Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8945C166341E11F19070F9D9CE1D38B0.roa
File: 8945C166341E11F19070F9D9CE1D38B0.roa (raw, json)
Hash identifier: oMhZtuNlCiRte2FI3KebwwC2BG2yoINC68sKB2EwU84=
Subject key identifier: F4:56:96:20:20:96:8B:EA:95:04:56:9B:67:41:1C:8C:2F:E5:A1:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C400
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8945C166341E11F19070F9D9CE1D38B0.roa
Signing time: Thu 09 Apr 2026 14:15:18 +0000
ROA not before: Thu 09 Apr 2026 14:15:14 +0000
ROA not after: Mon 09 Apr 2029 14:15:14 +0000
asID: 17561
IP address blocks: 154.215.242.0/24 maxlen: 24
154.215.243.0/24 maxlen: 24
154.215.244.0/24 maxlen: 24
154.215.245.0/24 maxlen: 24
154.215.246.0/24 maxlen: 24
154.215.247.0/24 maxlen: 24
154.215.248.0/24 maxlen: 24
154.215.249.0/24 maxlen: 24
154.215.250.0/24 maxlen: 24
154.215.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115712 (0x1c400)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 14:15:14 2026 GMT
Not After : Apr 9 14:15:14 2029 GMT
Subject: CN=69d7b476-a315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ea:2c:32:0e:0d:51:6f:a5:fa:4f:44:ab:10:
7d:48:2f:f8:81:44:f2:b7:7a:56:9f:73:19:3b:38:
aa:34:28:e4:e7:3b:c4:e0:b4:b1:80:99:bd:9a:d4:
f2:1d:b5:6c:cc:82:ef:88:36:06:07:36:29:58:46:
0d:f6:45:8d:4d:fe:b7:78:89:2a:e0:86:75:2e:2b:
a2:14:5b:af:95:b8:6f:74:af:80:e4:0e:cd:70:20:
2b:89:1d:71:56:92:02:52:35:ed:40:f4:03:d5:ea:
e7:36:eb:1e:13:b6:46:53:81:2b:c0:b8:08:75:fb:
ea:ee:d1:c7:e9:52:7d:35:fa:67:c8:01:56:3d:04:
4d:9d:03:dc:2c:8d:e9:85:07:e3:01:fa:59:f4:f4:
61:c2:0d:ad:93:c2:79:f2:2b:3e:f4:42:95:e9:69:
22:f6:9e:e5:7a:65:c6:fa:37:01:25:45:2c:e2:79:
d1:5c:cd:75:fa:c2:e8:66:4b:99:9f:71:97:7d:48:
08:4b:31:e3:7d:bb:70:41:d4:73:12:01:71:94:c4:
f5:09:e8:35:11:f8:3f:92:f6:fd:47:61:1d:dc:b3:
f7:52:02:e3:2c:c6:6f:1a:5a:34:1d:01:14:a0:e8:
7b:c6:f5:07:9a:3f:d5:67:39:83:e9:6c:40:28:f8:
c0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:56:96:20:20:96:8B:EA:95:04:56:9B:67:41:1C:8C:2F:E5:A1:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8945C166341E11F19070F9D9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.242.0-154.215.251.255
Signature Algorithm: sha256WithRSAEncryption
9c:51:0a:7f:e8:4a:63:5b:4a:a2:fd:c2:eb:0a:8d:82:30:3d:
8c:f9:2b:89:76:ee:17:1a:90:b0:67:ce:ef:93:67:d0:84:90:
06:1d:c4:c3:03:87:20:b6:7e:e7:80:91:21:df:ea:b6:8f:7b:
a0:e0:5e:24:b5:67:e1:d6:87:84:1c:94:56:74:f6:b2:ab:92:
c8:7a:03:99:ff:25:e2:1c:d2:49:86:33:7f:cd:57:fd:84:b0:
8d:9e:79:f8:b6:29:90:03:f2:18:be:de:43:4c:59:3f:17:36:
5b:c5:47:e7:9c:0a:1e:87:b6:f7:92:8b:d8:1e:bc:92:1e:32:
2e:5a:fc:14:3d:92:9e:b2:fb:5c:c1:7c:4a:47:ec:bd:26:e0:
78:b5:23:d8:0d:0d:2a:06:ca:a7:e3:d5:87:f3:24:7f:17:e6:
c4:ec:9e:1d:42:ec:83:7e:cd:db:97:17:8b:d5:ec:2c:ed:3d:
61:e5:85:0d:80:5f:87:43:b6:7e:33:56:f4:a9:12:25:b8:2d:
66:ee:6a:31:b8:6f:45:70:5a:11:df:19:dc:47:96:8e:af:6b:
1d:60:3c:25:e5:d3:5b:8f:21:2c:3c:68:23:8d:ef:85:c1:4b:
5d:cc:15:7b:dd:d1:d8:ed:b5:fd:db:b9:ff:c9:9f:5e:1e:39:
8d:c0:9a:8c
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAcQAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDA5MTQxNTE0WhcNMjkwNDA5MTQxNTE0WjAYMRYw
FAYDVQQDEw02OWQ3YjQ3Ni1hMzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyuosMg4NUW+l+k9EqxB9SC/4gUTyt3pWn3MZOziqNCjk5zvE4LSxgJm9
mtTyHbVszILviDYGBzYpWEYN9kWNTf63eIkq4IZ1LiuiFFuvlbhvdK+A5A7NcCAr
iR1xVpICUjXtQPQD1ernNuseE7ZGU4ErwLgIdfvq7tHH6VJ9NfpnyAFWPQRNnQPc
LI3phQfjAfpZ9PRhwg2tk8J58is+9EKV6Wki9p7lemXG+jcBJUUs4nnRXM11+sLo
ZkuZn3GXfUgISzHjfbtwQdRzEgFxlMT1Ceg1Efg/kvb9R2Ed3LP3UgLjLMZvGlo0
HQEUoOh7xvUHmj/VZzmD6WxAKPjALQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFPRW
liAglovqlQRWm2dBHIwv5aEkMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84OTQ1QzE2NjM0MUUxMUYxOTA3MEY5RDlDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGa1/IDBAKa1/gwDQYJ
KoZIhvcNAQELBQADggEBAJxRCn/oSmNbSqL9wusKjYIwPYz5K4l27hcakLBnzu+T
Z9CEkAYdxMMDhyC2fueAkSHf6raPe6DgXiS1Z+HWh4QclFZ09rKrksh6A5n/JeIc
0kmGM3/NV/2EsI2eefi2KZAD8hi+3kNMWT8XNlvFR+ecCh6HtveSi9gevJIeMi5a
/BQ9kp6y+1zBfEpH7L0m4Hi1I9gNDSoGyqfj1YfzJH8X5sTsnh1C7IN+zduXF4vV
7CztPWHlhQ2AX4dDtn4zVvSpEiW4LWbuajG4b0VwWhHfGdxHlo6vax1gPCXl01uP
ISw8aCON74XBS13MFXvd0djttf3buf/Jn14eOY3Amow=
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:24:06 2026 by rpki-client