Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76093324389E11F1B75EC8C4CE1D38B0.roa
File: 76093324389E11F1B75EC8C4CE1D38B0.roa (raw, json)
Hash identifier: /+lT4zz1DEdq19ALLDJ8H9xjEvm6WKC6v97IZreEyDw=
Subject key identifier: E7:5A:0D:DB:E5:E0:E9:F3:D7:49:CF:25:FD:25:4E:2F:31:84:3E:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C544
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76093324389E11F1B75EC8C4CE1D38B0.roa
Signing time: Wed 15 Apr 2026 07:41:07 +0000
ROA not before: Wed 15 Apr 2026 07:41:02 +0000
ROA not after: Wed 06 May 2026 07:41:02 +0000
asID: 273937
IP address blocks: 154.88.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116036 (0x1c544)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 07:41:02 2026 GMT
Not After : May 6 07:41:02 2026 GMT
Subject: CN=69df4112-4cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:21:12:08:39:5b:4e:85:e4:23:d4:dc:0d:63:
8b:c2:a3:f6:49:58:96:53:bf:c5:36:71:af:0c:30:
3a:fb:48:91:fc:1b:38:75:1a:a5:6b:91:05:7c:d2:
6c:7e:db:63:02:d0:d2:24:d0:23:29:49:0c:4a:c5:
5b:fa:84:89:bb:6d:89:77:54:b7:8a:dd:db:40:c3:
a2:cc:9a:9b:b1:bf:c9:d7:15:28:b9:9e:c4:9a:47:
7f:96:9d:ba:10:16:3d:6d:7e:6e:fe:9e:a9:e2:b5:
a1:27:4a:37:c1:65:d8:db:0f:18:6d:40:37:16:12:
6e:82:bf:96:c4:40:4c:0b:84:2c:f1:42:0a:07:f0:
db:38:9c:10:9a:33:89:5d:ec:6f:aa:b3:e5:26:65:
52:6e:27:31:e5:5f:c0:b2:58:9e:43:66:7f:69:45:
df:c7:a2:fb:ed:7d:22:b4:13:65:e8:88:e8:3b:a4:
8f:c4:32:52:02:6a:54:2a:ab:83:46:09:6d:4f:85:
84:f0:ef:e6:f2:d1:9b:1d:a2:83:a8:af:11:40:fb:
3c:27:95:74:49:2f:ac:96:0f:53:90:02:90:2f:56:
bc:f8:47:ab:96:6f:d7:3b:f5:98:5c:f0:7d:b7:01:
da:18:db:29:51:9d:13:84:0b:13:23:54:be:22:27:
ea:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5A:0D:DB:E5:E0:E9:F3:D7:49:CF:25:FD:25:4E:2F:31:84:3E:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76093324389E11F1B75EC8C4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.186.0/24
Signature Algorithm: sha256WithRSAEncryption
39:c8:f7:1e:c9:21:c3:3c:2d:a0:f4:72:39:f1:e2:d7:81:63:
55:c3:43:26:38:23:31:c5:f9:c0:8c:e7:21:9d:f2:6e:c1:47:
4a:02:0f:cb:00:11:cb:a8:46:38:63:40:a2:1f:f0:2e:ff:59:
25:0c:31:c5:f8:95:d4:be:1e:06:de:7d:f5:f5:3f:e7:bf:99:
b3:d4:40:0e:0d:54:1f:4f:31:f1:9c:8c:bf:42:ca:f4:8e:4c:
1c:c3:9b:6e:3c:b3:40:c0:22:94:af:69:41:46:8d:85:be:ed:
13:7f:44:f7:0f:c3:04:48:08:1c:06:37:e5:3c:d8:f2:97:0c:
df:f6:56:81:c8:92:06:84:11:fd:7e:f6:16:bb:05:b7:3c:45:
e5:46:f6:30:68:02:22:99:46:6e:5b:93:8f:8d:de:07:4c:d9:
06:8f:c1:da:c2:fc:2d:51:77:f4:ec:1f:ac:9b:27:99:d3:eb:
66:a8:d9:eb:4e:df:f2:18:f4:6f:d0:0f:a6:4d:14:9b:e1:ba:
d0:72:b7:75:99:30:8c:23:3b:1e:c7:7c:79:c1:db:f0:4a:96:
36:cd:0b:5c:91:f8:ec:51:23:5f:18:5e:5f:6b:60:d3:16:43:
00:74:57:9f:4c:7f:fa:b2:ca:af:d0:0e:a4:d0:1c:b0:89:83:
57:8a:a8:b8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcVEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDE1MDc0MTAyWhcNMjYwNTA2MDc0MTAyWjAYMRYw
FAYDVQQDEw02OWRmNDExMi00Y2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7SESCDlbToXkI9TcDWOLwqP2SViWU7/FNnGvDDA6+0iR/Bs4dRqla5EF
fNJsfttjAtDSJNAjKUkMSsVb+oSJu22Jd1S3it3bQMOizJqbsb/J1xUouZ7Emkd/
lp26EBY9bX5u/p6p4rWhJ0o3wWXY2w8YbUA3FhJugr+WxEBMC4Qs8UIKB/DbOJwQ
mjOJXexvqrPlJmVSbicx5V/AslieQ2Z/aUXfx6L77X0itBNl6IjoO6SPxDJSAmpU
KquDRgltT4WE8O/m8tGbHaKDqK8RQPs8J5V0SS+slg9TkAKQL1a8+Eerlm/XO/WY
XPB9twHaGNspUZ0ThAsTI1S+Iifq4QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOda
Ddvl4Onz10nPJf0lTi8xhD4cMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NjA5MzMyNDM4OUUxMUYxQjc1RUM4QzRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmli6MA0GCSqGSIb3DQEB
CwUAA4IBAQA5yPceySHDPC2g9HI58eLXgWNVw0MmOCMxxfnAjOchnfJuwUdKAg/L
ABHLqEY4Y0CiH/Au/1klDDHF+JXUvh4G3n319T/nv5mz1EAODVQfTzHxnIy/Qsr0
jkwcw5tuPLNAwCKUr2lBRo2Fvu0Tf0T3D8MESAgcBjflPNjylwzf9laByJIGhBH9
fvYWuwW3PEXlRvYwaAIimUZuW5OPjd4HTNkGj8HawvwtUXf07B+smyeZ0+tmqNnr
Tt/yGPRv0A+mTRSb4brQcrd1mTCMIzsex3x5wdvwSpY2zQtckfjsUSNfGF5fa2DT
FkMAdFefTH/6ssqv0A6k0BywiYNXiqi4
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:13:06 2026 by rpki-client