Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4E03928393011F188DD1EB1CE1D38B0.roa
File: D4E03928393011F188DD1EB1CE1D38B0.roa (raw, json)
Hash identifier: tTrXgp46lSnEl1tU1TSxL+j00YMfnzGSpZrhlWvx4hQ=
Subject key identifier: B1:4E:31:F2:4A:3B:35:FC:11:3A:40:DE:CB:F1:3F:65:6D:98:7B:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C578
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4E03928393011F188DD1EB1CE1D38B0.roa
Signing time: Thu 16 Apr 2026 01:08:52 +0000
ROA not before: Thu 16 Apr 2026 01:08:47 +0000
ROA not after: Fri 24 Apr 2026 01:08:47 +0000
asID: 139880
IP address blocks: 154.206.128.0/18 maxlen: 24
154.215.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 15:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116088 (0x1c578)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 01:08:47 2026 GMT
Not After : Apr 24 01:08:47 2026 GMT
Subject: CN=69e036a4-74cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:4d:ee:81:ba:24:c3:e6:6d:de:a9:d2:5b:
43:2c:36:f6:3a:7a:74:da:e7:fb:08:58:db:31:b2:
78:65:b5:bb:93:c3:a1:ee:78:11:63:df:29:6c:e0:
af:2f:98:73:9e:87:b3:c4:80:ad:b2:a1:89:24:fd:
af:bf:a8:99:3b:ca:b1:5a:b3:50:b8:bb:72:45:ab:
8b:da:10:35:65:86:b8:4b:5a:f2:4f:00:87:32:fd:
0d:e3:53:58:fb:8d:68:f2:d3:82:a5:06:58:03:fd:
71:d7:80:42:2a:15:b9:96:f9:40:9d:46:45:58:1e:
56:39:2f:60:31:7a:62:82:36:8c:d6:70:8a:aa:0a:
e5:29:de:2c:42:02:30:5f:b5:52:86:dd:4b:75:5b:
39:10:f3:ef:7b:f5:2b:33:c6:30:1d:20:82:36:ec:
aa:a4:ab:a5:f5:9a:be:c0:fa:f2:c7:ac:1f:64:fa:
b1:69:8c:bd:ca:55:d9:9c:b4:68:9a:d2:4a:1f:ef:
c0:05:8f:59:fd:41:82:c3:e9:57:68:6d:99:f0:0f:
1d:99:29:2e:ee:14:f8:5a:44:a8:9d:24:56:fe:3c:
b4:b1:57:e7:35:0a:23:21:7e:78:d7:ff:a8:65:98:
62:52:68:ce:fb:34:f5:a1:35:6b:da:25:01:7d:fc:
fa:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4E:31:F2:4A:3B:35:FC:11:3A:40:DE:CB:F1:3F:65:6D:98:7B:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4E03928393011F188DD1EB1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.128.0/18
154.215.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3a:e2:d5:fe:d7:f6:5a:a6:2b:ec:36:4e:d3:cc:f2:64:a3:3a:
c3:91:c4:70:32:67:88:2f:b2:c5:5c:26:5d:01:91:0e:0c:07:
23:1a:a2:14:3c:eb:6e:35:98:3d:88:0d:5d:43:66:23:b8:0e:
5d:90:7a:f3:07:78:94:04:36:d4:c9:c1:49:9b:b1:02:76:e9:
a7:67:4d:48:d8:2e:cd:de:c7:94:36:a1:77:52:c2:65:09:e9:
23:39:f8:0f:68:70:c2:b5:1b:d1:af:78:88:c4:ee:b2:c5:cf:
5f:c2:c9:11:35:0e:df:93:88:5b:58:5e:40:7f:ae:27:4d:de:
d5:cf:5f:7e:e9:dd:b5:a2:e1:93:0e:b1:93:da:d7:70:17:f8:
28:13:1e:3e:75:15:62:08:b3:88:4f:c2:0b:94:05:ef:7b:f8:
d1:01:ae:8d:75:68:77:92:79:77:c5:fe:87:b1:12:15:0f:e1:
2f:91:52:f3:30:c7:f0:25:0d:59:e9:4f:a4:6b:f6:79:13:65:
0f:b5:84:2b:8e:2c:b9:b8:78:18:51:7c:3e:54:ee:93:e3:28:
66:2e:84:66:48:e9:92:56:70:3a:29:bb:d4:77:d2:ba:ec:98:
7e:0e:50:ba:66:66:34:66:25:3d:63:86:ae:b1:f6:82:5f:7a:
69:c3:d6:4e
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAcV4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDE2MDEwODQ3WhcNMjYwNDI0MDEwODQ3WjAYMRYw
FAYDVQQDEw02OWUwMzZhNC03NGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvaVN7oG6JMPmbd6p0ltDLDb2Onp02uf7CFjbMbJ4ZbW7k8Oh7ngRY98p
bOCvL5hznoezxICtsqGJJP2vv6iZO8qxWrNQuLtyRauL2hA1ZYa4S1ryTwCHMv0N
41NY+41o8tOCpQZYA/1x14BCKhW5lvlAnUZFWB5WOS9gMXpigjaM1nCKqgrlKd4s
QgIwX7VSht1LdVs5EPPve/UrM8YwHSCCNuyqpKul9Zq+wPryx6wfZPqxaYy9ylXZ
nLRomtJKH+/ABY9Z/UGCw+lXaG2Z8A8dmSku7hT4WkSonSRW/jy0sVfnNQojIX54
1/+oZZhiUmjO+zT1oTVr2iUBffz6OwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFLFO
MfJKOzX8ETpA3svxP2VtmHsVMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ENEUwMzkyODM5MzAxMUYxODhERDFFQjFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGms6AAwQGmtdAMA0GCSqG
SIb3DQEBCwUAA4IBAQA64tX+1/ZapivsNk7TzPJkozrDkcRwMmeIL7LFXCZdAZEO
DAcjGqIUPOtuNZg9iA1dQ2YjuA5dkHrzB3iUBDbUycFJm7ECdumnZ01I2C7N3seU
NqF3UsJlCekjOfgPaHDCtRvRr3iIxO6yxc9fwskRNQ7fk4hbWF5Af64nTd7Vz19+
6d21ouGTDrGT2tdwF/goEx4+dRViCLOIT8ILlAXve/jRAa6NdWh3knl3xf6HsRIV
D+EvkVLzMMfwJQ1Z6U+ka/Z5E2UPtYQrjiy5uHgYUXw+VO6T4yhmLoRmSOmSVnA6
KbvUd9K67Jh+DlC6ZmY0ZiU9Y4ausfaCX3ppw9ZO
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:23:23 2026 by rpki-client