Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80280A8E2ECF11F1A0E063EEDAE4EC9C.roa
File: 80280A8E2ECF11F1A0E063EEDAE4EC9C.roa (raw, json)
Hash identifier: eGx62k6VOVlFLlYwdc4SM/L8uMAQobqczCG1/Muf52Y=
Subject key identifier: 34:6A:2F:AC:C3:16:CE:67:24:F2:2F:03:22:82:C0:7B:DF:8E:22:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C27D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80280A8E2ECF11F1A0E063EEDAE4EC9C.roa
Signing time: Thu 02 Apr 2026 20:06:57 +0000
ROA not before: Thu 02 Apr 2026 20:06:51 +0000
ROA not after: Sun 10 May 2026 20:06:51 +0000
asID: 138915
IP address blocks: 154.223.27.0/24 maxlen: 24
154.223.30.0/24 maxlen: 24
154.223.32.0/24 maxlen: 24
154.223.33.0/24 maxlen: 24
154.223.34.0/23 maxlen: 24
154.223.37.0/24 maxlen: 24
154.223.40.0/23 maxlen: 24
154.223.42.0/24 maxlen: 24
154.223.43.0/24 maxlen: 24
154.223.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115325 (0x1c27d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 20:06:51 2026 GMT
Not After : May 10 20:06:51 2026 GMT
Subject: CN=69cecc61-8a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fd:95:46:5d:8c:8a:b5:66:5b:91:f1:a0:06:
0d:79:94:47:b9:8f:a8:d6:b3:1d:5f:61:82:93:7c:
8d:24:e5:8a:28:09:1f:19:22:ec:e1:ce:7a:b0:ba:
58:42:ec:30:8b:26:3a:5e:d9:3e:2f:20:c9:7b:9b:
87:b5:fc:30:0d:e6:22:b4:23:1b:fa:69:b4:79:6b:
a9:77:9e:c2:67:ea:dd:3b:b2:7e:0b:4c:93:ae:eb:
db:1e:34:90:91:26:f0:5a:0a:a6:b6:c8:ea:78:cc:
ab:69:71:e6:50:4b:dd:5e:4d:82:05:55:bf:f4:ec:
aa:a2:00:e9:c2:a7:74:25:04:86:4f:26:93:64:7d:
57:82:b4:cd:a4:05:6a:f3:ea:8c:a2:e3:cc:57:00:
d6:6b:f0:78:bc:4f:b7:c8:29:42:cf:25:38:ae:3c:
a7:7e:62:cf:f0:c4:b0:e0:b0:48:8b:65:14:a4:c2:
89:a5:00:22:e8:b9:15:b3:dc:b9:c0:7c:f3:98:d7:
53:62:40:57:a9:e3:86:32:a8:cc:c4:a1:73:41:07:
ba:9b:fc:85:96:74:72:76:f0:fe:19:81:76:5b:4b:
58:26:84:5f:c5:56:a8:6f:22:c3:4b:d8:11:68:b8:
62:22:2b:52:e3:c9:77:b2:42:4a:56:6c:86:31:d3:
42:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6A:2F:AC:C3:16:CE:67:24:F2:2F:03:22:82:C0:7B:DF:8E:22:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80280A8E2ECF11F1A0E063EEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.27.0/24
154.223.30.0/24
154.223.32.0/22
154.223.37.0/24
154.223.40.0/22
154.223.78.0/23
Signature Algorithm: sha256WithRSAEncryption
07:3a:2c:45:7e:4f:8d:b1:83:f0:b7:30:4f:bd:ab:54:21:c3:
21:57:9e:56:ef:7b:2a:31:16:61:a7:41:21:32:a1:df:c3:47:
14:62:20:c4:3d:94:91:53:a8:1f:a2:b3:06:20:c5:97:a6:6e:
7a:54:2f:81:b0:87:ef:5c:05:4d:04:50:26:ff:cf:d2:26:bb:
c4:40:22:b6:78:2d:3f:20:de:34:63:95:02:58:17:a4:77:e7:
1d:62:c2:0b:8d:9f:66:ac:9f:5f:63:21:5c:39:07:61:54:1c:
06:d6:5f:a9:d0:be:dc:83:70:2f:fd:89:29:7d:9f:a4:8d:a9:
cf:85:97:cc:cf:56:9c:7c:f9:8a:c5:76:16:aa:7c:a5:da:94:
81:0e:30:5a:fa:e5:53:c7:e9:d5:78:ef:5f:5b:b4:48:5c:83:
38:c2:52:31:d4:85:b2:1b:49:bb:b6:d2:ce:49:c9:11:d4:4e:
d0:8b:cf:6a:af:8a:cd:13:f8:fa:ec:57:c6:f9:fb:f9:ab:45:
cc:cd:2a:ea:f7:0d:df:00:61:56:b6:1e:d5:33:ac:ce:44:ad:
85:c4:25:3e:9c:93:cb:fc:67:21:e4:28:cf:31:43:8c:6d:de:
bb:d0:30:db:51:25:dc:7c:b2:57:ae:69:48:14:21:d9:cd:17:
27:41:04:02
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgIDAcJ9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDAyMjAwNjUxWhcNMjYwNTEwMjAwNjUxWjAYMRYw
FAYDVQQDEw02OWNlY2M2MS04YTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAof2VRl2MirVmW5HxoAYNeZRHuY+o1rMdX2GCk3yNJOWKKAkfGSLs4c56
sLpYQuwwiyY6Xtk+LyDJe5uHtfwwDeYitCMb+mm0eWupd57CZ+rdO7J+C0yTruvb
HjSQkSbwWgqmtsjqeMyraXHmUEvdXk2CBVW/9OyqogDpwqd0JQSGTyaTZH1XgrTN
pAVq8+qMouPMVwDWa/B4vE+3yClCzyU4rjynfmLP8MSw4LBIi2UUpMKJpQAi6LkV
s9y5wHzzmNdTYkBXqeOGMqjMxKFzQQe6m/yFlnRydvD+GYF2W0tYJoRfxVaobyLD
S9gRaLhiIitS48l3skJKVmyGMdNCgwIDAQABo4ICwzCCAr8wHQYDVR0OBBYEFDRq
L6zDFs5nJPIvAyKCwHvfjiJTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MDI4MEE4RTJFQ0YxMUYxQTBFMDYzRUVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAmt8bAwQAmt8eAwQCmt8g
AwQAmt8lAwQCmt8oAwQBmt9OMA0GCSqGSIb3DQEBCwUAA4IBAQAHOixFfk+NsYPw
tzBPvatUIcMhV55W73sqMRZhp0EhMqHfw0cUYiDEPZSRU6gforMGIMWXpm56VC+B
sIfvXAVNBFAm/8/SJrvEQCK2eC0/IN40Y5UCWBekd+cdYsILjZ9mrJ9fYyFcOQdh
VBwG1l+p0L7cg3Av/YkpfZ+kjanPhZfMz1acfPmKxXYWqnyl2pSBDjBa+uVTx+nV
eO9fW7RIXIM4wlIx1IWyG0m7ttLOSckR1E7Qi89qr4rNE/j67FfG+fv5q0XMzSrq
9w3fAGFWth7VM6zORK2FxCU+nJPL/Gch5CjPMUOMbd670DDbUSXcfLJXrmlIFCHZ
zRcnQQQC
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:02:12 2026 by rpki-client