Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54873BF22E9D11F1B48B42D2DAE4EC9C.roa
File: 54873BF22E9D11F1B48B42D2DAE4EC9C.roa (raw, json)
Hash identifier: OzVDOHQvBvfaO+CF+Y3T24Rk8BSq+lXC0jdq54RKuHA=
Subject key identifier: AF:35:CD:98:C0:BB:77:9A:04:72:83:E3:8A:F6:75:8B:87:9C:B5:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C255
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54873BF22E9D11F1B48B42D2DAE4EC9C.roa
Signing time: Thu 02 Apr 2026 14:07:49 +0000
ROA not before: Thu 02 Apr 2026 14:07:44 +0000
ROA not after: Sun 10 May 2026 14:07:44 +0000
asID: 138915
IP address blocks: 154.90.42.0/23 maxlen: 24
154.90.44.0/23 maxlen: 24
154.90.48.0/23 maxlen: 24
154.90.50.0/23 maxlen: 24
154.90.52.0/23 maxlen: 24
154.90.54.0/23 maxlen: 24
154.90.56.0/23 maxlen: 24
154.90.58.0/23 maxlen: 24
154.90.60.0/23 maxlen: 24
154.90.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115285 (0x1c255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 14:07:44 2026 GMT
Not After : May 10 14:07:44 2026 GMT
Subject: CN=69ce7835-d017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bd:db:cb:9f:e1:e4:ab:ec:81:d0:da:10:e8:
70:b6:a4:51:f0:84:c8:57:d2:62:8e:4e:fc:95:79:
95:8f:97:88:16:0c:51:d3:11:7b:f5:a5:ae:7b:8f:
ad:f3:b1:5a:24:97:d1:1f:70:24:4a:32:fc:d4:17:
f0:3c:d6:c6:90:62:de:7b:a5:9b:4e:e1:12:7b:ff:
7a:93:e3:f1:38:61:b1:24:af:c4:21:cf:f2:e2:9b:
51:6e:ca:15:be:77:f1:c3:d3:c7:75:a1:d4:f4:65:
8e:c8:37:8b:8d:33:f3:05:6e:79:56:51:fd:e9:a8:
79:37:f8:01:dc:bd:70:63:06:3a:e2:4d:2b:b6:9d:
a8:b1:ac:c1:38:6a:0e:19:69:15:56:d1:6d:a4:4b:
22:10:77:61:fc:d5:63:89:af:a0:34:56:0b:52:46:
9e:f5:e2:dd:d0:8a:80:bf:90:e1:a6:85:c6:b1:82:
89:7e:8c:3d:25:fb:61:c6:cd:32:91:4b:2f:8a:43:
ef:40:4f:73:9e:0c:ab:53:44:19:51:ae:a8:13:2e:
b1:39:64:0c:a9:be:a7:8d:9a:c4:f9:a1:04:f6:d8:
42:7d:da:ed:65:cf:06:01:8d:e3:9c:a9:1f:b7:41:
48:b1:81:65:98:6f:d4:70:3f:a2:f5:35:72:f8:c2:
ad:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:35:CD:98:C0:BB:77:9A:04:72:83:E3:8A:F6:75:8B:87:9C:B5:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54873BF22E9D11F1B48B42D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.42.0-154.90.45.255
154.90.48.0/20
Signature Algorithm: sha256WithRSAEncryption
97:b9:6c:7b:f5:41:bd:3d:a6:88:99:a2:cc:98:4f:1c:c3:7d:
f5:a8:49:ca:95:eb:73:40:16:5e:b5:c1:fc:02:fc:0c:38:f3:
0e:99:40:6e:e5:5b:79:8e:bc:75:96:5c:0a:a6:91:7b:04:22:
6b:e3:47:88:81:bd:68:b0:a3:7f:a5:87:10:58:b3:7d:b3:97:
e3:8a:d5:fa:76:f1:3d:34:40:df:4c:f3:d4:64:95:91:c6:0a:
bd:dc:8c:f4:b8:d9:b1:d8:2c:bf:f9:d4:ed:23:be:b9:4d:34:
64:f6:02:4e:58:0d:28:f6:76:38:93:a8:0c:f9:ce:07:51:35:
64:28:61:af:05:f7:d8:b1:04:a1:5f:fe:56:a8:2d:4c:d9:fc:
18:50:60:2f:d8:4a:60:4a:ae:83:e6:d3:48:4d:e3:1d:9d:15:
79:89:aa:7f:6b:7e:3b:80:aa:26:4f:b3:d8:33:97:16:fa:ac:
40:82:aa:7c:17:8c:36:3b:82:92:d3:9f:af:0f:a3:e1:9a:0d:
d0:07:ec:df:aa:76:22:ae:50:fd:c0:06:86:d3:6d:ee:cf:f9:
ff:78:c2:c6:96:d3:14:0e:fe:e4:61:41:a0:48:f0:e3:74:17:
9b:a5:0f:c2:7a:5d:ad:b0:82:7b:9c:ef:87:98:4f:50:91:fa:
9b:cc:2c:bd
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAcJVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDAyMTQwNzQ0WhcNMjYwNTEwMTQwNzQ0WjAYMRYw
FAYDVQQDEw02OWNlNzgzNS1kMDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxL3by5/h5KvsgdDaEOhwtqRR8ITIV9Jijk78lXmVj5eIFgxR0xF79aWu
e4+t87FaJJfRH3AkSjL81BfwPNbGkGLee6WbTuESe/96k+PxOGGxJK/EIc/y4ptR
bsoVvnfxw9PHdaHU9GWOyDeLjTPzBW55VlH96ah5N/gB3L1wYwY64k0rtp2osazB
OGoOGWkVVtFtpEsiEHdh/NVjia+gNFYLUkae9eLd0IqAv5DhpoXGsYKJfow9Jfth
xs0ykUsvikPvQE9zngyrU0QZUa6oEy6xOWQMqb6njZrE+aEE9thCfdrtZc8GAY3j
nKkft0FIsYFlmG/UcD+i9TVy+MKt6wIDAQABo4ICszCCAq8wHQYDVR0OBBYEFK81
zZjAu3eaBHKD44r2dYuHnLUwMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81NDg3M0JGMjJFOUQxMUYxQjQ4QjQyRDJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAGaWioDBAGaWiwDBASa
WjAwDQYJKoZIhvcNAQELBQADggEBAJe5bHv1Qb09poiZosyYTxzDffWoScqV63NA
Fl61wfwC/Aw48w6ZQG7lW3mOvHWWXAqmkXsEImvjR4iBvWiwo3+lhxBYs32zl+OK
1fp28T00QN9M89RklZHGCr3cjPS42bHYLL/51O0jvrlNNGT2Ak5YDSj2djiTqAz5
zgdRNWQoYa8F99ixBKFf/laoLUzZ/BhQYC/YSmBKroPm00hN4x2dFXmJqn9rfjuA
qiZPs9gzlxb6rECCqnwXjDY7gpLTn68Po+GaDdAH7N+qdiKuUP3ABobTbe7P+f94
wsaW0xQO/uRhQaBI8ON0F5ulD8J6Xa2wgnuc74eYT1CR+pvMLL0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:12:36 2026 by rpki-client