Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED12C272389A11F1BEA25CB0CE1D38B0.roa
File: ED12C272389A11F1BEA25CB0CE1D38B0.roa (raw, json)
Hash identifier: Fi5gBTwrbuK41zWQIssFBkKwfJLFQVwlSuzqJo8a7O8=
Subject key identifier: B7:62:23:84:58:27:8A:B7:DB:0A:E6:8C:D4:F9:68:0C:81:A6:0D:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C540
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED12C272389A11F1BEA25CB0CE1D38B0.roa
Signing time: Wed 15 Apr 2026 07:15:48 +0000
ROA not before: Wed 15 Apr 2026 07:15:44 +0000
ROA not after: Thu 21 May 2026 07:15:44 +0000
asID: 59711
IP address blocks: 154.83.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116032 (0x1c540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 07:15:44 2026 GMT
Not After : May 21 07:15:44 2026 GMT
Subject: CN=69df3b24-5a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:12:98:97:53:18:6a:aa:7f:78:46:41:ac:ab:
00:43:0c:0e:b3:35:14:c5:e3:eb:97:2b:5c:68:52:
53:07:3b:03:52:ee:1b:8b:d2:57:ff:a7:ac:7d:97:
c3:eb:4a:27:b5:b0:ed:3d:ef:4e:7e:30:20:01:50:
ec:ec:a0:35:cf:19:ee:90:22:06:20:f6:71:2e:6a:
4b:5c:21:49:05:22:67:d4:90:d8:21:f9:2e:dd:dc:
8e:42:ee:38:18:93:f8:47:5d:72:98:a1:67:9e:f0:
0d:63:23:77:08:0e:df:b3:d5:df:ea:c0:d6:96:e2:
21:79:af:87:1c:b1:f8:5e:f2:b5:29:26:25:4d:c0:
60:fd:78:f8:eb:03:c2:ba:95:55:e6:8a:0d:cf:7b:
92:cf:82:e0:bc:37:dd:f2:71:8c:00:03:dc:c5:62:
c7:02:f3:ff:a0:f8:76:99:e6:a9:7c:7c:e1:14:24:
f0:23:72:54:c2:ee:5b:93:17:eb:39:7b:16:ab:12:
7b:c3:20:0e:f4:42:65:fb:08:6a:2f:d7:3d:d0:8c:
86:7b:1d:a6:1e:54:67:0c:a3:70:06:25:ea:97:50:
46:b7:7c:ff:91:1c:b9:41:6b:37:08:9c:36:53:21:
e0:7c:88:f2:d3:9e:d8:94:27:54:d7:31:a3:d3:27:
5b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:62:23:84:58:27:8A:B7:DB:0A:E6:8C:D4:F9:68:0C:81:A6:0D:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED12C272389A11F1BEA25CB0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.148.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:5d:53:f2:76:56:db:97:7b:55:b0:07:ce:23:fe:05:34:46:
b3:ba:ff:81:33:bd:c2:fd:4e:33:c1:83:7b:b5:dc:b3:7d:0f:
0b:bb:7b:e2:8a:b0:c4:39:46:28:19:be:ce:ca:a5:93:85:2b:
43:20:2f:e9:41:8f:17:cb:40:a2:bb:7b:18:5c:3d:b5:6a:e2:
af:09:ea:ac:30:bc:75:1f:12:85:80:99:1f:40:b2:ba:26:d5:
0b:69:d9:90:a4:43:94:53:c8:3d:27:59:b0:dd:59:81:07:04:
3b:05:c3:88:91:87:c0:90:33:7b:4f:09:22:8f:2c:4a:fa:64:
ca:85:11:ef:97:75:0c:90:5f:d6:b4:53:6d:a6:14:9a:53:cf:
7c:aa:44:07:46:36:2f:14:c3:b6:eb:ef:0e:3b:ef:08:3b:41:
0f:f0:ad:d5:a2:24:c6:f0:0d:74:4b:04:da:03:a5:b5:55:41:
8e:17:99:de:d3:75:5d:c7:f8:3b:c3:6e:ef:32:3e:1f:c8:57:
58:75:43:35:2d:e1:9c:69:1b:4a:64:b5:2f:d5:de:89:9f:20:
2c:5b:00:98:84:f8:f1:fe:0e:84:40:9a:08:78:e5:7c:8b:70:
15:12:14:c3:7f:cc:0c:53:98:c2:37:83:d8:bf:37:fe:af:46:
da:41:31:32
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcVAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDE1MDcxNTQ0WhcNMjYwNTIxMDcxNTQ0WjAYMRYw
FAYDVQQDEw02OWRmM2IyNC01YTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxBKYl1MYaqp/eEZBrKsAQwwOszUUxePrlytcaFJTBzsDUu4bi9JX/6es
fZfD60ontbDtPe9OfjAgAVDs7KA1zxnukCIGIPZxLmpLXCFJBSJn1JDYIfku3dyO
Qu44GJP4R11ymKFnnvANYyN3CA7fs9Xf6sDWluIhea+HHLH4XvK1KSYlTcBg/Xj4
6wPCupVV5ooNz3uSz4LgvDfd8nGMAAPcxWLHAvP/oPh2meapfHzhFCTwI3JUwu5b
kxfrOXsWqxJ7wyAO9EJl+whqL9c90IyGex2mHlRnDKNwBiXql1BGt3z/kRy5QWs3
CJw2UyHgfIjy057YlCdU1zGj0ydbDQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLdi
I4RYJ4q32wrmjNT5aAyBpg1OMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FRDEyQzI3MjM4OUExMUYxQkVBMjVDQjBDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlOUMA0GCSqGSIb3DQEB
CwUAA4IBAQBvXVPydlbbl3tVsAfOI/4FNEazuv+BM73C/U4zwYN7tdyzfQ8Lu3vi
irDEOUYoGb7OyqWThStDIC/pQY8Xy0Ciu3sYXD21auKvCeqsMLx1HxKFgJkfQLK6
JtULadmQpEOUU8g9J1mw3VmBBwQ7BcOIkYfAkDN7TwkijyxK+mTKhRHvl3UMkF/W
tFNtphSaU898qkQHRjYvFMO26+8OO+8IO0EP8K3VoiTG8A10SwTaA6W1VUGOF5ne
03Vdx/g7w27vMj4fyFdYdUM1LeGcaRtKZLUv1d6JnyAsWwCYhPjx/g6EQJoIeOV8
i3AVEhTDf8wMU5jCN4PYvzf+r0baQTEy
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:17:35 2026 by rpki-client