Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/645CF4762ED011F191E9BBF5DAE4EC9C.roa
File: 645CF4762ED011F191E9BBF5DAE4EC9C.roa (raw, json)
Hash identifier: jwlszaETgyJjPCwvvZUMbowIh28v6f6N51aKNPYi95w=
Subject key identifier: DE:8A:AF:9C:62:78:EA:04:BE:8C:04:E4:FB:2D:85:85:0E:A1:EF:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C27F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/645CF4762ED011F191E9BBF5DAE4EC9C.roa
Signing time: Thu 02 Apr 2026 20:13:20 +0000
ROA not before: Thu 02 Apr 2026 20:13:15 +0000
ROA not after: Sun 10 May 2026 20:13:15 +0000
asID: 138915
IP address blocks: 154.223.44.0/24 maxlen: 24
154.223.45.0/24 maxlen: 24
154.223.46.0/24 maxlen: 24
154.223.47.0/24 maxlen: 24
154.223.48.0/24 maxlen: 24
154.223.49.0/24 maxlen: 24
154.223.51.0/24 maxlen: 24
154.223.52.0/23 maxlen: 24
154.223.54.0/23 maxlen: 24
154.223.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 15:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115327 (0x1c27f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 20:13:15 2026 GMT
Not After : May 10 20:13:15 2026 GMT
Subject: CN=69cecde0-538c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:32:75:f5:30:51:8f:f3:33:e9:c2:b7:a1:1c:
5c:10:b3:78:5e:6a:f0:68:8a:64:e5:7e:04:d8:dc:
e8:94:2b:16:0d:39:f5:f8:0b:e1:0d:7a:6e:0d:99:
b3:9a:fa:ba:80:2b:a8:85:94:9b:93:12:23:15:89:
fb:6d:eb:3f:53:7e:9b:23:59:bd:b9:1b:e0:2b:c9:
be:1a:2c:44:05:a8:c9:1c:d9:58:75:d7:bf:c9:53:
fc:c1:71:f2:65:c6:56:b4:eb:d1:c6:2c:86:99:22:
c7:4b:97:5d:7e:b1:e7:b0:12:78:54:a3:68:25:a7:
60:9c:e8:ac:60:c5:a8:fd:90:7f:ba:1f:e8:7a:a7:
56:b0:08:b5:ff:24:a0:5e:9b:60:ef:0f:fe:47:fc:
c2:37:b6:3f:38:53:ce:66:c3:5c:43:e9:ee:48:c0:
3e:ef:04:bd:b9:fe:0c:dd:1b:00:e6:c6:ef:9c:d0:
86:e5:e6:c9:28:ac:a5:35:e7:98:c4:97:10:5b:a9:
bf:ae:1f:61:33:c2:d0:2c:a4:e9:0c:21:74:e3:ec:
f1:aa:ef:03:46:e5:70:30:cc:2f:58:aa:e3:81:68:
8a:70:9c:8d:fe:d3:b3:6c:57:b9:c2:10:94:8c:05:
fa:ad:c6:a3:79:b2:81:28:a5:e0:3e:db:6c:27:5b:
4e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8A:AF:9C:62:78:EA:04:BE:8C:04:E4:FB:2D:85:85:0E:A1:EF:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/645CF4762ED011F191E9BBF5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.44.0-154.223.49.255
154.223.51.0-154.223.57.255
Signature Algorithm: sha256WithRSAEncryption
d4:d9:10:86:01:22:54:cf:b9:7d:a6:76:98:33:0d:0e:cb:05:
59:a4:c3:51:75:09:5f:60:25:fd:e7:20:72:53:1c:a1:93:76:
8b:ba:97:40:0b:65:a3:ef:77:96:67:e1:bf:49:7d:3c:1e:d7:
8b:83:61:db:d6:b5:e1:8d:fd:42:c9:d1:df:e4:d1:01:16:45:
c4:a4:45:50:ac:5b:72:25:41:63:e4:03:e4:b1:96:cc:ff:c8:
4f:55:6f:3b:40:84:97:16:18:46:79:60:31:bd:8c:25:aa:20:
89:9d:0d:be:ea:02:9d:3c:39:e4:e0:47:98:9a:2c:c5:dd:4c:
df:68:23:97:0e:f8:6e:7d:73:53:c5:65:94:e7:e4:9d:ff:21:
19:52:a9:7b:e3:60:dd:ec:02:98:4a:54:7a:cf:84:02:75:98:
13:69:f6:52:8c:7d:06:d3:69:98:08:19:38:1a:42:38:a0:8a:
16:6f:f7:7e:a0:59:89:bc:27:86:ee:e7:21:0c:ad:7a:ab:b9:
f1:2b:77:71:6d:a2:fb:b8:31:b4:a0:13:ac:fa:48:28:aa:5a:
d4:d3:16:c3:88:30:f7:cc:fc:95:4c:a1:ba:ca:fc:1e:38:76:
11:3d:fb:08:fc:16:2a:01:48:6c:af:c5:41:4d:4b:45:f7:0e:
2c:1b:8b:78
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgIDAcJ/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDAyMjAxMzE1WhcNMjYwNTEwMjAxMzE1WjAYMRYw
FAYDVQQDEw02OWNlY2RlMC01MzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvzJ19TBRj/Mz6cK3oRxcELN4XmrwaIpk5X4E2NzolCsWDTn1+AvhDXpu
DZmzmvq6gCuohZSbkxIjFYn7bes/U36bI1m9uRvgK8m+GixEBajJHNlYdde/yVP8
wXHyZcZWtOvRxiyGmSLHS5ddfrHnsBJ4VKNoJadgnOisYMWo/ZB/uh/oeqdWsAi1
/ySgXptg7w/+R/zCN7Y/OFPOZsNcQ+nuSMA+7wS9uf4M3RsA5sbvnNCG5ebJKKyl
NeeYxJcQW6m/rh9hM8LQLKTpDCF04+zxqu8DRuVwMMwvWKrjgWiKcJyN/tOzbFe5
whCUjAX6rcajebKBKKXgPttsJ1tOzQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFN6K
r5xieOoEvowE5PsthYUOoe+yMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NDVDRjQ3NjJFRDAxMUYxOTFFOUJCRjVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAKa3ywDBAGa3zAwDAME
AJrfMwMEAZrfODANBgkqhkiG9w0BAQsFAAOCAQEA1NkQhgEiVM+5faZ2mDMNDssF
WaTDUXUJX2Al/ecgclMcoZN2i7qXQAtlo+93lmfhv0l9PB7Xi4Nh29a14Y39QsnR
3+TRARZFxKRFUKxbciVBY+QD5LGWzP/IT1VvO0CElxYYRnlgMb2MJaogiZ0NvuoC
nTw55OBHmJosxd1M32gjlw74bn1zU8VllOfknf8hGVKpe+Ng3ewCmEpUes+EAnWY
E2n2Uox9BtNpmAgZOBpCOKCKFm/3fqBZibwnhu7nIQytequ58St3cW2i+7gxtKAT
rPpIKKpa1NMWw4gw98z8lUyhusr8Hjh2ET37CPwWKgFIbK/FQU1LRfcOLBuLeA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:35:31 2026 by rpki-client