Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDA8B1F4399011F1837EA804CF1D38B0.roa
File: FDA8B1F4399011F1837EA804CF1D38B0.roa (raw, json)
Hash identifier: vV+X5xd1armG0/q1K+TFbB1HQyMPDyOC5Y4ISdBymug=
Subject key identifier: 46:F8:48:E5:1C:54:67:DE:2B:1E:98:C3:41:4F:25:7F:51:45:65:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C5A1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDA8B1F4399011F1837EA804CF1D38B0.roa
Signing time: Thu 16 Apr 2026 12:37:12 +0000
ROA not before: Thu 16 Apr 2026 12:37:07 +0000
ROA not after: Mon 16 Apr 2029 12:37:07 +0000
asID: 17561
IP address blocks: 154.222.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 15:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116129 (0x1c5a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 12:37:07 2026 GMT
Not After : Apr 16 12:37:07 2029 GMT
Subject: CN=69e0d7f8-71a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:e1:11:91:ed:e1:ad:92:57:2f:d8:ad:9f:
9e:b6:46:51:ab:44:4a:ec:9d:69:c8:67:24:78:73:
6e:6d:27:7b:53:c3:4c:82:df:33:1c:63:4a:eb:5b:
b3:69:aa:a8:54:cd:33:35:2e:ca:ec:08:e0:1e:7f:
bb:c1:8f:14:a5:4f:9f:19:77:88:78:f5:a8:be:91:
5c:b3:d7:2e:74:a7:af:7b:78:5c:0a:83:d5:0b:91:
c7:65:8b:23:03:d2:34:0b:de:51:6b:14:07:0c:da:
c6:d1:af:40:fd:8f:94:50:a5:82:a8:ce:c8:14:41:
e3:c6:95:7b:8f:66:9f:91:10:a4:ba:12:65:5c:75:
92:e8:f0:87:8f:f0:95:29:db:2f:f8:56:98:6f:e9:
89:d3:c7:63:35:f5:3f:4f:79:3b:9e:08:45:ad:f6:
03:c8:85:38:85:0b:ac:24:ae:f4:6a:f9:ab:35:f8:
8c:1b:71:b1:4a:c3:5e:fc:11:54:54:ca:51:cd:24:
0d:cc:71:34:22:f2:b4:d0:ef:cb:4f:74:d4:1b:3d:
8d:49:44:1f:1e:be:32:26:c2:ac:72:a5:43:48:67:
60:a5:aa:a5:b4:f1:af:37:b3:0d:c7:53:a4:54:cf:
b9:e7:10:99:d2:7f:4c:18:63:1a:b1:3c:7a:21:98:
90:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F8:48:E5:1C:54:67:DE:2B:1E:98:C3:41:4F:25:7F:51:45:65:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDA8B1F4399011F1837EA804CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.76.0/24
Signature Algorithm: sha256WithRSAEncryption
41:a3:89:90:a1:89:15:f7:87:1f:ac:3c:6c:0d:1a:87:87:e2:
3e:bc:8f:2a:b2:3c:3a:a1:1d:0e:6a:ae:b1:4e:de:21:7a:2a:
90:84:4a:71:a5:1d:e1:91:90:00:8a:6a:65:26:a3:39:28:40:
51:8f:d4:19:b3:56:32:0a:fe:7b:aa:16:bc:22:28:61:c6:d4:
5a:a6:1e:d2:b7:60:26:45:23:a3:57:17:06:b6:95:48:08:15:
8d:39:90:d9:5e:ff:2f:e8:54:6c:15:b6:4b:c6:99:84:97:89:
fa:16:e0:db:4f:5b:3d:12:d0:71:76:f8:0b:c8:cf:79:3f:35:
fe:d4:6a:ed:ec:cc:66:aa:6f:f1:3c:4b:80:27:bd:4a:b4:92:
52:f9:65:eb:53:0e:a2:72:8b:c8:6d:e7:9a:8b:94:bd:4b:d3:
5e:04:09:1d:a5:59:b1:5b:ee:74:b8:33:c1:47:e1:8e:81:62:
7f:02:52:cd:8e:06:3b:d7:eb:37:ff:6b:e5:22:1f:a1:57:f6:
fe:8e:9b:2f:09:a4:f2:02:01:3e:66:0c:45:78:a9:89:0a:dd:
f4:77:51:e3:f1:57:d8:08:79:38:94:33:8b:a5:bb:85:d8:b2:
9f:c0:4c:63:5d:2f:53:89:6a:3d:65:16:d0:18:25:54:24:84:
c1:05:ff:67
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcWhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDE2MTIzNzA3WhcNMjkwNDE2MTIzNzA3WjAYMRYw
FAYDVQQDEw02OWUwZDdmOC03MWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs+/hEZHt4a2SVy/YrZ+etkZRq0RK7J1pyGckeHNubSd7U8NMgt8zHGNK
61uzaaqoVM0zNS7K7AjgHn+7wY8UpU+fGXeIePWovpFcs9cudKeve3hcCoPVC5HH
ZYsjA9I0C95RaxQHDNrG0a9A/Y+UUKWCqM7IFEHjxpV7j2afkRCkuhJlXHWS6PCH
j/CVKdsv+FaYb+mJ08djNfU/T3k7nghFrfYDyIU4hQusJK70avmrNfiMG3GxSsNe
/BFUVMpRzSQNzHE0IvK00O/LT3TUGz2NSUQfHr4yJsKscqVDSGdgpaqltPGvN7MN
x1OkVM+55xCZ0n9MGGMasTx6IZiQTQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEb4
SOUcVGfeKx6Yw0FPJX9RRWWlMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GREE4QjFGNDM5OTAxMUYxODM3RUE4MDRDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt5MMA0GCSqGSIb3DQEB
CwUAA4IBAQBBo4mQoYkV94cfrDxsDRqHh+I+vI8qsjw6oR0Oaq6xTt4heiqQhEpx
pR3hkZAAimplJqM5KEBRj9QZs1YyCv57qha8IihhxtRaph7St2AmRSOjVxcGtpVI
CBWNOZDZXv8v6FRsFbZLxpmEl4n6FuDbT1s9EtBxdvgLyM95PzX+1Grt7Mxmqm/x
PEuAJ71KtJJS+WXrUw6icovIbeeai5S9S9NeBAkdpVmxW+50uDPBR+GOgWJ/AlLN
jgY71+s3/2vlIh+hV/b+jpsvCaTyAgE+ZgxFeKmJCt30d1Hj8VfYCHk4lDOLpbuF
2LKfwExjXS9TiWo9ZRbQGCVUJITBBf9n
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:40 2026 by rpki-client