Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55D663FEFF4811F085BC70AEDAE4EC9C.roa
File: 55D663FEFF4811F085BC70AEDAE4EC9C.roa (raw, json)
Hash identifier: /y8OTzefS0RSVJbNmnlSxG6yta0Yeq9jrzIEkRad8go=
Subject key identifier: 5E:32:A1:D3:9A:46:A0:D9:88:DA:13:C8:AC:DD:DA:58:44:D6:61:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B7F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55D663FEFF4811F085BC70AEDAE4EC9C.roa
Signing time: Sun 01 Feb 2026 08:31:00 +0000
ROA not before: Sun 01 Feb 2026 08:30:55 +0000
ROA not after: Sat 07 Mar 2026 08:30:55 +0000
asID: 398478
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112632 (0x1b7f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 1 08:30:55 2026 GMT
Not After : Mar 7 08:30:55 2026 GMT
Subject: CN=697f0f43-ba62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:bb:71:6a:d2:57:fb:84:81:04:8d:a5:fa:
7b:d2:0e:28:b3:a2:2e:06:2b:de:9e:a2:63:85:a1:
1c:b5:80:1f:7f:c7:a4:ca:49:15:fe:c8:89:77:4e:
4b:64:1a:0c:86:c7:ad:16:db:29:5d:a9:c7:bc:be:
b0:d7:d8:14:58:56:59:58:da:e4:d5:1a:a0:64:d6:
02:79:f1:fb:13:4f:1f:5e:73:9c:43:4f:14:e5:2e:
75:6c:d4:be:27:c0:83:c3:57:5c:16:98:65:ac:88:
c5:66:75:88:05:1c:11:5e:70:ce:96:8a:62:c8:fb:
c0:2d:74:66:d2:b6:8d:da:c1:da:d0:bb:f7:a4:5d:
11:b0:c4:20:84:6a:49:ad:8c:88:aa:c7:8e:d2:60:
b5:6e:76:61:f8:51:25:90:10:e6:97:f7:62:a3:8d:
56:2a:8c:ca:b3:d1:e2:3f:45:75:74:2e:21:49:df:
d8:37:7f:29:2a:7e:9b:c1:56:a3:00:ba:36:97:89:
77:ee:69:19:2e:61:ae:60:4e:f9:cb:43:5d:46:94:
c1:f3:8c:fe:8a:85:c8:0b:9b:b8:59:23:82:a4:80:
30:93:e7:dc:9b:21:16:c4:f5:45:ac:08:4d:2b:be:
6d:df:25:da:ec:df:2f:3c:e9:db:ec:1a:c1:9c:0c:
cc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:32:A1:D3:9A:46:A0:D9:88:DA:13:C8:AC:DD:DA:58:44:D6:61:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55D663FEFF4811F085BC70AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
54:19:a3:8b:61:28:d4:6f:e8:38:7a:89:57:4a:05:57:b0:36:
5d:8a:e8:56:98:33:cb:d9:8e:f0:33:0f:ea:85:46:4b:50:3f:
96:c5:f9:6a:54:a8:2c:72:5b:8e:cc:dd:09:f6:d5:99:9e:6b:
f2:7c:1e:5c:da:c4:a5:75:c2:97:93:19:e8:1e:ae:6f:b1:12:
fd:74:d3:7c:2b:ea:f7:66:78:d8:9d:8f:d8:f7:fa:9c:1d:d1:
74:5c:61:61:ee:b1:5d:89:a3:bd:e0:1f:19:f8:38:6d:7d:6b:
c2:5f:35:f8:cc:a3:0b:38:9a:a4:67:2a:49:4d:92:a9:37:ea:
1a:ab:93:75:75:03:25:b2:1d:c2:95:fd:39:31:71:4f:69:1a:
e5:1f:64:c8:55:1a:04:57:20:c6:55:84:eb:21:9c:23:62:2d:
52:16:c9:1c:01:5a:c1:73:77:67:ca:7e:ed:99:e7:de:a5:41:
93:de:46:6e:b7:85:f9:f9:b9:a7:43:6f:cb:db:33:94:ff:e3:
b8:64:a2:a8:ee:87:f6:f0:58:67:c9:8e:4a:3e:5a:3f:b8:57:
27:8f:6d:36:19:96:69:12:1f:95:2e:57:b4:db:1e:ca:e8:b7:
a9:64:1a:d3:e5:8f:95:de:63:7f:7d:09:81:5e:92:b5:47:3f:
d1:15:ad:57
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbf4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjAxMDgzMDU1WhcNMjYwMzA3MDgzMDU1WjAYMRYw
FAYDVQQDEw02OTdmMGY0My1iYTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtoO7cWrSV/uEgQSNpfp70g4os6IuBivenqJjhaEctYAff8ekykkV/siJ
d05LZBoMhsetFtspXanHvL6w19gUWFZZWNrk1RqgZNYCefH7E08fXnOcQ08U5S51
bNS+J8CDw1dcFphlrIjFZnWIBRwRXnDOlopiyPvALXRm0raN2sHa0Lv3pF0RsMQg
hGpJrYyIqseO0mC1bnZh+FElkBDml/dio41WKozKs9HiP0V1dC4hSd/YN38pKn6b
wVajALo2l4l37mkZLmGuYE75y0NdRpTB84z+ioXIC5u4WSOCpIAwk+fcmyEWxPVF
rAhNK75t3yXa7N8vPOnb7BrBnAzM0wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF4y
odOaRqDZiNoTyKzd2lhE1mHJMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81NUQ2NjNGRUZGNDgxMUYwODVCQzcwQUVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmlrgMA0GCSqGSIb3DQEB
CwUAA4IBAQBUGaOLYSjUb+g4eolXSgVXsDZdiuhWmDPL2Y7wMw/qhUZLUD+Wxflq
VKgscluOzN0J9tWZnmvyfB5c2sSldcKXkxnoHq5vsRL9dNN8K+r3ZnjYnY/Y9/qc
HdF0XGFh7rFdiaO94B8Z+DhtfWvCXzX4zKMLOJqkZypJTZKpN+oaq5N1dQMlsh3C
lf05MXFPaRrlH2TIVRoEVyDGVYTrIZwjYi1SFskcAVrBc3dnyn7tmefepUGT3kZu
t4X5+bmnQ2/L2zOU/+O4ZKKo7of28FhnyY5KPlo/uFcnj202GZZpEh+VLle02x7K
6LepZBrT5Y+V3mN/fQmBXpK1Rz/RFa1X
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:17 2026 by rpki-client