Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF15B4A234A511F1945D4AF9CE1D38B0.roa
File: DF15B4A234A511F1945D4AF9CE1D38B0.roa (raw, json)
Hash identifier: Z0byPXyAzV615FaJ5XDhDvnTjnS/O9/6nj/d8KAQllQ=
Subject key identifier: 98:19:38:45:89:A8:65:CE:08:ED:25:B8:91:07:F3:54:41:7F:FE:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C451
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF15B4A234A511F1945D4AF9CE1D38B0.roa
Signing time: Fri 10 Apr 2026 06:24:04 +0000
ROA not before: Fri 10 Apr 2026 06:24:00 +0000
ROA not after: Mon 18 May 2026 06:24:00 +0000
asID: 395886
IP address blocks: 154.200.128.0/24 maxlen: 24
154.200.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115793 (0x1c451)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 06:24:00 2026 GMT
Not After : May 18 06:24:00 2026 GMT
Subject: CN=69d89784-a672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:5f:c2:e4:ba:02:28:9a:78:b0:29:4d:99:e9:
f9:c4:2a:e9:59:46:14:66:8a:82:81:f5:3f:f8:81:
1b:73:b2:5f:44:98:db:fa:dc:a9:32:6c:76:e5:1c:
ea:26:c4:ec:ee:f3:16:8b:1c:af:db:d6:3b:bb:ed:
96:b9:b9:74:26:eb:b6:cf:ec:c8:2e:91:8e:06:24:
67:90:f4:44:f6:e9:04:b7:8e:d7:14:39:2a:fd:e7:
fc:26:6e:7e:d7:c5:38:72:9e:92:42:95:60:5e:af:
3a:aa:1c:3f:72:0b:7a:50:04:de:a0:7a:02:5f:1c:
09:e2:ad:a2:b5:6e:90:82:ce:6d:75:a4:b3:2d:f4:
0c:ae:50:df:93:b8:a4:cb:ee:14:ca:ac:61:df:26:
e8:6d:2f:0d:6c:ed:21:94:7d:ef:df:d8:b2:c0:3d:
9b:77:70:c6:05:44:08:a0:0c:c2:f1:50:e4:02:c9:
39:15:e1:01:ef:b1:0d:34:1d:93:98:67:b9:81:bb:
2e:14:7e:ec:62:20:52:81:b4:a5:64:4b:54:6d:2d:
a3:17:67:df:6d:c4:7b:17:09:54:c1:02:a6:a1:2c:
1a:0e:49:d7:02:94:a7:ab:d6:fb:72:8d:9d:65:d1:
82:07:16:b3:9e:c1:8f:f8:87:a1:62:b5:ba:e1:5e:
39:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:19:38:45:89:A8:65:CE:08:ED:25:B8:91:07:F3:54:41:7F:FE:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF15B4A234A511F1945D4AF9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.128.0/24
154.200.132.0/24
Signature Algorithm: sha256WithRSAEncryption
07:c4:ac:a1:61:02:29:a6:34:af:b0:cf:96:c2:31:14:30:79:
b2:51:79:a3:31:23:56:9f:0f:5f:48:69:7f:5d:54:8d:56:91:
33:50:6c:78:d6:8a:23:09:40:cb:c2:68:c9:33:61:0f:e2:c6:
2a:a4:09:90:ac:5d:a5:0d:73:80:55:f8:98:be:b8:6e:21:1a:
c9:0b:65:66:27:0f:0e:b8:d5:24:d5:5d:db:f2:b0:b3:81:fa:
b5:9f:e0:85:bf:2f:9e:83:db:07:d6:c9:97:b4:04:92:ff:6e:
2a:34:5b:93:cc:2d:e8:01:52:d1:d6:3e:ef:06:50:ed:bd:9f:
1d:b0:2d:f5:49:23:97:4e:71:29:3c:cc:01:ea:ad:8d:47:68:
70:a7:24:ab:c4:11:1b:32:e1:b2:f1:ed:1b:09:70:ee:b6:73:
61:d3:db:cf:78:63:43:01:c1:43:86:b0:03:cc:ba:c6:50:38:
58:c1:8b:36:fd:0f:59:5d:59:8d:cd:f0:f2:b8:2d:1d:1a:9c:
01:fe:15:85:8f:bd:b6:e3:df:08:70:b8:19:ba:00:21:d8:11:
05:10:e9:0f:1e:39:2d:5b:94:01:64:bf:e2:63:27:e6:4f:59:
9a:4b:aa:ad:5c:3a:d1:0c:80:44:e3:3c:19:a2:4f:fe:0e:fb:
5a:21:e6:38
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAcRRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDEwMDYyNDAwWhcNMjYwNTE4MDYyNDAwWjAYMRYw
FAYDVQQDEw02OWQ4OTc4NC1hNjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA+V/C5LoCKJp4sClNmen5xCrpWUYUZoqCgfU/+IEbc7JfRJjb+typMmx2
5RzqJsTs7vMWixyv29Y7u+2Wubl0Juu2z+zILpGOBiRnkPRE9ukEt47XFDkq/ef8
Jm5+18U4cp6SQpVgXq86qhw/cgt6UATeoHoCXxwJ4q2itW6Qgs5tdaSzLfQMrlDf
k7iky+4Uyqxh3ybobS8NbO0hlH3v39iywD2bd3DGBUQIoAzC8VDkAsk5FeEB77EN
NB2TmGe5gbsuFH7sYiBSgbSlZEtUbS2jF2ffbcR7FwlUwQKmoSwaDknXApSnq9b7
co2dZdGCBxaznsGP+IehYrW64V45mQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFJgZ
OEWJqGXOCO0luJEH81RBf/6qMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ERjE1QjRBMjM0QTUxMUYxOTQ1RDRBRjlDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmsiAAwQAmsiEMA0GCSqG
SIb3DQEBCwUAA4IBAQAHxKyhYQIppjSvsM+WwjEUMHmyUXmjMSNWnw9fSGl/XVSN
VpEzUGx41oojCUDLwmjJM2EP4sYqpAmQrF2lDXOAVfiYvrhuIRrJC2VmJw8OuNUk
1V3b8rCzgfq1n+CFvy+eg9sH1smXtASS/24qNFuTzC3oAVLR1j7vBlDtvZ8dsC31
SSOXTnEpPMwB6q2NR2hwpySrxBEbMuGy8e0bCXDutnNh09vPeGNDAcFDhrADzLrG
UDhYwYs2/Q9ZXVmNzfDyuC0dGpwB/hWFj722498IcLgZugAh2BEFEOkPHjktW5QB
ZL/iYyfmT1maS6qtXDrRDIBE4zwZok/+DvtaIeY4
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:01:03 2026 by rpki-client