Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81E91DB8367C11F1876A43B1CE1D38B0.roa
File: 81E91DB8367C11F1876A43B1CE1D38B0.roa (raw, json)
Hash identifier: qHUeJjOMAr6dLv9e2mVWZgWgCd3mTN9G4+TmTRrK8qI=
Subject key identifier: 47:B0:52:91:3C:9B:76:6E:68:F6:32:63:6E:5C:4C:F1:F0:07:40:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C4CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81E91DB8367C11F1876A43B1CE1D38B0.roa
Signing time: Sun 12 Apr 2026 14:33:01 +0000
ROA not before: Sun 12 Apr 2026 14:32:56 +0000
ROA not after: Thu 12 Apr 2029 14:32:56 +0000
asID: 17561
IP address blocks: 154.208.243.0/24 maxlen: 24
154.208.244.0/24 maxlen: 24
154.208.245.0/24 maxlen: 24
154.208.246.0/24 maxlen: 24
154.208.247.0/24 maxlen: 24
154.208.248.0/24 maxlen: 24
154.208.249.0/24 maxlen: 24
154.208.250.0/24 maxlen: 24
154.208.251.0/24 maxlen: 24
154.208.252.0/24 maxlen: 24
154.208.253.0/24 maxlen: 24
154.208.254.0/24 maxlen: 24
154.208.255.0/24 maxlen: 24
154.221.64.0/24 maxlen: 24
154.221.65.0/24 maxlen: 24
154.221.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115918 (0x1c4ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 14:32:56 2026 GMT
Not After : Apr 12 14:32:56 2029 GMT
Subject: CN=69dbad1d-3d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6b:d5:93:91:e1:8e:96:85:5d:73:54:8c:3c:
e1:58:c6:d3:43:b8:4e:39:c8:85:dd:1c:d6:50:38:
a3:2e:2d:5f:7f:be:02:04:bc:85:48:59:e5:3c:d4:
86:46:c7:ee:d5:66:21:e8:17:a6:d7:6f:0e:5c:a2:
c2:f4:a0:b3:ad:07:20:1b:e8:87:e4:cc:de:b9:dc:
57:cf:41:7f:db:f5:06:60:68:24:89:20:0c:8a:29:
f5:ac:4f:3b:0d:13:f4:db:ec:02:c6:3f:fb:56:56:
4f:57:70:9b:0f:fb:7d:76:7a:6d:91:73:3d:65:59:
27:93:d5:8d:ad:25:2a:21:74:ee:92:11:db:87:62:
c1:a6:2f:0d:09:c5:6d:4d:7b:69:ee:3a:d6:ee:44:
9e:aa:a4:78:e7:87:1a:96:69:99:89:f5:71:80:77:
56:10:82:31:b6:5d:e3:03:2c:48:46:b1:b0:66:6e:
77:5e:11:a3:65:3c:83:d0:62:74:45:80:ee:c8:ff:
91:c3:dd:dc:b8:89:0f:06:3c:0e:18:55:f7:ee:0f:
bf:e9:8d:cf:2d:31:89:b3:92:20:f9:6b:e1:38:b6:
3d:0f:ef:be:a0:c4:0e:df:7d:ad:03:fd:03:08:8a:
c4:78:c4:0d:d8:71:72:d2:13:40:6c:74:0e:e8:96:
0f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B0:52:91:3C:9B:76:6E:68:F6:32:63:6E:5C:4C:F1:F0:07:40:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81E91DB8367C11F1876A43B1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.243.0-154.208.255.255
154.221.64.0-154.221.66.255
Signature Algorithm: sha256WithRSAEncryption
5e:8e:87:00:7e:f8:a1:7a:c7:ae:e2:55:e4:fa:ef:54:64:ed:
4f:11:56:5b:bf:bb:8b:d0:70:c3:4b:35:7f:bf:68:67:0a:ca:
1d:6f:a6:f5:58:91:02:c4:67:d6:d3:0e:34:6b:4d:7d:1d:45:
26:c7:11:c2:a9:0c:44:94:bd:ca:5b:36:ce:5d:ad:8b:05:9b:
3a:3d:9e:6c:fa:3b:35:07:4d:78:34:cd:0e:84:06:e9:95:55:
8b:d2:d2:27:f9:38:68:93:51:d4:55:49:ee:ef:6e:87:44:4e:
15:e0:ca:5e:fe:2a:4d:2b:3a:66:b5:88:01:0d:a8:38:e4:6c:
43:80:e9:c5:14:d0:b1:6f:2a:fc:07:88:10:66:81:65:a8:c8:
5c:06:27:c7:1c:c8:d5:54:97:2b:45:86:00:12:ba:8c:88:f5:
24:bd:16:09:87:81:b3:64:69:5a:70:b1:08:18:39:a6:55:0d:
18:16:5d:8d:e6:53:76:d9:1d:dc:a7:8f:31:6e:22:da:91:87:
3a:76:25:ce:51:ba:9b:80:4d:2b:60:47:cc:c1:bb:2e:c9:b7:
d1:30:8a:ce:21:e0:99:09:c1:65:cc:9d:c6:7d:19:4f:2d:a8:
ca:2d:c9:e9:7a:b0:15:5f:7b:75:20:e2:39:e7:3c:f6:cb:9d:
ca:62:e8:e0
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgIDAcTOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDEyMTQzMjU2WhcNMjkwNDEyMTQzMjU2WjAYMRYw
FAYDVQQDEw02OWRiYWQxZC0zZDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsWvVk5HhjpaFXXNUjDzhWMbTQ7hOOciF3RzWUDijLi1ff74CBLyFSFnl
PNSGRsfu1WYh6Bem128OXKLC9KCzrQcgG+iH5MzeudxXz0F/2/UGYGgkiSAMiin1
rE87DRP02+wCxj/7VlZPV3CbD/t9dnptkXM9ZVknk9WNrSUqIXTukhHbh2LBpi8N
CcVtTXtp7jrW7kSeqqR454calmmZifVxgHdWEIIxtl3jAyxIRrGwZm53XhGjZTyD
0GJ0RYDuyP+Rw93cuIkPBjwOGFX37g+/6Y3PLTGJs5Ig+WvhOLY9D+++oMQO332t
A/0DCIrEeMQN2HFy0hNAbHQO6JYPSwIDAQABo4ICujCCArYwHQYDVR0OBBYEFEew
UpE8m3ZuaPYyY25cTPHwB0DMMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MUU5MURCODM2N0MxMUYxODc2QTQzQjFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAATAbMAsDBACa0PMDAwCa0DAMAwQG
mt1AAwQAmt1CMA0GCSqGSIb3DQEBCwUAA4IBAQBejocAfviheseu4lXk+u9UZO1P
EVZbv7uL0HDDSzV/v2hnCsodb6b1WJECxGfW0w40a019HUUmxxHCqQxElL3KWzbO
Xa2LBZs6PZ5s+js1B014NM0OhAbplVWL0tIn+Thok1HUVUnu726HRE4V4Mpe/ipN
KzpmtYgBDag45GxDgOnFFNCxbyr8B4gQZoFlqMhcBifHHMjVVJcrRYYAErqMiPUk
vRYJh4GzZGlacLEIGDmmVQ0YFl2N5lN22R3cp48xbiLakYc6diXOUbqbgE0rYEfM
wbsuybfRMIrOIeCZCcFlzJ3GfRlPLajKLcnperAVX3t1IOI55zz2y53KYujg
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:28:48 2026 by rpki-client