Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA3883E4117411F18CD933D7DAE4EC9C.roa
File: AA3883E4117411F18CD933D7DAE4EC9C.roa (raw, json)
Hash identifier: fUBODywYsfHVGa6+NIFjjA0T2MCHF8KemKTIarBFips=
Subject key identifier: 30:CC:7B:F9:8B:0B:49:B9:9B:8B:7F:9A:C9:39:74:3E:0C:F9:C2:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB50
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA3883E4117411F18CD933D7DAE4EC9C.roa
Signing time: Tue 24 Feb 2026 11:33:40 +0000
ROA not before: Tue 24 Feb 2026 11:33:35 +0000
ROA not after: Tue 31 Mar 2026 11:33:35 +0000
asID: 62240
IP address blocks: 154.194.80.0/24 maxlen: 24
154.195.107.0/24 maxlen: 24
154.195.109.0/24 maxlen: 24
154.195.110.0/24 maxlen: 24
154.195.114.0/24 maxlen: 24
154.195.115.0/24 maxlen: 24
154.195.119.0/24 maxlen: 24
154.196.83.0/24 maxlen: 24
154.196.84.0/24 maxlen: 24
154.196.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113488 (0x1bb50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 11:33:35 2026 GMT
Not After : Mar 31 11:33:35 2026 GMT
Subject: CN=699d8c93-a579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:61:14:73:2a:3c:67:9e:8e:f9:25:88:c5:6e:
9d:83:83:6a:85:0b:6e:1d:5a:97:54:8e:69:13:33:
ed:bc:b2:6b:31:1e:9a:0a:c6:48:5e:76:4a:70:20:
4f:f7:17:58:c8:69:05:7c:3b:d8:d4:02:ad:14:f0:
bf:90:99:2f:84:d7:d8:7f:ed:96:7e:91:2c:d9:bf:
34:ee:f4:2b:bc:a6:b5:ff:2a:ab:12:0c:d3:ef:0b:
61:80:af:e5:55:1d:5d:88:68:36:58:fe:87:bf:d0:
cc:40:1a:28:72:29:52:d0:58:57:09:47:fb:d4:76:
ef:54:30:3f:8a:75:cc:3c:78:31:20:b7:92:c9:ef:
20:3d:26:41:5c:f6:36:59:a0:e5:9a:1b:08:e0:b4:
56:ca:0d:55:ac:f7:0d:38:8c:c1:02:21:fc:80:69:
53:15:1c:b2:0b:6b:aa:e2:2d:db:d0:03:a5:23:d0:
dc:2f:34:9a:05:f4:65:4a:89:1e:55:7c:80:8e:74:
a7:21:2e:13:c1:e4:99:1b:88:56:9f:1c:58:f8:6d:
bd:f3:1b:a9:4c:a5:8d:dd:d7:d7:e2:4c:2c:92:88:
1b:8e:40:db:23:c9:fa:2f:fe:cf:74:76:54:9e:52:
93:c8:90:ef:0c:03:d6:c1:3f:0a:d6:b3:f6:51:0d:
a4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CC:7B:F9:8B:0B:49:B9:9B:8B:7F:9A:C9:39:74:3E:0C:F9:C2:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA3883E4117411F18CD933D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.80.0/24
154.195.107.0/24
154.195.109.0-154.195.110.255
154.195.114.0/23
154.195.119.0/24
154.196.83.0-154.196.85.255
Signature Algorithm: sha256WithRSAEncryption
bc:a2:8c:bf:bb:b1:8c:98:9d:10:5c:40:94:b1:a8:a2:a5:9a:
c1:ec:4c:c3:b1:b1:4b:0d:ae:44:65:f9:c6:5f:ab:31:cb:19:
14:6c:72:92:2b:b6:79:f3:bc:79:1f:9d:10:6a:64:38:f5:98:
15:b2:d6:70:3d:17:17:b4:96:df:40:ee:2f:8c:7c:70:a8:e4:
a4:11:63:c3:9f:bf:84:c0:63:e0:df:2b:90:23:d0:c7:c9:50:
d7:ab:89:f6:bf:f7:32:76:bd:2d:73:36:d1:5a:16:90:fe:75:
98:6b:28:ff:95:15:84:e3:29:47:e2:14:a9:67:cf:90:c2:15:
01:2c:f8:7c:2c:ad:40:00:56:5f:9e:8f:d1:1b:04:ed:e8:33:
92:c6:d4:3f:48:f9:c7:bc:51:a6:83:e2:8e:59:25:16:20:12:
f6:b3:95:26:c8:63:97:3b:14:73:40:03:2d:1e:c8:68:72:fa:
e9:6e:85:23:92:13:37:bb:be:a4:0a:3f:98:2c:9e:e3:00:16:
18:c4:d3:fc:a6:fd:49:98:05:b8:52:b1:81:6a:5c:e8:88:b4:
dc:78:fb:50:21:6b:a3:db:25:4d:6a:2c:b2:4a:1a:ac:68:70:
31:1a:26:a7:16:74:f9:36:ca:8f:f3:d5:94:4b:94:7b:49:fc:
6c:62:a2:28
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIDAbtQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjI0MTEzMzM1WhcNMjYwMzMxMTEzMzM1WjAYMRYw
FAYDVQQDEw02OTlkOGM5My1hNTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA32EUcyo8Z56O+SWIxW6dg4NqhQtuHVqXVI5pEzPtvLJrMR6aCsZIXnZK
cCBP9xdYyGkFfDvY1AKtFPC/kJkvhNfYf+2WfpEs2b807vQrvKa1/yqrEgzT7wth
gK/lVR1diGg2WP6Hv9DMQBoocilS0FhXCUf71HbvVDA/inXMPHgxILeSye8gPSZB
XPY2WaDlmhsI4LRWyg1VrPcNOIzBAiH8gGlTFRyyC2uq4i3b0AOlI9DcLzSaBfRl
SokeVXyAjnSnIS4TweSZG4hWnxxY+G298xupTKWN3dfX4kwskogbjkDbI8n6L/7P
dHZUnlKTyJDvDAPWwT8K1rP2UQ2kGQIDAQABo4IC0zCCAs8wHQYDVR0OBBYEFDDM
e/mLC0m5m4t/msk5dD4M+cL3MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BQTM4ODNFNDExNzQxMUYxOENEOTMzRDdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQAmsJQAwQAmsNrMAwDBACa
w20DBACaw24DBAGaw3IDBACaw3cwDAMEAJrEUwMEAZrEVDANBgkqhkiG9w0BAQsF
AAOCAQEAvKKMv7uxjJidEFxAlLGooqWawexMw7GxSw2uRGX5xl+rMcsZFGxykiu2
efO8eR+dEGpkOPWYFbLWcD0XF7SW30DuL4x8cKjkpBFjw5+/hMBj4N8rkCPQx8lQ
16uJ9r/3Mna9LXM20VoWkP51mGso/5UVhOMpR+IUqWfPkMIVASz4fCytQABWX56P
0RsE7egzksbUP0j5x7xRpoPijlklFiAS9rOVJshjlzsUc0ADLR7IaHL66W6FI5IT
N7u+pAo/mCye4wAWGMTT/Kb9SZgFuFKxgWpc6Ii03Hj7UCFro9slTWosskoarGhw
MRompxZ0+TbKj/PVlEuUe0n8bGKiKA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:33 2026 by rpki-client