw, json)
Hash identifier: OVQ6PB14BQV+dXae5Lukfsc514MGWwcPCZ2fHZNDRUw=
Subject key identifier: C5:EB:E4:82:00:89:FC:C1:E8:43:A8:AA:94:56:8C:DC:9D:93:D3:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B7F2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5384F9AAFF4611F08B0520A2DAE4EC9C.roa
Signing time: Sun 01 Feb 2026 08:16:37 +0000
ROA not before: Sun 01 Feb 2026 08:16:32 +0000
ROA not after: Sat 07 Mar 2026 08:16:32 +0000
asID: 399195
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112626 (0x1b7f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 1 08:16:32 2026 GMT
Not After : Mar 7 08:16:32 2026 GMT
Subject: CN=697f0be4-8a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2b:b2:b7:c3:d7:93:a8:74:66:37:a8:18:c7:
bc:52:ae:63:6a:0b:91:ff:3f:a7:32:0b:ef:f9:b9:
e2:cd:32:87:17:e6:54:4d:fe:9e:d7:5c:07:54:be:
0a:0f:a7:ab:42:2e:cd:77:50:a1:43:b1:1c:5c:88:
7f:fa:9e:b1:c7:ac:eb:14:c7:04:14:1b:73:c2:93:
7a:cd:a4:39:13:ff:ce:95:43:0f:a6:0c:f0:b3:b5:
2d:8c:a6:1d:12:6f:74:02:44:25:34:5d:6a:6a:2e:
2a:ea:ed:ea:8f:c2:21:c3:d4:05:a2:a4:69:51:1b:
38:e0:4c:27:6f:c2:14:de:cc:ef:f7:08:0f:f8:50:
e6:c7:4c:7d:c6:e3:3e:c7:a9:27:10:96:71:e7:46:
23:19:a4:93:c0:a8:d7:9f:57:51:a4:2c:ef:b3:b8:
cd:19:7a:8a:f1:e0:b4:b9:8c:c1:ee:4a:50:e9:5d:
2f:4b:9d:06:b0:64:01:8d:ba:bd:73:09:19:61:94:
72:25:c6:78:9d:c9:41:9e:fa:50:f9:28:28:6d:44:
77:19:d1:36:c9:82:5c:f2:00:41:29:d5:78:62:ba:
86:5d:0e:ec:cb:3e:1d:68:61:26:f9:03:39:e4:0d:
ca:75:c0:e5:94:af:0c:53:bc:db:8d:c8:87:67:72:
92:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EB:E4:82:00:89:FC:C1:E8:43:A8:AA:94:56:8C:DC:9D:93:D3:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5384F9AAFF4611F08B0520A2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
9f:92:e9:02:77:27:39:a3:da:27:ea:80:65:37:4a:34:5b:df:
e3:b5:49:9f:18:f7:81:30:3a:5f:1c:d4:7c:22:2b:78:89:47:
d9:90:be:34:5a:e2:f0:a3:a5:a5:75:b0:6a:ef:8e:81:08:da:
70:22:42:e4:6b:9d:b8:20:78:73:48:22:eb:3f:9a:74:73:eb:
32:02:0b:28:4b:a0:97:6a:19:2f:42:11:96:0c:7c:31:78:e9:
c7:10:d2:c7:a7:fb:09:24:64:ac:bb:22:09:47:cc:78:8a:e2:
42:c3:3c:58:31:36:0e:69:af:c8:94:e5:48:d4:85:c9:5c:d7:
ca:96:18:04:12:1c:d5:d8:c3:68:b2:5d:74:78:ee:4c:13:29:
00:2a:f0:28:51:88:e9:ab:3e:97:9a:ec:73:71:32:39:1f:fd:
1f:1f:e8:df:ce:f5:f9:a1:f7:41:c2:a4:fd:a9:f9:13:e2:6f:
30:5f:a7:41:2a:b9:58:38:bf:3f:f1:9b:63:6f:72:f7:be:c1:
0b:3d:5e:98:fd:c3:c0:dd:fd:7f:60:20:32:90:89:dd:6b:07:
f9:63:c3:74:65:8b:2f:7e:c7:09:d9:3a:12:cf:f9:3d:de:ab:
2c:3b:22:e9:7f:07:e1:06:08:8e:84:94:5a:6d:e0:da:a8:fa:
68:03:a0:65
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbfyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjAxMDgxNjMyWhcNMjYwMzA3MDgxNjMyWjAYMRYw
FAYDVQQDEw02OTdmMGJlNC04YTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnyuyt8PXk6h0ZjeoGMe8Uq5jaguR/z+nMgvv+bnizTKHF+ZUTf6e11wH
VL4KD6erQi7Nd1ChQ7EcXIh/+p6xx6zrFMcEFBtzwpN6zaQ5E//OlUMPpgzws7Ut
jKYdEm90AkQlNF1qai4q6u3qj8Ihw9QFoqRpURs44Ewnb8IU3szv9wgP+FDmx0x9
xuM+x6knEJZx50YjGaSTwKjXn1dRpCzvs7jNGXqK8eC0uYzB7kpQ6V0vS50GsGQB
jbq9cwkZYZRyJcZ4nclBnvpQ+SgobUR3GdE2yYJc8gBBKdV4YrqGXQ7syz4daGEm
+QM55A3KdcDllK8MU7zbjciHZ3KS1QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMXr
5IIAifzB6EOoqpRWjNydk9NDMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81Mzg0RjlBQUZGNDYxMUYwOEIwNTIwQTJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmlrgMA0GCSqGSIb3DQEB
CwUAA4IBAQCfkukCdyc5o9on6oBlN0o0W9/jtUmfGPeBMDpfHNR8Iit4iUfZkL40
WuLwo6WldbBq746BCNpwIkLka524IHhzSCLrP5p0c+syAgsoS6CXahkvQhGWDHwx
eOnHENLHp/sJJGSsuyIJR8x4iuJCwzxYMTYOaa/IlOVI1IXJXNfKlhgEEhzV2MNo
sl10eO5MEykAKvAoUYjpqz6XmuxzcTI5H/0fH+jfzvX5ofdBwqT9qfkT4m8wX6dB
KrlYOL8/8Ztjb3L3vsELPV6Y/cPA3f1/YCAykIndawf5Y8N0ZYsvfscJ2ToSz/k9
3qssOyLpfwfhBgiOhJRabeDaqPpoA6Bl
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:57 2026 by rpki-client