Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5EBFCBE135011F1BDEE63B9DAE4EC9C.roa
File: C5EBFCBE135011F1BDEE63B9DAE4EC9C.roa (raw, json)
Hash identifier: 0WD3gLKElifWebypfG7RAEowsIxmWxTaStD8TsiNv2M=
Subject key identifier: D2:7B:EB:FB:F0:2E:5B:73:79:1A:C4:BC:E0:09:E1:CD:49:D1:3A:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC1B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5EBFCBE135011F1BDEE63B9DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 20:21:47 +0000
ROA not before: Thu 26 Feb 2026 20:21:41 +0000
ROA not after: Mon 30 Mar 2026 20:21:41 +0000
asID: 401783
IP address blocks: 154.82.158.0/24 maxlen: 24
154.82.196.0/24 maxlen: 24
154.82.197.0/24 maxlen: 24
154.82.198.0/24 maxlen: 24
154.82.199.0/24 maxlen: 24
154.83.65.0/24 maxlen: 24
154.83.67.0/24 maxlen: 24
154.90.128.0/24 maxlen: 24
154.90.136.0/24 maxlen: 24
154.90.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113691 (0x1bc1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 26 20:21:41 2026 GMT
Not After : Mar 30 20:21:41 2026 GMT
Subject: CN=69a0ab5a-95ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:39:fb:15:7f:ca:f9:ff:dc:c6:4f:12:50:64:
ab:fc:c4:36:f2:ae:2e:f2:b7:89:ff:36:f9:4d:3c:
58:74:50:16:1c:29:c6:fc:bb:4e:a5:53:4e:e8:21:
1a:77:42:21:2a:9f:44:a3:cb:0f:66:1f:02:7b:29:
c4:14:9c:18:29:3a:30:1b:53:b7:94:63:db:85:2e:
36:60:25:e9:37:5a:80:e0:31:53:45:a7:4d:e0:86:
8e:62:64:74:55:4a:8d:ab:e4:fd:d8:4c:e9:03:93:
3d:38:31:d3:cc:c5:b4:68:eb:86:5b:86:85:38:34:
40:d5:76:c2:9d:e3:92:ad:ee:83:3d:62:a1:bb:ac:
77:a6:47:59:43:a5:c2:15:12:c1:4e:c9:b4:43:9d:
69:75:c0:60:c0:22:7e:b2:6a:4c:68:91:10:24:3b:
c9:70:f9:99:d8:03:12:33:09:4f:55:00:ce:8a:db:
06:b9:df:42:08:bf:fb:63:0c:44:99:f7:6d:6a:12:
d9:f2:3d:b1:16:60:b3:14:93:63:4b:97:e1:fa:fb:
ea:7c:b4:32:1d:af:62:07:4a:8c:c9:74:f4:93:ce:
84:1f:ae:66:3b:ff:55:0b:dc:d5:77:e1:cc:7f:5c:
b3:d0:8e:53:f7:9e:ed:e3:c9:fb:c4:d2:5a:78:c7:
86:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7B:EB:FB:F0:2E:5B:73:79:1A:C4:BC:E0:09:E1:CD:49:D1:3A:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5EBFCBE135011F1BDEE63B9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.158.0/24
154.82.196.0/22
154.83.65.0/24
154.83.67.0/24
154.90.128.0/24
154.90.136.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:97:ef:26:d7:d0:2a:78:21:bd:5d:04:2d:23:7c:3d:3c:55:
07:30:9b:f2:9f:14:b5:64:74:53:1f:ff:1f:86:ec:a8:22:75:
8f:a8:2a:75:f1:74:17:e4:12:4b:d2:03:86:55:42:f9:15:ae:
38:a4:5f:d9:71:54:93:00:4a:10:55:fa:e8:3a:bd:60:8e:97:
7c:f9:01:20:0a:1f:5f:84:93:f1:e0:8d:e8:60:99:fa:7b:bc:
21:69:33:0a:76:a8:ac:80:48:42:ec:c2:cf:45:c6:6e:05:c1:
00:d9:c1:e9:0b:36:ba:e6:11:64:57:e2:31:5c:3f:79:f7:44:
8b:89:19:8c:69:a5:ca:be:de:7f:5c:f7:18:de:f4:fd:49:c0:
c9:4e:7b:eb:af:b7:54:b2:53:fe:05:ec:34:61:d6:11:10:18:
30:04:95:14:d0:b9:29:3b:ff:8f:32:ff:fc:10:48:7d:0e:cb:
79:4b:48:9a:f5:e8:be:79:9e:f6:d6:99:6b:35:aa:fb:71:e5:
c3:e5:b3:3c:84:bd:29:ca:9d:aa:27:75:a6:48:74:97:19:d9:
ad:db:9e:a6:a4:53:54:09:b8:51:0c:57:b6:02:32:73:75:d0:
79:ac:73:61:ba:27:36:77:62:39:e9:ae:70:15:dd:3b:2e:a1:
7a:d1:52:29
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgIDAbwbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjI2MjAyMTQxWhcNMjYwMzMwMjAyMTQxWjAYMRYw
FAYDVQQDEw02OWEwYWI1YS05NWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2zn7FX/K+f/cxk8SUGSr/MQ28q4u8reJ/zb5TTxYdFAWHCnG/LtOpVNO
6CEad0IhKp9Eo8sPZh8CeynEFJwYKTowG1O3lGPbhS42YCXpN1qA4DFTRadN4IaO
YmR0VUqNq+T92EzpA5M9ODHTzMW0aOuGW4aFODRA1XbCneOSre6DPWKhu6x3pkdZ
Q6XCFRLBTsm0Q51pdcBgwCJ+smpMaJEQJDvJcPmZ2AMSMwlPVQDOitsGud9CCL/7
YwxEmfdtahLZ8j2xFmCzFJNjS5fh+vvqfLQyHa9iB0qMyXT0k86EH65mO/9VC9zV
d+HMf1yz0I5T957t48n7xNJaeMeGhQIDAQABo4ICwzCCAr8wHQYDVR0OBBYEFNJ7
6/vwLltzeRrEvOAJ4c1J0TrfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNUVCRkNCRTEzNTAxMUYxQkRFRTYzQjlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAmlKeAwQCmlLEAwQAmlNB
AwQAmlNDAwQAmlqAAwQBmlqIMA0GCSqGSIb3DQEBCwUAA4IBAQB/l+8m19AqeCG9
XQQtI3w9PFUHMJvynxS1ZHRTH/8fhuyoInWPqCp18XQX5BJL0gOGVUL5Fa44pF/Z
cVSTAEoQVfroOr1gjpd8+QEgCh9fhJPx4I3oYJn6e7whaTMKdqisgEhC7MLPRcZu
BcEA2cHpCza65hFkV+IxXD9590SLiRmMaaXKvt5/XPcY3vT9ScDJTnvrr7dUslP+
Bew0YdYREBgwBJUU0LkpO/+PMv/8EEh9Dst5S0ia9ei+eZ721plrNar7ceXD5bM8
hL0pyp2qJ3WmSHSXGdmt256mpFNUCbhRDFe2AjJzddB5rHNhuic2d2I56a5wFd07
LqF60VIp
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:05:00 2026 by rpki-client