Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD033308308611F1AFB569E4DAE4EC9C.roa
File: BD033308308611F1AFB569E4DAE4EC9C.roa (raw, json)
Hash identifier: q7EP8XCRMk+7W/b62x5xEh0kBqXSwXjhZM9H2lddcwU=
Subject key identifier: A0:81:5B:7E:69:FF:DC:82:71:98:78:B5:1D:1A:C4:CB:ED:3A:77:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C2C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD033308308611F1AFB569E4DAE4EC9C.roa
Signing time: Sun 05 Apr 2026 00:31:08 +0000
ROA not before: Sun 05 Apr 2026 00:00:49 +0000
ROA not after: Mon 11 May 2026 00:00:49 +0000
asID: 205023
IP address blocks: 154.197.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115400 (0x1c2c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 5 00:00:49 2026 GMT
Not After : May 11 00:00:49 2026 GMT
Subject: CN=69d1ad4c-8575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:eb:5b:75:d9:9a:ec:af:31:fd:f9:22:04:31:
ac:4c:49:2e:bb:29:29:af:76:61:f4:f5:70:09:be:
19:47:c1:5f:b2:38:83:91:53:ce:f4:0b:1d:ab:bb:
c9:98:2c:9e:47:16:85:8f:60:29:2b:2f:24:ff:55:
12:74:af:64:07:06:09:de:cd:49:40:90:ef:af:73:
a4:7e:40:66:62:38:40:9a:b4:86:02:a3:c2:be:66:
f6:aa:d0:3b:cc:4b:72:c3:3d:ee:09:87:68:27:b8:
da:27:13:65:98:9e:ec:22:9c:be:87:9b:1c:a7:5d:
71:e5:c7:c5:59:72:d4:86:96:4c:80:29:b8:fa:37:
f0:0d:e1:b0:7e:ba:fe:6e:4d:d7:71:10:7e:a6:ce:
be:cc:e0:99:88:69:18:51:4f:36:7f:8d:a0:bd:3a:
d0:03:80:3c:78:09:c9:f2:eb:c5:0e:bf:a8:e8:bd:
09:7e:1e:e9:d2:3c:23:7a:c0:b3:f4:7d:f2:86:b4:
97:ed:46:e8:77:87:8d:5e:cf:f8:5b:8a:e9:df:a2:
d9:bf:15:d7:bb:83:2a:d4:08:d5:e2:dd:0a:b8:57:
3f:70:89:fb:71:b1:3f:68:5f:e0:63:4f:ec:51:d8:
67:2b:1a:05:b4:87:8d:dd:f3:a0:67:8e:2a:93:7d:
ec:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:81:5B:7E:69:FF:DC:82:71:98:78:B5:1D:1A:C4:CB:ED:3A:77:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD033308308611F1AFB569E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.24.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:0b:d6:78:cb:79:16:3e:2b:fb:39:49:ca:61:e2:9f:39:21:
4a:90:3c:e8:55:58:4a:6a:7b:70:55:79:13:c6:3b:4d:a7:cb:
cc:a7:e0:8e:49:56:f1:cc:48:f3:c3:95:f9:11:3d:55:ee:64:
c6:7a:18:62:ca:70:19:b4:50:a6:01:c8:a6:7d:f0:24:4a:4a:
d9:0d:df:2c:e7:cb:aa:2f:c3:05:f6:bc:fc:73:a9:b9:61:1c:
53:f4:12:06:c5:cd:ec:91:86:fe:4b:62:2b:59:db:b1:ad:56:
0f:79:9b:2c:b2:11:b5:a6:ee:6f:e3:dd:9c:8c:82:15:2d:44:
fa:20:9a:b2:65:ab:d7:76:41:a6:a5:a2:21:ed:4f:b2:c3:d6:
8f:3a:54:be:49:83:39:28:ee:2f:5d:0e:29:d1:68:1d:6d:22:
41:0d:21:69:7d:a5:fc:eb:f6:ea:3c:b4:3d:39:ed:a4:0b:8f:
4b:54:17:85:f4:3b:00:b4:95:68:a3:d8:58:dd:61:71:46:e0:
d8:f0:d4:23:85:ba:a9:ff:ef:e1:46:4d:5b:5a:e3:c1:9a:dd:
6b:a1:92:2f:1d:c0:cb:75:24:e3:e9:ac:35:20:c2:40:8e:45:
72:0d:4a:d4:ca:eb:b7:e8:7a:05:b8:45:cd:1f:a6:62:c8:59:
ea:ea:35:79
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcLIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDA1MDAwMDQ5WhcNMjYwNTExMDAwMDQ5WjAYMRYw
FAYDVQQDEw02OWQxYWQ0Yy04NTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApetbddma7K8x/fkiBDGsTEkuuykpr3Zh9PVwCb4ZR8FfsjiDkVPO9Asd
q7vJmCyeRxaFj2ApKy8k/1USdK9kBwYJ3s1JQJDvr3OkfkBmYjhAmrSGAqPCvmb2
qtA7zEtywz3uCYdoJ7jaJxNlmJ7sIpy+h5scp11x5cfFWXLUhpZMgCm4+jfwDeGw
frr+bk3XcRB+ps6+zOCZiGkYUU82f42gvTrQA4A8eAnJ8uvFDr+o6L0Jfh7p0jwj
esCz9H3yhrSX7Ubod4eNXs/4W4rp36LZvxXXu4Mq1AjV4t0KuFc/cIn7cbE/aF/g
Y0/sUdhnKxoFtIeN3fOgZ44qk33sOQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKCB
W35p/9yCcZh4tR0axMvtOnfhMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CRDAzMzMwODMwODYxMUYxQUZCNTY5RTREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsUYMA0GCSqGSIb3DQEB
CwUAA4IBAQCaC9Z4y3kWPiv7OUnKYeKfOSFKkDzoVVhKantwVXkTxjtNp8vMp+CO
SVbxzEjzw5X5ET1V7mTGehhiynAZtFCmAcimffAkSkrZDd8s58uqL8MF9rz8c6m5
YRxT9BIGxc3skYb+S2IrWduxrVYPeZssshG1pu5v492cjIIVLUT6IJqyZavXdkGm
paIh7U+yw9aPOlS+SYM5KO4vXQ4p0WgdbSJBDSFpfaX86/bqPLQ9Oe2kC49LVBeF
9DsAtJVoo9hY3WFxRuDY8NQjhbqp/+/hRk1bWuPBmt1roZIvHcDLdSTj6aw1IMJA
jkVyDUrUyuu36HoFuEXNH6ZiyFnq6jV5
-----END CERTIFICATE-----
Generated at Sat Apr 18 10:25:29 2026 by rpki-client