Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C272DCD000CA11F196E24279DAE4EC9C.roa
File: C272DCD000CA11F196E24279DAE4EC9C.roa (raw, json)
Hash identifier: K9V0wQBIDg0NRiBBxchP5gl8lZjb2SuRja+DsG68Z6Q=
Subject key identifier: F5:B4:99:76:72:C2:3C:48:D2:52:8D:54:33:4F:65:D0:09:82:ED:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B856
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C272DCD000CA11F196E24279DAE4EC9C.roa
Signing time: Tue 03 Feb 2026 06:37:07 +0000
ROA not before: Tue 03 Feb 2026 06:37:03 +0000
ROA not after: Tue 10 Mar 2026 06:37:03 +0000
asID: 14315
IP address blocks: 154.203.4.0/22 maxlen: 24
154.203.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112726 (0x1b856)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 3 06:37:03 2026 GMT
Not After : Mar 10 06:37:03 2026 GMT
Subject: CN=69819793-81e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b8:ac:3c:89:57:e9:2c:3e:c4:00:00:5f:8b:
7b:6c:43:a8:71:e4:b4:e8:f6:7e:1d:28:b0:7b:0d:
4f:69:cb:a3:d2:d5:a2:67:09:df:a7:d2:a2:e4:51:
9c:28:b7:aa:92:8a:16:58:54:93:69:93:5f:11:92:
9a:4f:52:56:23:81:da:41:40:b5:8d:28:c9:07:4c:
01:ac:e3:64:66:79:8d:29:21:ce:f1:6a:a8:35:c6:
75:5e:21:61:42:e4:41:25:99:f5:e7:e4:b8:39:61:
e9:71:9b:84:60:37:31:be:2e:5c:9b:46:04:81:d4:
0f:41:9d:b9:a7:4e:ff:dd:f2:5b:b4:53:7d:3f:02:
5f:25:ba:5b:c4:84:0e:bc:a7:45:6d:a3:ac:42:aa:
d2:88:51:2a:68:66:a1:d8:78:0c:04:b8:bf:3d:ba:
ac:14:2e:b3:fa:39:3d:bd:80:f1:de:d1:82:8c:e3:
f7:09:03:75:5f:32:b7:12:ce:cd:47:da:f0:f1:c5:
7c:a6:7a:63:d5:a6:f2:8e:0f:70:4c:01:3a:92:0c:
2f:c4:be:eb:06:7f:6a:ea:9c:61:a4:1c:d5:cf:05:
5d:44:85:e6:49:89:cd:a6:02:04:44:50:a7:7c:5f:
a8:ff:77:90:8d:66:ab:5a:a0:06:24:f9:7e:32:49:
3e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B4:99:76:72:C2:3C:48:D2:52:8D:54:33:4F:65:D0:09:82:ED:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C272DCD000CA11F196E24279DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.4.0/22
154.203.92.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:82:c8:36:fe:bf:52:49:a0:ec:ea:1f:5e:ae:41:18:e9:d1:
2c:d2:93:73:2a:ff:76:81:70:a1:cc:3d:cd:e9:a1:ec:05:30:
eb:fc:cb:8a:c2:46:c8:58:c3:79:d6:10:20:b7:0e:f6:83:bb:
94:3c:2d:6d:6f:49:21:06:a6:a5:9a:df:66:ec:41:95:fb:4c:
79:ae:19:92:f1:1e:92:4e:d6:4b:40:dd:47:ba:b3:3a:45:0f:
2c:59:b7:08:d5:56:a8:5b:fa:ad:89:38:5b:4a:20:7d:ce:4e:
51:d9:d1:10:81:7a:3f:e8:8b:06:a4:95:2c:02:92:f8:b1:4e:
a3:1d:2b:8c:af:99:37:8d:c6:64:25:6f:99:25:9f:74:79:c8:
a4:11:df:03:aa:8a:1a:49:2f:fb:2f:dc:ba:26:8e:cb:b2:2f:
03:4f:d0:a0:d3:64:ac:c0:17:33:8e:df:cb:c5:c4:b8:f5:4b:
16:03:f2:19:6f:9b:54:8c:e7:77:60:cf:89:a2:d9:81:e0:e6:
e5:e6:b7:6b:0c:e1:32:d7:71:65:10:7d:b2:9f:10:9a:e7:75:
85:5a:5a:0b:0c:d3:0f:d5:5f:32:b0:ff:7d:7d:03:9e:e6:e6:
25:c3:7f:58:26:f1:2e:cb:19:2f:e7:70:f6:dc:56:ea:68:33:
02:0f:64:98
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAbhWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjAzMDYzNzAzWhcNMjYwMzEwMDYzNzAzWjAYMRYw
FAYDVQQDEw02OTgxOTc5My04MWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5bisPIlX6Sw+xAAAX4t7bEOoceS06PZ+HSiwew1Pacuj0tWiZwnfp9Ki
5FGcKLeqkooWWFSTaZNfEZKaT1JWI4HaQUC1jSjJB0wBrONkZnmNKSHO8WqoNcZ1
XiFhQuRBJZn15+S4OWHpcZuEYDcxvi5cm0YEgdQPQZ25p07/3fJbtFN9PwJfJbpb
xIQOvKdFbaOsQqrSiFEqaGah2HgMBLi/PbqsFC6z+jk9vYDx3tGCjOP3CQN1XzK3
Es7NR9rw8cV8pnpj1abyjg9wTAE6kgwvxL7rBn9q6pxhpBzVzwVdRIXmSYnNpgIE
RFCnfF+o/3eQjWarWqAGJPl+Mkk+WwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFPW0
mXZywjxI0lKNVDNPZdAJgu11MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMjcyRENEMDAwQ0ExMUYxOTZFMjQyNzlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCmssEAwQCmstcMA0GCSqG
SIb3DQEBCwUAA4IBAQBrgsg2/r9SSaDs6h9erkEY6dEs0pNzKv92gXChzD3N6aHs
BTDr/MuKwkbIWMN51hAgtw72g7uUPC1tb0khBqalmt9m7EGV+0x5rhmS8R6STtZL
QN1HurM6RQ8sWbcI1VaoW/qtiThbSiB9zk5R2dEQgXo/6IsGpJUsApL4sU6jHSuM
r5k3jcZkJW+ZJZ90ecikEd8DqooaSS/7L9y6Jo7Lsi8DT9Cg02SswBczjt/LxcS4
9UsWA/IZb5tUjOd3YM+JotmB4Obl5rdrDOEy13FlEH2ynxCa53WFWloLDNMP1V8y
sP99fQOe5uYlw39YJvEuyxkv53D23FbqaDMCD2SY
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:37 2026 by rpki-client