Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0415B72FE7311F092508596DAE4EC9C.roa
File: F0415B72FE7311F092508596DAE4EC9C.roa (raw, json)
Hash identifier: dLQJEfpwOD64hCBUbjMHOwgINfkFdsVj82To1ktoWMc=
Subject key identifier: 2E:2F:58:26:70:E5:31:53:11:5A:83:2D:BF:94:34:5F:38:3A:50:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B7A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0415B72FE7311F092508596DAE4EC9C.roa
Signing time: Sat 31 Jan 2026 07:10:36 +0000
ROA not before: Sat 31 Jan 2026 07:10:31 +0000
ROA not after: Sun 08 Mar 2026 07:10:31 +0000
asID: 44559
IP address blocks: 154.209.193.0/24 maxlen: 24
154.209.194.0/24 maxlen: 24
154.209.197.0/24 maxlen: 24
154.209.198.0/24 maxlen: 24
154.209.199.0/24 maxlen: 24
154.209.200.0/24 maxlen: 24
154.209.201.0/24 maxlen: 24
154.209.202.0/24 maxlen: 24
154.209.203.0/24 maxlen: 24
154.209.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112552 (0x1b7a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 07:10:31 2026 GMT
Not After : Mar 8 07:10:31 2026 GMT
Subject: CN=697daaec-111c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a9:61:25:15:9f:2e:49:c0:3b:cf:2f:0b:64:
d4:c7:65:1b:26:3c:8a:cf:2d:e7:ff:34:e9:cf:1d:
e5:3d:f2:fe:bb:8e:73:a6:4b:b0:c4:4a:41:77:80:
b8:c1:26:35:e3:88:e8:12:fc:be:03:4b:63:0a:32:
a4:7d:c8:57:5e:85:f0:52:8f:c4:dc:2f:e6:01:b3:
0d:bc:cd:e2:1d:8c:29:4c:af:69:a5:10:22:55:8b:
58:2c:7a:bc:95:ff:de:8c:bb:2f:3e:c1:cd:03:0c:
58:80:9f:cb:11:f3:57:9d:5c:05:90:a4:4f:1d:a2:
42:50:05:26:1f:df:ce:4e:10:28:bf:45:e0:72:c4:
87:e3:3a:d5:8e:79:f3:cf:f8:b7:0d:84:29:af:c8:
cc:5b:ac:91:96:04:c4:87:a0:66:4b:9f:3a:1a:e1:
d4:9f:95:7c:48:36:1f:8b:27:44:a2:de:20:af:ef:
8f:e9:ef:4a:0b:91:1a:c0:3f:46:81:da:1e:19:41:
d8:5a:57:fc:69:99:37:20:fc:0a:64:73:99:dd:f5:
a4:27:70:76:3a:d9:5b:ea:b6:0a:0a:bf:63:84:1f:
ab:80:4b:cd:84:57:65:27:69:c7:e1:61:4a:1f:b1:
86:a0:6c:45:7f:77:ff:cb:20:35:2d:c1:aa:e7:5a:
4c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2F:58:26:70:E5:31:53:11:5A:83:2D:BF:94:34:5F:38:3A:50:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0415B72FE7311F092508596DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.193.0-154.209.194.255
154.209.197.0-154.209.204.255
Signature Algorithm: sha256WithRSAEncryption
a4:fd:74:f5:6a:f0:13:3d:ab:66:b9:de:f1:69:9d:f0:4b:7b:
45:05:db:94:c4:2b:8a:ab:3f:86:ee:be:c8:22:53:51:c1:5a:
5d:42:50:79:02:d5:f2:bb:64:41:92:89:e5:81:eb:b9:7e:70:
40:ee:da:29:ee:78:fd:86:c9:56:94:37:32:e2:8a:10:f5:0e:
2a:ab:8a:01:58:37:4e:30:1b:87:6f:e4:17:db:ea:99:40:46:
ba:98:c7:59:7f:68:4d:77:00:ab:3e:26:50:dc:0d:c1:21:c5:
f3:f9:86:58:43:74:79:77:53:dd:02:3a:98:b6:c5:b7:f1:b4:
a2:db:c8:e1:94:da:de:09:f4:e9:cf:6f:23:36:e6:88:a4:4c:
4b:e5:08:20:68:12:f4:98:d0:a7:e6:54:d1:c4:a1:fb:24:80:
c9:50:78:d3:5c:54:66:4b:9a:65:2e:a2:1d:22:0e:96:f9:f7:
d8:ae:39:5e:6a:e7:ae:82:f9:1c:da:a1:9b:0e:d0:60:04:e1:
55:f6:3b:37:68:95:1b:28:b1:32:70:16:29:fb:e9:2e:dc:c0:
5c:8b:b6:39:10:fa:3b:b4:30:0b:0a:80:6b:66:f1:76:00:c3:
12:db:6a:d3:b5:94:7d:12:71:07:9b:88:07:d6:13:d5:05:0e:
e7:73:42:bc
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgIDAbeoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMTMxMDcxMDMxWhcNMjYwMzA4MDcxMDMxWjAYMRYw
FAYDVQQDEw02OTdkYWFlYy0xMTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs6lhJRWfLknAO88vC2TUx2UbJjyKzy3n/zTpzx3lPfL+u45zpkuwxEpB
d4C4wSY144joEvy+A0tjCjKkfchXXoXwUo/E3C/mAbMNvM3iHYwpTK9ppRAiVYtY
LHq8lf/ejLsvPsHNAwxYgJ/LEfNXnVwFkKRPHaJCUAUmH9/OThAov0XgcsSH4zrV
jnnzz/i3DYQpr8jMW6yRlgTEh6BmS586GuHUn5V8SDYfiydEot4gr++P6e9KC5Ea
wD9GgdoeGUHYWlf8aZk3IPwKZHOZ3fWkJ3B2Otlb6rYKCr9jhB+rgEvNhFdlJ2nH
4WFKH7GGoGxFf3f/yyA1LcGq51pMbQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFC4v
WCZw5TFTEVqDLb+UNF84OlCfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GMDQxNUI3MkZFNzMxMUYwOTI1MDg1OTZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBACa0cEDBACa0cIwDAME
AJrRxQMEAJrRzDANBgkqhkiG9w0BAQsFAAOCAQEApP109WrwEz2rZrne8Wmd8Et7
RQXblMQriqs/hu6+yCJTUcFaXUJQeQLV8rtkQZKJ5YHruX5wQO7aKe54/YbJVpQ3
MuKKEPUOKquKAVg3TjAbh2/kF9vqmUBGupjHWX9oTXcAqz4mUNwNwSHF8/mGWEN0
eXdT3QI6mLbFt/G0otvI4ZTa3gn06c9vIzbmiKRMS+UIIGgS9JjQp+ZU0cSh+ySA
yVB401xUZkuaZS6iHSIOlvn32K45XmrnroL5HNqhmw7QYAThVfY7N2iVGyixMnAW
KfvpLtzAXIu2ORD6O7QwCwqAa2bxdgDDEttq07WUfRJxB5uIB9YT1QUO53NCvA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:04 2026 by rpki-client