Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57B121C2116E11F1895A55B2DAE4EC9C.roa
File: 57B121C2116E11F1895A55B2DAE4EC9C.roa (raw, json)
Hash identifier: jEFDuf42RAIiahhS9fHh8O6Ij2FVjXfyMDLH/xWbqMY=
Subject key identifier: E6:4C:EA:E4:C9:20:F7:FD:96:94:46:7F:22:68:BC:6B:CE:92:28:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB46
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57B121C2116E11F1895A55B2DAE4EC9C.roa
Signing time: Tue 24 Feb 2026 10:48:24 +0000
ROA not before: Tue 24 Feb 2026 10:48:19 +0000
ROA not after: Tue 31 Mar 2026 10:48:19 +0000
asID: 62240
IP address blocks: 154.195.6.0/24 maxlen: 24
154.195.7.0/24 maxlen: 24
154.195.16.0/24 maxlen: 24
154.195.17.0/24 maxlen: 24
154.195.18.0/24 maxlen: 24
154.195.19.0/24 maxlen: 24
154.195.20.0/24 maxlen: 24
154.195.21.0/24 maxlen: 24
154.195.22.0/24 maxlen: 24
154.195.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113478 (0x1bb46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 10:48:19 2026 GMT
Not After : Mar 31 10:48:19 2026 GMT
Subject: CN=699d81f8-2fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:4f:de:d8:60:4d:97:5c:74:2d:0a:e8:af:
e2:c4:ee:10:a9:7e:c8:92:86:f0:33:c5:83:fd:a3:
4e:23:f6:04:9d:b4:b9:a1:f5:e8:c1:0f:d2:22:d1:
52:42:22:2f:25:f3:18:bd:57:4c:06:8d:3c:82:a9:
7c:70:58:78:2b:55:80:bb:73:48:66:7a:59:51:eb:
15:81:7e:38:24:ce:6d:42:3e:81:a5:c6:49:dd:77:
aa:59:96:48:38:6b:24:5a:1d:c4:5f:6d:93:97:7e:
39:a1:60:af:3a:aa:74:bf:b6:60:27:41:9e:14:79:
f4:1f:83:78:12:64:9d:8d:52:b6:7a:57:38:fe:8a:
ec:e0:16:52:32:85:32:fe:3e:0c:e4:c2:3e:fd:4b:
aa:ff:4d:76:73:e0:aa:b8:b6:8f:08:6b:5f:3e:80:
82:e3:24:48:6e:c9:a0:d8:44:01:00:fa:c7:97:53:
5d:b5:ee:64:25:3b:14:34:d7:37:24:68:b3:ef:5b:
6f:1e:69:c5:50:02:fc:4f:31:d4:e2:3c:0d:73:39:
aa:2f:4a:07:5f:a8:f3:20:1c:ce:be:1f:d9:db:23:
1e:73:60:ff:94:51:d2:54:49:e4:43:86:b5:d4:91:
a7:49:ef:06:fe:90:54:35:6c:6b:45:88:14:da:88:
1c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4C:EA:E4:C9:20:F7:FD:96:94:46:7F:22:68:BC:6B:CE:92:28:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57B121C2116E11F1895A55B2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.6.0/23
154.195.16.0/21
Signature Algorithm: sha256WithRSAEncryption
69:21:c9:82:67:6b:a2:30:ba:de:18:8c:59:a3:9a:12:de:e7:
b3:65:4e:bc:5f:ea:52:5d:66:97:c3:92:e0:ec:23:1a:07:50:
aa:7d:cc:d9:ac:b0:f0:19:05:27:82:24:f1:24:86:c0:82:e0:
4e:e5:34:c3:19:c9:fe:91:83:c7:60:4e:24:61:ba:d1:2b:6f:
73:51:0d:d3:44:2e:69:58:94:69:57:91:f5:09:85:dc:70:28:
2f:f3:87:04:b3:b6:25:b2:47:57:d1:8a:31:20:46:bf:6b:ab:
3d:89:57:36:c2:af:8c:06:95:95:c6:65:eb:fc:ad:f2:64:11:
07:88:98:e0:fe:25:9c:aa:b8:c2:a5:2c:28:2d:79:09:0a:ef:
3c:5b:26:63:b3:1e:80:61:7e:1e:02:d1:27:6c:85:e1:65:a5:
78:6e:c6:9e:c0:e8:43:5b:85:ca:8e:6e:80:62:fd:d9:30:b4:
ea:4e:16:2a:93:51:18:49:11:30:8c:ab:50:94:89:4b:bf:34:
88:78:71:69:2a:a9:34:f8:94:1d:91:6e:64:2f:f0:dc:c1:0d:
86:cf:6b:8c:73:d9:6a:a9:09:cb:79:fe:36:9c:ee:63:3a:90:
11:c3:bf:b4:e6:de:dc:9c:21:55:af:85:33:26:79:8a:bc:f8:
3c:96:6a:f7
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAbtGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjI0MTA0ODE5WhcNMjYwMzMxMTA0ODE5WjAYMRYw
FAYDVQQDEw02OTlkODFmOC0yZmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApalP3thgTZdcdC0K6K/ixO4QqX7IkobwM8WD/aNOI/YEnbS5ofXowQ/S
ItFSQiIvJfMYvVdMBo08gql8cFh4K1WAu3NIZnpZUesVgX44JM5tQj6BpcZJ3Xeq
WZZIOGskWh3EX22Tl345oWCvOqp0v7ZgJ0GeFHn0H4N4EmSdjVK2elc4/ors4BZS
MoUy/j4M5MI+/Uuq/012c+CquLaPCGtfPoCC4yRIbsmg2EQBAPrHl1Ndte5kJTsU
NNc3JGiz71tvHmnFUAL8TzHU4jwNczmqL0oHX6jzIBzOvh/Z2yMec2D/lFHSVEnk
Q4a11JGnSe8G/pBUNWxrRYgU2ogcvQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFOZM
6uTJIPf9lpRGfyJovGvOkihvMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81N0IxMjFDMjExNkUxMUYxODk1QTU1QjJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBmsMGAwQDmsMQMA0GCSqG
SIb3DQEBCwUAA4IBAQBpIcmCZ2uiMLreGIxZo5oS3uezZU68X+pSXWaXw5Lg7CMa
B1CqfczZrLDwGQUngiTxJIbAguBO5TTDGcn+kYPHYE4kYbrRK29zUQ3TRC5pWJRp
V5H1CYXccCgv84cEs7YlskdX0YoxIEa/a6s9iVc2wq+MBpWVxmXr/K3yZBEHiJjg
/iWcqrjCpSwoLXkJCu88WyZjsx6AYX4eAtEnbIXhZaV4bsaewOhDW4XKjm6AYv3Z
MLTqThYqk1EYSREwjKtQlIlLvzSIeHFpKqk0+JQdkW5kL/DcwQ2Gz2uMc9lqqQnL
ef42nO5jOpARw7+05t7cnCFVr4UzJnmKvPg8lmr3
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:34 2026 by rpki-client