Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C46B6726397011F1ACEC7CC4CE1D38B0.roa
File: C46B6726397011F1ACEC7CC4CE1D38B0.roa (raw, json)
Hash identifier: YGcRCpMMnA2WPkDznmrj8P8KszUNnuxNx32/CYO2hlg=
Subject key identifier: A7:07:10:41:E5:5A:E8:7F:4A:82:44:3B:AA:9D:7E:06:B6:13:37:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C585
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C46B6726397011F1ACEC7CC4CE1D38B0.roa
Signing time: Thu 16 Apr 2026 08:46:32 +0000
ROA not before: Thu 16 Apr 2026 08:46:27 +0000
ROA not after: Wed 29 Apr 2026 08:46:27 +0000
asID: 214143
IP address blocks: 154.196.214.0/24 maxlen: 24
154.203.196.0/22 maxlen: 24
154.203.208.0/22 maxlen: 24
154.203.240.0/24 maxlen: 24
154.206.11.0/24 maxlen: 24
154.208.88.0/22 maxlen: 24
154.222.80.0/23 maxlen: 24
154.222.82.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116101 (0x1c585)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 08:46:27 2026 GMT
Not After : Apr 29 08:46:27 2026 GMT
Subject: CN=69e0a1e8-7f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b4:e6:30:02:1e:52:e3:4c:2a:79:1c:a5:5c:
26:9d:41:23:21:1a:c7:d3:2a:01:ed:d2:77:1b:4e:
db:7f:9b:99:ef:f5:a1:f3:18:28:97:a2:8e:ab:6e:
07:f7:b1:6b:e5:1c:11:57:ae:52:c5:70:4f:cf:98:
38:c1:e2:3c:7a:de:c3:79:85:d3:97:e5:92:9c:5a:
1f:da:0c:e6:86:77:08:5e:f9:28:58:a6:5a:e1:b9:
e9:a5:a4:61:3e:d4:83:17:b2:45:1d:0f:73:73:79:
46:42:94:66:ca:c0:22:89:e8:27:36:e5:ba:0f:09:
6b:42:f9:e2:0a:0d:45:28:71:ae:34:c9:66:ed:b9:
c5:ff:1a:0b:04:91:52:18:57:19:6f:a2:95:eb:d5:
49:05:b3:b4:b7:b5:64:a7:40:79:b1:c4:ba:02:64:
66:2e:6d:21:5b:1e:92:0f:e5:f9:d6:1f:a9:0d:f0:
14:7d:06:60:55:43:99:62:ce:1e:71:87:dc:d2:a5:
5c:21:a3:94:f8:1d:39:42:7d:5b:47:f8:b9:ad:5b:
01:3e:cb:fb:c0:b9:99:5e:2a:aa:d8:c4:53:fc:86:
0a:54:96:f6:20:66:32:18:2c:32:05:e1:91:fa:66:
89:f7:51:e3:1c:e9:80:83:76:27:2f:5f:37:8f:ff:
db:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:07:10:41:E5:5A:E8:7F:4A:82:44:3B:AA:9D:7E:06:B6:13:37:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C46B6726397011F1ACEC7CC4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.214.0/24
154.203.196.0/22
154.203.208.0/22
154.203.240.0/24
154.206.11.0/24
154.208.88.0/22
154.222.80.0/22
Signature Algorithm: sha256WithRSAEncryption
76:f8:ab:a5:17:f2:bb:c2:e0:71:c2:98:ee:68:d4:f1:87:50:
c5:a0:06:01:ef:7d:d3:41:bb:40:68:12:0f:77:21:8c:49:1c:
1e:ca:2e:16:a2:9c:3e:cb:48:b9:9c:44:75:d0:c3:cc:11:86:
4f:df:e0:07:cd:b7:80:59:b9:33:ec:ee:53:4f:c3:5e:be:08:
ae:24:0e:6e:e8:17:92:b9:d1:1b:8f:ae:32:24:0a:b7:cf:ec:
ce:e8:4f:5d:f4:2d:57:94:57:c4:71:83:c0:84:6a:6e:e8:83:
bc:88:31:81:48:99:a5:5b:ba:0f:b4:6c:ad:a6:de:dc:30:96:
c4:6a:8d:97:de:03:99:53:47:a2:91:57:9c:4f:45:dc:27:05:
db:4a:f9:d3:a2:1f:ac:5f:9f:2f:9f:74:bf:5d:07:d9:03:26:
d8:98:ce:0b:e5:f2:07:2e:38:5d:79:da:b7:e9:1c:26:09:d4:
06:b9:21:bc:83:d2:4f:c9:6d:79:04:3c:f8:a0:ab:ff:c5:75:
e2:e0:9d:25:a7:b1:83:57:29:73:16:8e:89:9d:5d:6e:96:a1:
fb:23:f1:4c:11:29:ac:1a:f9:88:a6:c2:a4:f7:39:e4:73:8f:
eb:0e:6c:68:8c:c4:d6:77:2e:d4:24:93:0c:87:fd:1b:39:e2:
69:e6:a6:8a
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgIDAcWFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDE2MDg0NjI3WhcNMjYwNDI5MDg0NjI3WjAYMRYw
FAYDVQQDEw02OWUwYTFlOC03Zjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtLTmMAIeUuNMKnkcpVwmnUEjIRrH0yoB7dJ3G07bf5uZ7/Wh8xgol6KO
q24H97Fr5RwRV65SxXBPz5g4weI8et7DeYXTl+WSnFof2gzmhncIXvkoWKZa4bnp
paRhPtSDF7JFHQ9zc3lGQpRmysAiiegnNuW6DwlrQvniCg1FKHGuNMlm7bnF/xoL
BJFSGFcZb6KV69VJBbO0t7Vkp0B5scS6AmRmLm0hWx6SD+X51h+pDfAUfQZgVUOZ
Ys4ecYfc0qVcIaOU+B05Qn1bR/i5rVsBPsv7wLmZXiqq2MRT/IYKVJb2IGYyGCwy
BeGR+maJ91HjHOmAg3YnL183j//bJwIDAQABo4ICyTCCAsUwHQYDVR0OBBYEFKcH
EEHlWuh/SoJEO6qdfga2EzdQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNDZCNjcyNjM5NzAxMUYxQUNFQzdDQzRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAmsTWAwQCmsvEAwQCmsvQ
AwQAmsvwAwQAms4LAwQCmtBYAwQCmt5QMA0GCSqGSIb3DQEBCwUAA4IBAQB2+Kul
F/K7wuBxwpjuaNTxh1DFoAYB733TQbtAaBIPdyGMSRweyi4Wopw+y0i5nER10MPM
EYZP3+AHzbeAWbkz7O5TT8NevgiuJA5u6BeSudEbj64yJAq3z+zO6E9d9C1XlFfE
cYPAhGpu6IO8iDGBSJmlW7oPtGytpt7cMJbEao2X3gOZU0eikVecT0XcJwXbSvnT
oh+sX58vn3S/XQfZAybYmM4L5fIHLjhdedq36RwmCdQGuSG8g9JPyW15BDz4oKv/
xXXi4J0lp7GDVylzFo6JnV1ulqH7I/FMESmsGvmIpsKk9znkc4/rDmxojMTWdy7U
JJMMh/0bOeJp5qaK
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:28:10 2026 by rpki-client