Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C530AB34356111F1AA1D96F5CE1D38B0.roa
File: C530AB34356111F1AA1D96F5CE1D38B0.roa (raw, json)
Hash identifier: /GnC+Qxwf8ZdAIKWmYv9GE26sb9z8+09Ik5wniMliNs=
Subject key identifier: 29:3F:A2:5A:81:95:57:C0:6B:29:C6:14:4B:B7:C5:45:65:0C:15:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C485
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C530AB34356111F1AA1D96F5CE1D38B0.roa
Signing time: Sat 11 Apr 2026 04:49:06 +0000
ROA not before: Sat 11 Apr 2026 04:49:01 +0000
ROA not after: Tue 10 Apr 2029 04:49:01 +0000
asID: 17561
IP address blocks: 154.194.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115845 (0x1c485)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 11 04:49:01 2026 GMT
Not After : Apr 10 04:49:01 2029 GMT
Subject: CN=69d9d2c2-2f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:8e:1b:8d:89:e2:4a:4a:ca:63:45:bd:92:
99:c1:da:6d:40:18:8a:48:ef:7d:c9:df:7e:d1:91:
5f:ee:44:47:8e:d7:4f:dc:a5:0e:96:1e:8f:ec:00:
8e:41:d9:a8:67:e9:54:b0:50:64:14:2f:09:84:a3:
bd:8a:c0:de:4c:ae:78:9f:8a:4d:07:41:3c:bf:63:
43:2b:5a:76:96:68:dc:90:71:88:0a:4b:82:20:fb:
a6:40:fd:5e:23:6a:58:6a:b8:d9:4e:d9:5d:11:a4:
29:58:6a:eb:c1:69:8c:e6:2b:3c:4f:81:a8:27:21:
69:f5:e4:bd:29:52:39:52:ae:9a:62:6b:6d:0c:57:
1c:b8:fa:fb:b4:b2:fe:7f:5b:63:52:2f:a5:a9:76:
5e:a3:f6:ac:e4:6b:5b:b0:f9:92:b1:1e:21:2d:86:
a0:93:be:9e:36:63:75:b2:c3:aa:07:10:b1:31:8d:
d6:86:8b:9b:e8:b0:ee:1d:e1:e6:f9:20:ed:c2:55:
e9:95:ba:94:6e:d4:32:68:5f:e0:82:4a:3f:fd:5f:
f8:c1:4e:a1:9d:5c:27:b6:dd:ce:23:df:ec:35:4c:
84:ec:ee:b2:83:82:68:1d:8f:2d:e9:cb:55:ea:d0:
e2:fc:08:ae:2d:0c:33:b1:f9:4f:ad:58:12:10:d5:
ba:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3F:A2:5A:81:95:57:C0:6B:29:C6:14:4B:B7:C5:45:65:0C:15:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C530AB34356111F1AA1D96F5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.44.0/24
Signature Algorithm: sha256WithRSAEncryption
10:56:89:ec:9b:79:8f:d1:27:95:7d:d9:d1:7d:e5:2a:ac:36:
2c:00:31:ee:6e:b0:a2:27:26:18:c7:d4:b1:75:bf:90:a5:37:
a9:b5:af:c0:d8:f6:e8:63:02:ad:df:57:32:80:23:03:44:8c:
a9:93:99:36:0e:8f:c9:9b:28:0a:b8:59:8c:c0:f7:16:08:67:
16:6e:df:a3:ec:bc:d1:08:95:ac:d8:ba:a3:57:58:8f:3f:0c:
5e:5e:27:cb:87:1d:91:eb:d8:05:23:5f:40:ca:36:3b:a8:ce:
95:78:9e:ac:ca:63:b1:54:86:fb:e3:32:02:b5:6e:05:a0:8c:
81:f1:68:e2:f4:53:f3:6d:af:0f:b0:5b:5d:76:56:9e:d8:ec:
20:3f:dc:cc:c9:71:af:d3:94:02:a7:62:26:4e:c1:6e:d2:43:
f6:72:07:0a:40:60:a8:65:28:39:a4:c9:4c:58:43:73:9f:8b:
bf:57:36:8c:0e:12:8c:d7:69:7c:84:ec:84:c3:82:10:e1:53:
24:ac:9d:41:b4:cc:11:69:7b:1f:e5:f1:54:e9:5f:9c:7c:13:
16:3d:d4:65:3e:d4:56:d4:32:74:8c:b4:10:71:40:9e:1a:8f:
36:60:68:ff:33:8b:6a:6d:79:84:e4:6b:99:fb:63:9b:4b:a9:
27:5f:26:77
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcSFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDExMDQ0OTAxWhcNMjkwNDEwMDQ0OTAxWjAYMRYw
FAYDVQQDEw02OWQ5ZDJjMi0yZjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvieOG42J4kpKymNFvZKZwdptQBiKSO99yd9+0ZFf7kRHjtdP3KUOlh6P
7ACOQdmoZ+lUsFBkFC8JhKO9isDeTK54n4pNB0E8v2NDK1p2lmjckHGICkuCIPum
QP1eI2pYarjZTtldEaQpWGrrwWmM5is8T4GoJyFp9eS9KVI5Uq6aYmttDFccuPr7
tLL+f1tjUi+lqXZeo/as5GtbsPmSsR4hLYagk76eNmN1ssOqBxCxMY3Whoub6LDu
HeHm+SDtwlXplbqUbtQyaF/ggko//V/4wU6hnVwntt3OI9/sNUyE7O6yg4JoHY8t
6ctV6tDi/AiuLQwzsflPrVgSENW6IwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCk/
olqBlVfAaynGFEu3xUVlDBU5MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNTMwQUIzNDM1NjExMUYxQUExRDk2RjVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsIsMA0GCSqGSIb3DQEB
CwUAA4IBAQAQVonsm3mP0SeVfdnRfeUqrDYsADHubrCiJyYYx9Sxdb+QpTepta/A
2PboYwKt31cygCMDRIypk5k2Do/JmygKuFmMwPcWCGcWbt+j7LzRCJWs2LqjV1iP
PwxeXifLhx2R69gFI19AyjY7qM6VeJ6symOxVIb74zICtW4FoIyB8Wji9FPzba8P
sFtddlae2OwgP9zMyXGv05QCp2ImTsFu0kP2cgcKQGCoZSg5pMlMWENzn4u/VzaM
DhKM12l8hOyEw4IQ4VMkrJ1BtMwRaXsf5fFU6V+cfBMWPdRlPtRW1DJ0jLQQcUCe
Go82YGj/M4tqbXmE5GuZ+2ObS6knXyZ3
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:01:45 2026 by rpki-client