Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70E061F8345011F193024206CF1D38B0.roa
File: 70E061F8345011F193024206CF1D38B0.roa (raw, json)
Hash identifier: ywVeQ01GECkWKvsK1lGAInmRVYpfGuzJbw9m73NBh50=
Subject key identifier: 61:D8:02:D8:17:CA:CF:93:BB:40:EB:E0:8F:E0:09:75:88:EA:50:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C431
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70E061F8345011F193024206CF1D38B0.roa
Signing time: Thu 09 Apr 2026 20:12:32 +0000
ROA not before: Thu 09 Apr 2026 20:12:28 +0000
ROA not after: Sun 19 Apr 2026 20:12:28 +0000
asID: 9304
IP address blocks: 154.193.2.0/24 maxlen: 24
154.193.35.0/24 maxlen: 24
154.194.195.0/24 maxlen: 24
154.196.134.0/24 maxlen: 24
154.196.160.0/24 maxlen: 24
154.196.179.0/24 maxlen: 24
154.196.180.0/24 maxlen: 24
154.199.4.0/24 maxlen: 24
154.200.1.0/24 maxlen: 24
154.200.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 15:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115761 (0x1c431)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 20:12:28 2026 GMT
Not After : Apr 19 20:12:28 2026 GMT
Subject: CN=69d80830-09f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:da:dd:04:0c:9f:3b:ea:2c:82:cd:5d:ee:9d:
eb:81:6f:b2:ef:de:ec:03:55:b6:b9:be:5c:e9:b3:
c8:17:18:e2:99:af:68:e8:32:a2:5c:d8:96:34:6e:
e0:5d:b5:5e:ca:9a:9f:41:01:54:2e:4f:73:2d:9e:
bc:1b:6b:83:95:e7:cc:0d:c4:cf:19:41:1c:ca:a4:
0c:d7:d1:33:ae:7f:0f:44:9e:0f:3d:4a:5e:a7:40:
4f:da:98:c9:3b:2e:90:c9:0c:fd:2c:05:19:8d:38:
c2:5b:1d:d0:4e:a2:b7:be:d9:e1:1a:51:16:6a:9a:
f4:02:df:4d:44:58:42:a0:99:45:8a:83:96:e7:28:
d3:62:70:22:c0:d8:70:4f:46:36:d0:24:4b:fc:13:
df:cf:e8:6c:14:45:7f:d3:ab:35:6b:dc:51:95:1d:
c5:d4:12:12:97:bf:cc:3d:44:79:71:bc:da:c7:2b:
47:61:94:a6:4a:98:d9:38:b2:e9:3b:2b:ed:94:22:
8d:ad:05:8a:24:56:56:0f:ea:2b:8b:58:f0:e5:50:
a4:ed:98:2e:13:22:d0:4d:47:12:df:e7:85:57:26:
6b:73:0e:63:1c:fb:94:99:13:57:cf:3a:bb:41:21:
61:0d:99:79:8f:33:b7:16:de:c8:71:17:7b:47:24:
55:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D8:02:D8:17:CA:CF:93:BB:40:EB:E0:8F:E0:09:75:88:EA:50:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70E061F8345011F193024206CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.2.0/24
154.193.35.0/24
154.194.195.0/24
154.196.134.0/24
154.196.160.0/24
154.196.179.0-154.196.180.255
154.199.4.0/24
154.200.1.0/24
154.200.26.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:2b:67:29:ed:3f:8b:da:47:c8:59:b1:6b:83:61:32:4d:b6:
ac:77:6c:df:5c:b8:d4:14:23:da:dd:8c:6c:67:7b:89:83:a6:
6f:00:d9:3f:37:94:05:8d:28:3a:8c:18:ac:7d:72:1b:84:91:
11:cb:e7:11:f3:36:3d:3e:c7:82:c0:9d:37:3a:b7:61:14:ec:
28:68:f3:c7:78:d8:85:4f:bc:a4:a1:dd:ff:fc:2e:95:8e:06:
c8:21:af:98:94:00:08:8b:21:c7:1a:54:ae:d2:7b:ab:54:09:
c5:6e:44:ee:62:20:4f:5f:b2:9c:d2:ea:26:86:db:5e:44:2e:
fc:69:ea:40:f5:d0:a8:56:97:5e:b2:35:6d:73:7f:51:54:94:
ff:cb:19:95:3f:bc:8c:a7:04:eb:0e:f2:5a:8e:b1:9a:79:87:
a3:62:01:d2:45:48:5e:72:0f:31:2c:98:16:9b:37:d9:e8:a4:
d7:3c:c9:0f:dd:e2:22:50:81:2f:e3:96:59:f5:83:35:56:36:
10:be:64:56:40:89:b8:ed:69:bb:b0:d6:65:68:71:85:80:ac:
ea:32:df:6d:c5:ee:63:00:97:78:2c:4e:b7:c7:41:83:05:5d:
d1:7e:da:70:db:b4:ac:a6:c2:b7:c1:2a:32:bc:22:79:a1:be:
81:a1:e2:c5
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIDAcQxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDA5MjAxMjI4WhcNMjYwNDE5MjAxMjI4WjAYMRYw
FAYDVQQDEw02OWQ4MDgzMC0wOWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1NrdBAyfO+osgs1d7p3rgW+y797sA1W2ub5c6bPIFxjima9o6DKiXNiW
NG7gXbVeypqfQQFULk9zLZ68G2uDlefMDcTPGUEcyqQM19Ezrn8PRJ4PPUpep0BP
2pjJOy6QyQz9LAUZjTjCWx3QTqK3vtnhGlEWapr0At9NRFhCoJlFioOW5yjTYnAi
wNhwT0Y20CRL/BPfz+hsFEV/06s1a9xRlR3F1BISl7/MPUR5cbzaxytHYZSmSpjZ
OLLpOyvtlCKNrQWKJFZWD+ori1jw5VCk7ZguEyLQTUcS3+eFVyZrcw5jHPuUmRNX
zzq7QSFhDZl5jzO3Ft7IcRd7RyRVEwIDAQABo4IC3TCCAtkwHQYDVR0OBBYEFGHY
AtgXys+Tu0Dr4I/gCXWI6lA3MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83MEUwNjFGODM0NTAxMUYxOTMwMjQyMDZDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAmsECAwQAmsEjAwQAmsLD
AwQAmsSGAwQAmsSgMAwDBACaxLMDBACaxLQDBACaxwQDBACayAEDBACayBowDQYJ
KoZIhvcNAQELBQADggEBAJ8rZyntP4vaR8hZsWuDYTJNtqx3bN9cuNQUI9rdjGxn
e4mDpm8A2T83lAWNKDqMGKx9chuEkRHL5xHzNj0+x4LAnTc6t2EU7Cho88d42IVP
vKSh3f/8LpWOBsghr5iUAAiLIccaVK7Se6tUCcVuRO5iIE9fspzS6iaG215ELvxp
6kD10KhWl16yNW1zf1FUlP/LGZU/vIynBOsO8lqOsZp5h6NiAdJFSF5yDzEsmBab
N9nopNc8yQ/d4iJQgS/jlln1gzVWNhC+ZFZAibjtabuw1mVocYWArOoy323F7mMA
l3gsTrfHQYMFXdF+2nDbtKymwrfBKjK8InmhvoGh4sU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:07:16 2026 by rpki-client