Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B30158A119411F197685D99DAE4EC9C.roa
File: 5B30158A119411F197685D99DAE4EC9C.roa (raw, json)
Hash identifier: HPz/oqSZhSKmiR+mG0+wLl7QC2po7whHjovyqVqkbWA=
Subject key identifier: 98:F2:C1:13:F4:19:37:3A:BD:F6:6B:4F:A5:BF:FA:17:19:4E:E5:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB7A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B30158A119411F197685D99DAE4EC9C.roa
Signing time: Tue 24 Feb 2026 15:20:31 +0000
ROA not before: Tue 24 Feb 2026 15:20:27 +0000
ROA not after: Sat 04 Apr 2026 15:20:27 +0000
asID: 20326
IP address blocks: 154.194.32.0/24 maxlen: 24
154.194.192.0/23 maxlen: 24
154.194.206.0/24 maxlen: 24
154.198.165.0/24 maxlen: 24
154.198.166.0/23 maxlen: 24
154.202.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113530 (0x1bb7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 15:20:27 2026 GMT
Not After : Apr 4 15:20:27 2026 GMT
Subject: CN=699dc1bf-d8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8d:94:1b:0b:e7:24:c8:c4:6b:6a:20:1b:2f:
45:30:7f:c8:70:7b:58:ab:6c:f7:50:f3:bc:67:f9:
75:d4:06:6a:0f:7b:b1:7e:64:1c:e0:89:3f:40:31:
fc:d0:32:89:4e:77:8a:7e:16:04:8d:b9:2f:12:63:
9e:5a:4f:45:23:5e:05:0a:c1:db:04:f0:b2:f2:e3:
c6:9a:08:c0:d2:bf:1b:a3:84:e0:7d:09:d5:e7:a0:
c1:54:fe:2e:4d:fa:75:d6:1b:e3:b7:56:72:82:70:
98:b2:9d:ad:38:e6:49:83:67:67:95:a7:e4:33:c3:
7b:86:07:b7:ad:7a:5e:34:69:05:54:5d:55:f4:00:
f1:3c:8e:db:c9:f9:61:cf:47:8f:bf:c6:f8:23:87:
2a:92:0e:72:3c:fb:83:be:74:33:3e:2e:13:27:b2:
70:48:8b:92:06:bd:f4:9d:b8:e8:37:52:35:6c:74:
7f:91:02:ed:79:5d:c9:7a:10:fd:5a:78:f4:da:66:
b4:85:38:3a:f5:d5:97:f6:dc:9e:55:2e:f4:e2:a9:
87:b8:a9:83:6f:b1:96:8d:53:fa:cc:9c:0c:a0:d9:
a9:5f:14:e0:8d:b1:f1:c7:5f:cf:34:bf:34:37:c1:
74:f0:bf:51:fe:77:00:73:d0:a3:ad:55:8f:4f:4b:
5d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F2:C1:13:F4:19:37:3A:BD:F6:6B:4F:A5:BF:FA:17:19:4E:E5:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B30158A119411F197685D99DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.32.0/24
154.194.192.0/23
154.194.206.0/24
154.198.165.0-154.198.167.255
154.202.75.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:de:3c:e2:4f:d2:1c:57:12:02:ec:6e:bc:49:92:bd:ae:e6:
52:33:3f:a4:dd:f1:f3:ab:40:c8:d4:67:54:3a:a3:26:e0:73:
92:c1:cf:c3:0b:79:ba:e8:0c:b7:e8:dc:5d:33:10:48:7c:b7:
e8:54:45:c1:ab:b1:e8:1e:a8:e9:63:31:a1:1c:2e:0a:43:1c:
ac:de:0b:82:54:1e:6f:7a:69:85:a4:19:52:42:06:33:50:f0:
35:b3:71:78:eb:86:89:e1:3d:bc:9d:c4:ca:96:af:cf:8b:3b:
53:b1:ed:b6:f0:23:cb:59:86:07:87:4f:5d:f4:24:a9:2e:c8:
84:bc:b3:fd:41:5f:1d:28:a6:f3:02:d6:8e:0a:f5:c0:78:f0:
c5:13:b6:2f:5a:d0:a4:50:05:6c:38:61:da:35:54:ea:14:e0:
0b:ce:c6:15:46:b0:50:cd:82:f2:ae:65:c2:97:c5:ff:f1:a5:
bd:e6:13:3d:68:25:25:44:f7:ad:65:1f:e4:96:f1:2f:39:d3:
2e:84:da:1e:5e:32:8c:d2:c9:eb:81:7e:f4:9a:8f:02:a4:e0:
51:dc:68:8f:f2:8f:5f:24:cf:ec:fc:7e:d9:44:91:9a:69:9d:
e3:d7:17:98:e0:4d:c0:fb:6d:37:25:25:94:bd:ec:c6:a8:11:
ee:4d:18:09
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgIDAbt6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjI0MTUyMDI3WhcNMjYwNDA0MTUyMDI3WjAYMRYw
FAYDVQQDEw02OTlkYzFiZi1kOGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3o2UGwvnJMjEa2ogGy9FMH/IcHtYq2z3UPO8Z/l11AZqD3uxfmQc4Ik/
QDH80DKJTneKfhYEjbkvEmOeWk9FI14FCsHbBPCy8uPGmgjA0r8bo4TgfQnV56DB
VP4uTfp11hvjt1ZygnCYsp2tOOZJg2dnlafkM8N7hge3rXpeNGkFVF1V9ADxPI7b
yflhz0ePv8b4I4cqkg5yPPuDvnQzPi4TJ7JwSIuSBr30nbjoN1I1bHR/kQLteV3J
ehD9Wnj02ma0hTg69dWX9tyeVS704qmHuKmDb7GWjVP6zJwMoNmpXxTgjbHxx1/P
NL80N8F08L9R/ncAc9CjrVWPT0tdtQIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFJjy
wRP0GTc6vfZrT6W/+hcZTuXlMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81QjMwMTU4QTExOTQxMUYxOTc2ODVEOTlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAmsIgAwQBmsLAAwQAmsLO
MAwDBACaxqUDBAOaxqADBACaykswDQYJKoZIhvcNAQELBQADggEBALXePOJP0hxX
EgLsbrxJkr2u5lIzP6Td8fOrQMjUZ1Q6oybgc5LBz8MLebroDLfo3F0zEEh8t+hU
RcGrsegeqOljMaEcLgpDHKzeC4JUHm96aYWkGVJCBjNQ8DWzcXjrhonhPbydxMqW
r8+LO1Ox7bbwI8tZhgeHT130JKkuyIS8s/1BXx0opvMC1o4K9cB48MUTti9a0KRQ
BWw4Ydo1VOoU4AvOxhVGsFDNgvKuZcKXxf/xpb3mEz1oJSVE961lH+SW8S850y6E
2h5eMozSyeuBfvSajwKk4FHcaI/yj18kz+z8ftlEkZppnePXF5jgTcD7bTclJZS9
7MaoEe5NGAk=
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:25:32 2026 by rpki-client