Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEE0FD70117011F18F0882C2DAE4EC9C.roa
File: BEE0FD70117011F18F0882C2DAE4EC9C.roa (raw, json)
Hash identifier: eoyLr6NA2yq4PTnEFMcZN7VVNkOiwm7Z2rp8sSE2z/M=
Subject key identifier: F6:EE:8A:AE:63:D7:6D:27:47:1B:83:9D:1F:A6:45:1E:30:96:C5:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB4A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEE0FD70117011F18F0882C2DAE4EC9C.roa
Signing time: Tue 24 Feb 2026 11:05:36 +0000
ROA not before: Tue 24 Feb 2026 11:05:32 +0000
ROA not after: Tue 31 Mar 2026 11:05:32 +0000
asID: 62240
IP address blocks: 154.194.112.0/24 maxlen: 24
154.194.113.0/24 maxlen: 24
154.194.114.0/24 maxlen: 24
154.194.115.0/24 maxlen: 24
154.194.116.0/24 maxlen: 24
154.195.24.0/24 maxlen: 24
154.195.25.0/24 maxlen: 24
154.195.26.0/24 maxlen: 24
154.195.27.0/24 maxlen: 24
154.195.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113482 (0x1bb4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 11:05:32 2026 GMT
Not After : Mar 31 11:05:32 2026 GMT
Subject: CN=699d8600-4356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:02:ef:22:a0:db:62:6c:d6:f0:e0:d5:8c:0a:
9f:06:f2:33:c1:9c:27:c4:0d:9e:57:d9:89:62:e7:
58:82:0d:85:c7:6b:09:c0:d3:ed:ef:e1:dd:0f:0a:
f5:51:fe:e5:5a:1f:24:80:49:42:a0:4f:a3:2f:7a:
eb:52:a2:d4:ee:71:21:a1:45:91:d0:bc:ac:38:6f:
a5:a4:ff:94:e2:8d:05:21:1c:7d:4b:2a:00:54:f8:
fb:73:60:6c:22:40:1e:cc:98:29:b2:87:76:a6:7d:
2e:5c:b9:df:21:0c:16:71:50:25:c4:52:c9:74:1c:
dc:26:fc:f8:ab:31:a3:30:96:05:29:21:52:6c:08:
58:51:2c:8d:76:93:35:a1:ea:19:03:55:db:3f:05:
88:6e:1c:10:b0:b5:8b:26:41:df:e8:0e:4f:3f:ba:
92:bb:a4:36:32:0d:7c:b8:67:b2:f3:c2:04:ce:13:
d3:0a:d2:dc:c1:49:d7:65:02:7c:b7:67:ba:2a:81:
46:df:6a:0b:5a:28:3c:cc:ea:89:cf:9b:2a:55:b5:
73:f5:d8:b6:f0:10:71:b3:9a:16:ec:b7:e5:dc:ad:
d1:ac:a6:89:7c:f6:b6:8d:ee:f5:ed:2d:c6:04:83:
a2:fd:d4:e0:6f:8d:b4:5d:69:d9:52:66:06:e2:d6:
32:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EE:8A:AE:63:D7:6D:27:47:1B:83:9D:1F:A6:45:1E:30:96:C5:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEE0FD70117011F18F0882C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.112.0-154.194.116.255
154.195.24.0-154.195.28.255
Signature Algorithm: sha256WithRSAEncryption
1b:b7:1a:d9:41:08:c4:6a:c3:67:43:3a:db:4f:b4:34:35:65:
6d:d4:1e:57:db:76:fa:b2:64:7b:bf:34:27:1c:4f:86:be:d8:
da:d5:32:b6:34:91:c8:34:60:36:91:ff:09:b0:1d:84:cf:ae:
8d:7a:28:fe:b9:71:b4:de:d5:bb:1d:ab:a2:7d:b9:06:cb:db:
d0:68:33:7b:d0:fc:f2:d1:48:97:96:07:ce:14:50:bc:ad:f4:
2c:d6:f5:b3:93:3f:0b:89:93:23:fd:6e:48:1a:1f:9a:ae:98:
3f:6c:bc:be:7a:62:8f:fc:1a:8f:53:f2:b2:c8:d8:dd:cf:f2:
bb:92:fe:f7:1a:43:a0:fb:61:9a:a0:97:96:30:52:b2:35:24:
bd:e3:02:75:9a:b8:73:a3:23:9c:fd:0e:00:33:e9:ce:ca:68:
a7:54:6b:e0:a5:38:41:7e:5a:3e:b0:e1:b5:ee:82:ac:38:1a:
87:ae:db:ed:44:a1:ac:17:04:c4:28:29:17:a6:2c:58:31:e6:
2f:96:33:2c:5e:8d:6d:7a:18:9e:d9:35:f9:69:c3:8d:de:4b:
50:83:63:a4:c6:46:82:b2:ba:b8:06:17:08:4f:71:4a:27:61:
62:ef:63:0d:cb:96:80:c6:5f:85:05:e9:bf:f1:7f:2a:28:3e:
e6:e0:2e:4f
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgIDAbtKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjI0MTEwNTMyWhcNMjYwMzMxMTEwNTMyWjAYMRYw
FAYDVQQDEw02OTlkODYwMC00MzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9wLvIqDbYmzW8ODVjAqfBvIzwZwnxA2eV9mJYudYgg2Fx2sJwNPt7+Hd
Dwr1Uf7lWh8kgElCoE+jL3rrUqLU7nEhoUWR0LysOG+lpP+U4o0FIRx9SyoAVPj7
c2BsIkAezJgpsod2pn0uXLnfIQwWcVAlxFLJdBzcJvz4qzGjMJYFKSFSbAhYUSyN
dpM1oeoZA1XbPwWIbhwQsLWLJkHf6A5PP7qSu6Q2Mg18uGey88IEzhPTCtLcwUnX
ZQJ8t2e6KoFG32oLWig8zOqJz5sqVbVz9di28BBxs5oW7Lfl3K3RrKaJfPa2je71
7S3GBIOi/dTgb420XWnZUmYG4tYylQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFPbu
iq5j120nRxuDnR+mRR4wlsUrMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CRUUwRkQ3MDExNzAxMUYxOEYwODgyQzJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBASawnADBACawnQwDAME
A5rDGAMEAJrDHDANBgkqhkiG9w0BAQsFAAOCAQEAG7ca2UEIxGrDZ0M620+0NDVl
bdQeV9t2+rJke780JxxPhr7Y2tUytjSRyDRgNpH/CbAdhM+ujXoo/rlxtN7Vux2r
on25Bsvb0Ggze9D88tFIl5YHzhRQvK30LNb1s5M/C4mTI/1uSBofmq6YP2y8vnpi
j/waj1PyssjY3c/yu5L+9xpDoPthmqCXljBSsjUkveMCdZq4c6MjnP0OADPpzspo
p1Rr4KU4QX5aPrDhte6CrDgah67b7UShrBcExCgpF6YsWDHmL5YzLF6NbXoYntk1
+WnDjd5LUINjpMZGgrK6uAYXCE9xSidhYu9jDcuWgMZfhQXpv/F/Kig+5uAuTw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:23 2026 by rpki-client