Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/567E48E0FF6011F09B9804BDDAE4EC9C.roa
File: 567E48E0FF6011F09B9804BDDAE4EC9C.roa (raw, json)
Hash identifier: /eeeIeHBXG/t8o3K+L8hQK8lDj053yq6jgY19kbjsoE=
Subject key identifier: 67:70:FD:D3:27:0C:47:11:26:F9:32:5F:7F:E9:2B:73:A1:CB:DC:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B80C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/567E48E0FF6011F09B9804BDDAE4EC9C.roa
Signing time: Sun 01 Feb 2026 11:22:48 +0000
ROA not before: Sun 01 Feb 2026 11:22:43 +0000
ROA not after: Sat 07 Mar 2026 11:22:43 +0000
asID: 399195
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112652 (0x1b80c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 1 11:22:43 2026 GMT
Not After : Mar 7 11:22:43 2026 GMT
Subject: CN=697f3788-8cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:59:0f:04:87:67:d8:6f:cb:a0:8f:36:d0:0e:
6b:03:aa:64:9a:56:17:73:85:af:f2:f3:31:de:0f:
28:16:70:2e:94:63:a8:6d:8f:a1:72:21:21:5a:ca:
5b:ee:44:aa:5a:27:a2:e9:8e:f4:d0:5a:11:38:8f:
47:9b:99:08:f2:9d:eb:7d:f1:76:32:d2:69:c7:cb:
f1:fb:7e:0d:3e:7b:87:98:bd:3d:8a:28:b3:12:3e:
b8:06:71:9d:a4:e1:30:10:84:1f:03:cf:af:0a:86:
bd:dd:f1:8a:b0:04:d9:f6:7e:6c:d9:e1:82:47:56:
66:d4:f7:ab:6c:41:a2:60:4c:8e:54:03:1a:69:f5:
e8:2e:e5:e9:01:b8:97:48:9c:b4:d7:a8:bc:63:95:
89:f5:05:2d:5f:9b:da:ca:0b:5f:63:bd:ea:bc:04:
08:27:51:f8:f9:1c:f8:ee:97:fb:0d:f1:30:8e:ef:
e7:ea:6e:35:86:e4:34:47:84:3c:f2:d1:7f:1e:17:
54:98:1f:58:f0:29:95:dc:25:5d:91:0c:ac:7c:9c:
f9:d5:1c:60:6f:86:36:34:2c:f4:01:56:de:f1:2c:
48:38:79:9d:b7:0c:b7:76:83:0b:19:04:ab:00:51:
4d:e6:42:3c:ad:25:c3:a5:e3:57:71:7e:45:0d:e3:
9c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:70:FD:D3:27:0C:47:11:26:F9:32:5F:7F:E9:2B:73:A1:CB:DC:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/567E48E0FF6011F09B9804BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
5d:8d:20:d7:ca:d7:2f:76:f4:f3:eb:f3:6b:e5:5a:be:6e:d2:
53:b6:db:75:b7:09:69:47:29:32:8e:f8:5e:2b:a3:0d:66:05:
e0:06:08:de:64:b3:35:19:3a:38:97:a2:0a:f1:8f:ce:da:a3:
18:5e:23:3a:87:c4:ad:c4:8a:b4:5c:41:a1:44:f2:a2:3f:48:
83:ad:c7:63:04:94:97:67:c5:60:68:3e:dc:dc:95:1e:d3:51:
61:41:4d:b9:3c:43:29:d4:ad:5c:48:88:18:41:b1:df:1f:77:
6e:e0:e1:54:85:2c:d1:8b:ab:c2:13:bc:36:3a:77:57:58:51:
b6:7f:24:d9:53:fe:05:f3:d8:1f:a9:c2:82:4d:2e:c0:d5:ce:
b0:c7:ed:0b:b6:50:e2:a2:44:62:a6:97:40:7b:f8:79:fa:dc:
98:54:d9:b0:7d:20:b8:fa:d8:ea:c7:3e:9b:6a:fb:fc:88:ac:
26:02:d5:b1:72:fd:7a:58:ac:e9:27:6a:61:90:c2:19:6c:f8:
74:28:03:bd:e1:4f:ad:fb:f8:be:87:99:30:c1:b9:07:dc:12:
24:be:28:9a:2e:28:f5:49:64:35:02:11:69:95:0a:d6:37:bd:
e7:b7:78:0c:ac:11:c4:41:7f:58:0d:93:1a:e1:1c:75:87:1e:
2c:6a:47:ad
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbgMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjAxMTEyMjQzWhcNMjYwMzA3MTEyMjQzWjAYMRYw
FAYDVQQDEw02OTdmMzc4OC04Y2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2FkPBIdn2G/LoI820A5rA6pkmlYXc4Wv8vMx3g8oFnAulGOobY+hciEh
Wspb7kSqWiei6Y700FoROI9Hm5kI8p3rffF2MtJpx8vx+34NPnuHmL09iiizEj64
BnGdpOEwEIQfA8+vCoa93fGKsATZ9n5s2eGCR1Zm1PerbEGiYEyOVAMaafXoLuXp
AbiXSJy016i8Y5WJ9QUtX5vaygtfY73qvAQIJ1H4+Rz47pf7DfEwju/n6m41huQ0
R4Q88tF/HhdUmB9Y8CmV3CVdkQysfJz51Rxgb4Y2NCz0AVbe8SxIOHmdtwy3doML
GQSrAFFN5kI8rSXDpeNXcX5FDeOcawIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGdw
/dMnDEcRJvkyX3/pK3Ohy9zLMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81NjdFNDhFMEZGNjAxMUYwOUI5ODA0QkREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmlrgMA0GCSqGSIb3DQEB
CwUAA4IBAQBdjSDXytcvdvTz6/Nr5Vq+btJTttt1twlpRykyjvheK6MNZgXgBgje
ZLM1GTo4l6IK8Y/O2qMYXiM6h8StxIq0XEGhRPKiP0iDrcdjBJSXZ8VgaD7c3JUe
01FhQU25PEMp1K1cSIgYQbHfH3du4OFUhSzRi6vCE7w2OndXWFG2fyTZU/4F89gf
qcKCTS7A1c6wx+0LtlDiokRippdAe/h5+tyYVNmwfSC4+tjqxz6bavv8iKwmAtWx
cv16WKzpJ2phkMIZbPh0KAO94U+t+/i+h5kwwbkH3BIkviiaLij1SWQ1AhFplQrW
N73nt3gMrBHEQX9YDZMa4Rx1hx4saket
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:50:32 2026 by rpki-client