Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78D5741A343811F19D1B18F6CE1D38B0.roa
File: 78D5741A343811F19D1B18F6CE1D38B0.roa (raw, json)
Hash identifier: +Zpe0bNgwdcMIHkBp88Sx58znzf4EMaYb+GCjwgJUSE=
Subject key identifier: 91:EB:E7:41:F0:CC:5E:46:55:05:F8:6F:65:0C:DE:A7:E0:8A:D6:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C424
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78D5741A343811F19D1B18F6CE1D38B0.roa
Signing time: Thu 09 Apr 2026 17:20:58 +0000
ROA not before: Thu 09 Apr 2026 17:20:53 +0000
ROA not after: Mon 09 Apr 2029 17:20:53 +0000
asID: 17561
IP address blocks: 154.86.224.0/24 maxlen: 24
154.86.225.0/24 maxlen: 24
154.86.226.0/24 maxlen: 24
154.86.227.0/24 maxlen: 24
154.86.228.0/24 maxlen: 24
154.86.229.0/24 maxlen: 24
154.86.230.0/24 maxlen: 24
154.86.231.0/24 maxlen: 24
154.86.232.0/24 maxlen: 24
154.86.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 15:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115748 (0x1c424)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 17:20:53 2026 GMT
Not After : Apr 9 17:20:53 2029 GMT
Subject: CN=69d7dffa-a4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:15:c6:2a:36:21:6f:0a:66:67:dc:94:cf:
ad:c3:d8:b5:38:b0:98:fb:7a:59:10:39:29:53:4d:
d9:0a:21:6a:6b:00:f6:1f:1b:c5:f7:be:d3:f2:dc:
ac:86:24:c7:50:f9:cc:76:ee:0f:66:d3:6d:0b:ac:
89:af:b7:29:eb:10:c4:e3:ca:a6:21:c0:c8:f4:d5:
3e:99:66:23:b3:29:12:0d:12:2f:f9:8c:7b:d2:1c:
05:70:80:55:0e:58:26:71:cc:4f:d2:7b:43:16:5b:
81:90:b6:b2:f4:73:29:a8:4c:b2:e8:cc:75:28:63:
54:d0:5f:68:41:02:cc:22:20:b4:8f:7b:be:c2:e4:
a2:cc:b7:9d:3e:3c:10:9d:45:de:75:03:17:3c:84:
fa:73:c6:37:cc:e4:e9:be:83:5d:49:84:f3:c7:be:
c3:39:be:0a:d0:3a:dd:cc:37:80:85:ef:2b:8d:c2:
81:74:02:b7:d1:76:e5:1f:19:b7:b9:68:2e:dd:ba:
4e:96:62:c2:9b:15:50:a8:68:07:59:78:a0:3e:66:
b6:aa:17:70:6c:5c:3c:f9:0b:0a:5b:64:99:fe:1d:
a3:54:06:09:c3:a7:9f:9a:3a:a9:a2:ab:d4:81:81:
c7:51:56:c6:48:79:90:e9:7b:d5:ce:b0:73:ad:f3:
10:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EB:E7:41:F0:CC:5E:46:55:05:F8:6F:65:0C:DE:A7:E0:8A:D6:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78D5741A343811F19D1B18F6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.224.0-154.86.233.255
Signature Algorithm: sha256WithRSAEncryption
1d:dd:af:11:58:1b:b5:2c:9d:5e:32:6f:71:96:68:e4:ef:99:
c8:f0:f9:17:dd:f4:03:04:9b:61:7a:80:a9:59:cd:28:80:37:
17:90:93:37:47:ef:79:4a:1b:87:33:42:da:df:f9:0b:b0:a4:
79:1d:7c:94:99:7e:da:da:8b:98:3a:4a:d9:b4:29:fc:c0:ca:
27:6a:9d:97:95:42:d3:d7:3f:5e:84:5f:88:26:23:44:36:4e:
5e:71:3d:60:2d:a7:79:ab:c4:89:a5:31:06:33:de:30:29:84:
a5:15:12:8b:40:cd:e0:32:70:74:b6:ef:f2:6f:59:c3:1d:3a:
94:59:53:d7:8e:f3:ee:22:51:ae:9e:d9:0e:1e:7e:04:44:c2:
d5:a5:b8:4c:24:09:f1:2a:9d:5c:3a:2c:1a:4d:3f:61:e7:bf:
75:68:9b:f4:ed:8a:bf:02:73:2e:c5:eb:c2:8d:8b:34:e4:33:
6b:f1:6e:f5:23:d3:90:82:f2:3b:71:c4:d5:78:19:e7:85:14:
06:99:d1:94:a9:76:60:b8:6b:e7:3f:cc:67:34:c9:84:f4:1c:
55:2b:e0:5b:4c:8e:04:6c:a2:af:17:c6:32:37:5e:b0:f5:77:
b5:88:67:e6:83:06:ce:57:a0:a2:d4:86:dc:ea:d6:f5:ce:a3:
3b:fe:d7:57
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAcQkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDA5MTcyMDUzWhcNMjkwNDA5MTcyMDUzWjAYMRYw
FAYDVQQDEw02OWQ3ZGZmYS1hNGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArq0Vxio2IW8KZmfclM+tw9i1OLCY+3pZEDkpU03ZCiFqawD2HxvF977T
8tyshiTHUPnMdu4PZtNtC6yJr7cp6xDE48qmIcDI9NU+mWYjsykSDRIv+Yx70hwF
cIBVDlgmccxP0ntDFluBkLay9HMpqEyy6Mx1KGNU0F9oQQLMIiC0j3u+wuSizLed
PjwQnUXedQMXPIT6c8Y3zOTpvoNdSYTzx77DOb4K0DrdzDeAhe8rjcKBdAK30Xbl
Hxm3uWgu3bpOlmLCmxVQqGgHWXigPma2qhdwbFw8+QsKW2SZ/h2jVAYJw6efmjqp
oqvUgYHHUVbGSHmQ6XvVzrBzrfMQ5wIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFJHr
50HwzF5GVQX4b2UM3qfgitaYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83OEQ1NzQxQTM0MzgxMUYxOUQxQjE4RjZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAWaVuADBAGaVugwDQYJ
KoZIhvcNAQELBQADggEBAB3drxFYG7UsnV4yb3GWaOTvmcjw+Rfd9AMEm2F6gKlZ
zSiANxeQkzdH73lKG4czQtrf+QuwpHkdfJSZftrai5g6Stm0KfzAyidqnZeVQtPX
P16EX4gmI0Q2Tl5xPWAtp3mrxImlMQYz3jAphKUVEotAzeAycHS27/JvWcMdOpRZ
U9eO8+4iUa6e2Q4efgREwtWluEwkCfEqnVw6LBpNP2Hnv3Vom/Ttir8Ccy7F68KN
izTkM2vxbvUj05CC8jtxxNV4GeeFFAaZ0ZSpdmC4a+c/zGc0yYT0HFUr4FtMjgRs
oq8XxjI3XrD1d7WIZ+aDBs5XoKLUhtzq1vXOozv+11c=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:21:47 2026 by rpki-client