Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D0FFEAA33F211F1B2FC5FD3CE1D38B0.roa
File: 8D0FFEAA33F211F1B2FC5FD3CE1D38B0.roa (raw, json)
Hash identifier: RVLqHJVpGQop2ZkplS9pbIia0O+lS52Hy0DcQDd9VNQ=
Subject key identifier: 75:35:7A:8E:2C:79:2B:73:1E:9B:78:63:F0:AF:3A:39:C6:8B:C3:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C3AB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D0FFEAA33F211F1B2FC5FD3CE1D38B0.roa
Signing time: Thu 09 Apr 2026 09:00:27 +0000
ROA not before: Thu 09 Apr 2026 09:00:22 +0000
ROA not after: Mon 09 Apr 2029 09:00:22 +0000
asID: 17561
IP address blocks: 154.81.70.0/24 maxlen: 24
154.81.71.0/24 maxlen: 24
154.81.72.0/24 maxlen: 24
154.81.73.0/24 maxlen: 24
154.81.74.0/24 maxlen: 24
154.81.75.0/24 maxlen: 24
154.81.76.0/24 maxlen: 24
154.81.77.0/24 maxlen: 24
154.81.78.0/24 maxlen: 24
154.81.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115627 (0x1c3ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 09:00:22 2026 GMT
Not After : Apr 9 09:00:22 2029 GMT
Subject: CN=69d76aab-f0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0f:75:aa:ca:d1:14:df:b6:f0:24:5b:34:6d:
eb:f8:9d:5e:84:30:a1:31:12:f7:04:19:3a:46:83:
a7:3d:2b:10:93:82:ed:57:84:d1:52:c7:7d:53:eb:
db:91:7d:52:d7:02:66:13:a5:4a:5c:86:e4:49:ef:
ec:4b:af:51:0b:eb:02:6c:36:e1:bf:c4:e6:ab:e7:
36:9d:62:ba:e6:d8:54:b2:87:92:ea:5c:7e:18:f6:
da:90:e4:0e:c3:fd:6b:55:23:97:aa:1f:87:2e:0e:
e1:74:eb:65:af:ee:66:c8:5b:19:05:90:b2:d2:46:
7e:c0:a7:f0:6e:c3:38:18:44:35:1e:62:5d:65:5d:
b7:85:76:7e:53:f0:6d:85:88:03:8a:b1:60:d9:28:
4d:be:79:20:ce:dd:60:ec:4b:fb:17:f4:e8:fa:f8:
6b:c7:70:f1:a5:23:a7:14:a3:3d:f1:a4:fb:1c:c5:
2e:ae:bc:59:dc:f5:ec:3a:12:ec:2c:87:a4:99:74:
5c:a4:67:7b:be:f6:70:9f:ef:2d:84:ba:c7:04:29:
a4:08:28:33:4b:e2:47:7d:11:55:e5:68:d5:78:0d:
8d:af:5f:e5:8a:d3:81:83:65:11:56:8e:99:3e:12:
8e:34:2b:f4:ac:f6:7d:fe:37:4a:ac:77:cd:d1:3f:
80:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:35:7A:8E:2C:79:2B:73:1E:9B:78:63:F0:AF:3A:39:C6:8B:C3:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D0FFEAA33F211F1B2FC5FD3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.70.0-154.81.79.255
Signature Algorithm: sha256WithRSAEncryption
2f:fa:05:81:ca:02:21:72:cd:a2:3a:e6:f2:7f:22:d4:1e:02:
93:fb:45:a3:7b:d3:8e:eb:87:9e:24:92:42:93:2a:ef:1f:da:
af:ff:da:37:4c:d1:4e:7d:a3:b4:26:37:6b:f9:cd:b7:33:70:
b8:79:bd:29:a7:0d:2b:d0:be:8c:24:a6:35:e9:9f:ea:03:41:
96:95:96:5e:20:99:09:66:8d:a8:6c:e1:95:4e:b2:36:dd:bf:
10:5c:6e:d6:ee:aa:03:da:ff:85:0c:48:57:c6:8a:3c:00:9c:
ec:ca:15:59:13:e7:e3:36:c3:c6:6b:1b:5f:50:23:e4:59:86:
02:0b:f9:be:86:d0:7c:58:f1:87:2a:ee:7e:ee:8e:5a:8d:f9:
a3:4f:75:01:62:e6:94:3c:43:0d:01:02:bb:c4:96:ec:d9:40:
45:1f:9b:8e:92:21:48:cd:93:ee:4a:8f:72:3a:4b:a4:25:0c:
2c:74:68:11:d5:b9:27:d9:41:3c:3e:33:e1:c3:f0:db:87:98:
40:52:da:1c:5a:15:11:16:f3:6c:c1:f6:ed:74:1a:37:11:da:
0f:28:54:a8:e3:40:89:4b:43:98:73:e8:5c:ca:56:82:ed:ac:
f6:59:60:c1:b7:a5:91:25:fd:96:d2:71:37:c6:ee:41:7b:48:
f0:c2:0d:f4
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAcOrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDA5MDkwMDIyWhcNMjkwNDA5MDkwMDIyWjAYMRYw
FAYDVQQDEw02OWQ3NmFhYi1mMGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzQ91qsrRFN+28CRbNG3r+J1ehDChMRL3BBk6RoOnPSsQk4LtV4TRUsd9
U+vbkX1S1wJmE6VKXIbkSe/sS69RC+sCbDbhv8Tmq+c2nWK65thUsoeS6lx+GPba
kOQOw/1rVSOXqh+HLg7hdOtlr+5myFsZBZCy0kZ+wKfwbsM4GEQ1HmJdZV23hXZ+
U/BthYgDirFg2ShNvnkgzt1g7Ev7F/To+vhrx3DxpSOnFKM98aT7HMUurrxZ3PXs
OhLsLIekmXRcpGd7vvZwn+8thLrHBCmkCCgzS+JHfRFV5WjVeA2Nr1/litOBg2UR
Vo6ZPhKONCv0rPZ9/jdKrHfN0T+AwQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFHU1
eo4seStzHpt4Y/CvOjnGi8NXMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84RDBGRkVBQTMzRjIxMUYxQjJGQzVGRDNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGaUUYDBASaUUAwDQYJ
KoZIhvcNAQELBQADggEBAC/6BYHKAiFyzaI65vJ/ItQeApP7RaN7047rh54kkkKT
Ku8f2q//2jdM0U59o7QmN2v5zbczcLh5vSmnDSvQvowkpjXpn+oDQZaVll4gmQlm
jahs4ZVOsjbdvxBcbtbuqgPa/4UMSFfGijwAnOzKFVkT5+M2w8ZrG19QI+RZhgIL
+b6G0HxY8Ycq7n7ujlqN+aNPdQFi5pQ8Qw0BArvEluzZQEUfm46SIUjNk+5Kj3I6
S6QlDCx0aBHVuSfZQTw+M+HD8NuHmEBS2hxaFREW82zB9u10GjcR2g8oVKjjQIlL
Q5hz6FzKVoLtrPZZYMG3pZEl/ZbScTfG7kF7SPDCDfQ=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:54 2026 by rpki-client