Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79080ED2FE8911F0928BCD96DAE4EC9C.roa
File: 79080ED2FE8911F0928BCD96DAE4EC9C.roa (raw, json)
Hash identifier: hBIbfIYNXskjfvo3whUgbl/SB29ChTTp+pMgIKwT5tc=
Subject key identifier: F8:FD:AD:4E:FB:87:B3:8F:9F:43:AF:12:2D:D0:25:F9:57:C7:2B:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B7DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79080ED2FE8911F0928BCD96DAE4EC9C.roa
Signing time: Sat 31 Jan 2026 09:44:45 +0000
ROA not before: Sat 31 Jan 2026 09:44:39 +0000
ROA not after: Sun 08 Mar 2026 09:44:39 +0000
asID: 214238
IP address blocks: 154.219.23.0/24 maxlen: 24
154.219.25.0/24 maxlen: 24
154.219.30.0/24 maxlen: 24
154.219.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112606 (0x1b7de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 09:44:39 2026 GMT
Not After : Mar 8 09:44:39 2026 GMT
Subject: CN=697dcf0c-1309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a1:35:87:1c:52:8d:b1:89:13:6f:4c:a5:07:
87:4b:9a:be:32:5e:32:6c:e2:7d:8e:ab:62:93:37:
dd:80:8c:fd:7f:c2:15:40:00:e6:12:9a:cd:21:24:
f4:9b:7f:34:ac:97:d0:1f:9f:83:94:b9:08:87:f6:
f5:19:f9:f4:82:29:61:4d:86:d8:f2:2d:6e:0d:9d:
97:03:81:f4:ad:42:f1:cb:b2:e8:c4:76:00:41:49:
98:be:66:1b:70:dd:a8:e5:18:af:5a:62:b6:c9:43:
d9:ec:51:bb:e9:c7:f5:6a:bf:b7:27:df:d2:38:da:
24:4f:5b:54:d6:50:41:9a:0d:7e:0c:4d:a7:51:b3:
bf:76:81:38:1a:e1:7a:39:1b:23:ae:b2:15:c9:be:
dc:3c:a2:ba:84:a5:40:af:eb:cf:f5:e0:46:9f:50:
94:83:50:ee:6b:a1:c4:16:a0:6a:2f:cc:ac:9d:38:
f2:38:6f:b3:ec:ad:5b:9e:56:ea:6c:ac:f8:46:62:
5a:62:38:12:da:c4:a8:4c:ef:ad:36:08:6d:2c:b0:
11:25:87:4c:06:e9:e9:0a:33:d7:b1:46:85:e9:1f:
ac:1d:2f:b6:09:31:79:e6:54:a5:ac:f9:38:8f:c8:
54:f7:c9:40:68:98:19:6e:7e:61:61:64:d9:fb:87:
9f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FD:AD:4E:FB:87:B3:8F:9F:43:AF:12:2D:D0:25:F9:57:C7:2B:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79080ED2FE8911F0928BCD96DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.23.0/24
154.219.25.0/24
154.219.30.0/23
Signature Algorithm: sha256WithRSAEncryption
49:ac:0e:b2:80:0f:37:34:be:0a:b6:d4:f8:32:0e:f8:bc:f1:
b9:26:6c:d3:7c:20:d1:f1:45:df:55:04:5f:fb:46:91:b3:d2:
75:d6:fe:4b:54:a3:3b:5d:18:d7:9c:96:61:06:f1:db:7f:72:
3c:16:d8:65:b5:81:ae:8f:6f:5a:34:39:c5:e9:12:f1:93:ea:
04:67:ba:3b:b4:04:da:ec:3d:e0:3e:90:d4:56:1b:e5:6c:2b:
36:b2:cd:99:75:5e:42:bc:e6:4e:a7:88:ec:7a:b2:4a:32:9b:
68:26:79:d4:dd:42:38:0e:e5:9d:49:0a:e2:be:76:bc:9a:f2:
ca:76:db:b4:d6:81:67:de:65:c9:1c:49:8a:69:8d:fc:42:57:
e6:db:dc:e6:3b:09:1f:17:68:21:70:26:a3:a6:b9:ee:73:e5:
23:c8:34:14:12:8e:99:20:c9:96:64:ed:48:e1:9e:db:d0:41:
b7:6b:e5:b7:f6:87:0b:e3:9b:15:a6:79:17:2e:0f:31:55:69:
54:23:24:af:a5:f8:86:53:6f:c2:0a:da:0e:e5:8c:f3:d4:f9:
ac:2f:da:33:42:34:e7:04:1e:30:ef:ff:46:a0:0a:74:f3:3b:
31:95:36:a9:8a:19:d4:70:1f:3b:26:cf:8a:de:e7:e6:28:f1:
f5:bd:7c:d8
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAbfeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMTMxMDk0NDM5WhcNMjYwMzA4MDk0NDM5WjAYMRYw
FAYDVQQDEw02OTdkY2YwYy0xMzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1KE1hxxSjbGJE29MpQeHS5q+Ml4ybOJ9jqtikzfdgIz9f8IVQADmEprN
IST0m380rJfQH5+DlLkIh/b1Gfn0gilhTYbY8i1uDZ2XA4H0rULxy7LoxHYAQUmY
vmYbcN2o5RivWmK2yUPZ7FG76cf1ar+3J9/SONokT1tU1lBBmg1+DE2nUbO/doE4
GuF6ORsjrrIVyb7cPKK6hKVAr+vP9eBGn1CUg1Dua6HEFqBqL8ysnTjyOG+z7K1b
nlbqbKz4RmJaYjgS2sSoTO+tNghtLLARJYdMBunpCjPXsUaF6R+sHS+2CTF55lSl
rPk4j8hU98lAaJgZbn5hYWTZ+4efmQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFPj9
rU77h7OPn0OvEi3QJflXxys3MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83OTA4MEVEMkZFODkxMUYwOTI4QkNEOTZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAmtsXAwQAmtsZAwQBmtse
MA0GCSqGSIb3DQEBCwUAA4IBAQBJrA6ygA83NL4KttT4Mg74vPG5JmzTfCDR8UXf
VQRf+0aRs9J11v5LVKM7XRjXnJZhBvHbf3I8FthltYGuj29aNDnF6RLxk+oEZ7o7
tATa7D3gPpDUVhvlbCs2ss2ZdV5CvOZOp4jserJKMptoJnnU3UI4DuWdSQrivna8
mvLKdtu01oFn3mXJHEmKaY38Qlfm29zmOwkfF2ghcCajprnuc+UjyDQUEo6ZIMmW
ZO1I4Z7b0EG3a+W39ocL45sVpnkXLg8xVWlUIySvpfiGU2/CCtoO5Yzz1PmsL9oz
QjTnBB4w7/9GoAp08zsxlTapihnUcB87Js+K3ufmKPH1vXzY
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:10:05 2026 by rpki-client