Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E93E7B32371E11F1AC1BA316CF1D38B0.roa
File: E93E7B32371E11F1AC1BA316CF1D38B0.roa (raw, json)
Hash identifier: Jn/XviOrFAbHk5bR6ERzLkAEpn4qKCDLlT+qzYDr7F0=
Subject key identifier: 2B:2E:DC:68:E4:52:41:B2:36:A4:0A:89:C8:34:D9:B6:8B:C4:30:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C4F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E93E7B32371E11F1AC1BA316CF1D38B0.roa
Signing time: Mon 13 Apr 2026 09:55:33 +0000
ROA not before: Mon 13 Apr 2026 09:55:28 +0000
ROA not after: Sat 16 May 2026 09:55:28 +0000
asID: 22773
IP address blocks: 154.85.107.0/24 maxlen: 24
154.85.108.0/24 maxlen: 24
154.85.109.0/24 maxlen: 24
154.85.110.0/24 maxlen: 24
154.85.111.0/24 maxlen: 24
154.85.112.0/24 maxlen: 24
154.85.113.0/24 maxlen: 24
154.85.114.0/24 maxlen: 24
154.85.115.0/24 maxlen: 24
154.85.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115956 (0x1c4f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 13 09:55:28 2026 GMT
Not After : May 16 09:55:28 2026 GMT
Subject: CN=69dcbd95-0346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:cd:53:9e:8f:40:9a:07:b6:43:49:a4:0c:
6b:4c:2f:2a:1a:af:3a:8e:a6:50:ae:d5:b0:2a:f7:
9d:c7:96:f8:0e:cd:7b:ef:a1:d2:4e:7d:f8:75:09:
eb:40:56:54:a4:ff:bb:75:ee:f3:56:33:aa:6a:77:
1f:ff:b0:06:19:a8:b9:2c:cd:f6:1e:4c:f7:23:2c:
ea:e9:15:d5:ed:45:d1:7f:8b:6a:5f:3f:53:48:73:
87:11:0e:77:cc:dd:65:75:56:3a:6a:09:62:cf:54:
aa:71:a4:a8:52:50:56:91:54:d6:73:d4:57:80:eb:
ac:58:f2:02:d5:cc:09:d6:26:63:49:14:e5:cc:e2:
a8:f4:cb:51:d5:fd:44:aa:12:75:83:18:23:a8:3e:
25:19:ca:3d:20:de:60:9c:09:16:41:b1:20:29:b7:
61:e2:61:d8:7e:f9:41:a2:95:1c:56:94:17:bd:6b:
34:f5:92:f5:f7:3b:42:05:d0:02:93:3f:69:e0:27:
9a:b2:fe:70:11:be:2d:c1:21:fa:d5:90:f4:c2:af:
3d:14:5e:11:a2:01:a0:22:68:4a:30:7f:26:09:77:
0d:61:88:dc:71:e6:ae:bb:1a:fe:fd:4b:64:d5:3c:
e7:bf:29:ed:f7:ce:88:ff:ce:23:6a:d4:72:a7:23:
fb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2E:DC:68:E4:52:41:B2:36:A4:0A:89:C8:34:D9:B6:8B:C4:30:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E93E7B32371E11F1AC1BA316CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.107.0-154.85.116.255
Signature Algorithm: sha256WithRSAEncryption
07:59:a9:b5:55:8b:4e:e2:f4:1f:b7:6e:a4:1e:6d:97:eb:3b:
e7:44:f1:42:23:c6:d4:06:b9:1c:51:ae:04:86:28:e9:3a:58:
f1:24:a0:92:49:6f:da:1d:cf:33:33:4e:d0:0f:56:29:dd:fa:
60:79:3d:f9:81:d8:3e:24:36:53:87:69:82:3e:43:4e:43:33:
c8:f4:c3:93:17:9f:ac:1c:3c:d3:19:a1:f9:ec:8d:7e:d7:14:
c4:68:34:38:e6:00:7e:f6:91:b1:64:b6:e9:e3:22:f3:87:48:
6c:f8:bb:5f:07:fa:33:00:15:6a:14:a7:01:77:93:b6:6d:7e:
e5:47:fb:63:ca:cb:e9:60:67:73:d7:db:9a:de:e9:41:c2:15:
ce:4d:dd:ba:a5:fc:5b:bf:c9:bf:f3:56:6b:ac:59:69:6b:05:
5b:7a:09:8d:70:41:16:c2:ac:9e:41:35:95:e8:28:e3:5a:fc:
5d:0c:fd:78:6a:4e:a6:6c:70:77:e9:bb:d4:c2:62:d6:10:b5:
ad:43:2d:cc:b4:5a:f8:73:91:27:89:9d:46:23:3e:75:70:1c:
4a:20:1e:aa:0b:bf:17:92:2a:4f:f3:a5:d8:84:69:c3:18:c8:
49:78:76:fc:d1:ef:66:18:5b:00:8a:b8:86:38:7d:98:82:13:
34:e0:44:7a
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAcT0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDEzMDk1NTI4WhcNMjYwNTE2MDk1NTI4WjAYMRYw
FAYDVQQDEw02OWRjYmQ5NS0wMzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwZfNU56PQJoHtkNJpAxrTC8qGq86jqZQrtWwKvedx5b4Ds1776HSTn34
dQnrQFZUpP+7de7zVjOqancf/7AGGai5LM32Hkz3Iyzq6RXV7UXRf4tqXz9TSHOH
EQ53zN1ldVY6agliz1SqcaSoUlBWkVTWc9RXgOusWPIC1cwJ1iZjSRTlzOKo9MtR
1f1EqhJ1gxgjqD4lGco9IN5gnAkWQbEgKbdh4mHYfvlBopUcVpQXvWs09ZL19ztC
BdACkz9p4Ceasv5wEb4twSH61ZD0wq89FF4RogGgImhKMH8mCXcNYYjcceauuxr+
/Utk1Tznvynt986I/84jatRypyP7rwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFCsu
3GjkUkGyNqQKicg02baLxDCfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FOTNFN0IzMjM3MUUxMUYxQUMxQkEzMTZDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACaVWsDBACaVXQwDQYJ
KoZIhvcNAQELBQADggEBAAdZqbVVi07i9B+3bqQebZfrO+dE8UIjxtQGuRxRrgSG
KOk6WPEkoJJJb9odzzMzTtAPVind+mB5PfmB2D4kNlOHaYI+Q05DM8j0w5MXn6wc
PNMZofnsjX7XFMRoNDjmAH72kbFktunjIvOHSGz4u18H+jMAFWoUpwF3k7ZtfuVH
+2PKy+lgZ3PX25re6UHCFc5N3bql/Fu/yb/zVmusWWlrBVt6CY1wQRbCrJ5BNZXo
KONa/F0M/XhqTqZscHfpu9TCYtYQta1DLcy0WvhzkSeJnUYjPnVwHEogHqoLvxeS
Kk/zpdiEacMYyEl4dvzR72YYWwCKuIY4fZiCEzTgRHo=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:17:13 2026 by rpki-client