Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4525B3AA4D1011F18ABBDCFDCE1D38B0.roa
File: 4525B3AA4D1011F18ABBDCFDCE1D38B0.roa (raw, json)
Hash identifier: PsD/jMqWEFhWO8denNEXEWwpHBesXgszaOO3sD01Dwk=
Subject key identifier: E1:3B:B1:07:51:17:5A:47:55:24:3C:BD:D9:48:DA:2A:8D:54:7D:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CB13
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4525B3AA4D1011F18ABBDCFDCE1D38B0.roa
Signing time: Mon 11 May 2026 08:06:10 +0000
ROA not before: Mon 11 May 2026 08:06:06 +0000
ROA not after: Sun 21 Jun 2026 08:06:06 +0000
asID: 401783
IP address blocks: 154.222.112.0/24 maxlen: 24
154.222.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117523 (0x1cb13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 11 08:06:06 2026 GMT
Not After : Jun 21 08:06:06 2026 GMT
Subject: CN=6a018df2-e3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4c:11:15:89:89:c3:cc:2d:00:25:e8:24:f3:
9d:f1:02:09:51:51:3d:05:23:38:f0:a4:b7:b3:89:
d1:ca:07:af:3d:d1:a8:8c:fe:de:71:e9:f8:2d:d9:
9f:17:75:9d:ad:14:70:41:3f:73:eb:41:2b:9b:b5:
dd:8c:04:20:fc:cf:e3:c9:2c:a7:dd:4a:3f:66:7f:
8d:f1:5c:6e:44:f5:2e:a2:21:81:7e:8b:4b:9c:a5:
01:4d:58:cd:84:64:b3:e7:e1:06:63:b0:a0:b0:b3:
68:f2:cd:40:4d:a3:02:7f:57:2c:61:cc:79:20:30:
b5:01:78:e6:4c:34:60:a3:13:c8:07:bb:32:8c:ca:
80:51:40:2f:e9:15:c2:eb:39:5f:ba:89:09:c7:ea:
72:30:ab:73:50:f5:7f:04:52:13:1f:10:67:ef:e0:
0f:77:5b:e3:d3:14:b6:40:74:41:5b:f4:76:40:f9:
0c:b8:37:fd:9c:90:c8:4d:6a:06:81:fd:b6:c0:77:
82:a8:44:a1:68:3d:54:7f:31:65:f3:b2:ba:2b:67:
b1:88:3f:99:82:32:4b:50:f3:8a:bc:75:74:e0:1e:
ff:ab:49:f5:1b:67:1d:54:17:1a:cd:1d:1c:f5:fc:
1e:58:93:f6:b3:8d:f0:20:f1:39:b7:a7:69:d5:a7:
e7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3B:B1:07:51:17:5A:47:55:24:3C:BD:D9:48:DA:2A:8D:54:7D:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4525B3AA4D1011F18ABBDCFDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.112.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:49:ec:11:63:4f:68:56:37:58:bd:04:7c:31:e8:06:58:0a:
95:d8:24:32:07:da:8f:44:84:ef:e6:de:7a:77:f8:08:6d:2b:
9f:1a:6a:5f:39:5f:85:9f:58:3b:15:43:fa:44:65:d1:06:c0:
55:c8:cb:27:08:04:3c:2a:0f:59:07:cd:f3:3d:b3:1d:24:1c:
93:a1:b3:d4:f1:2c:86:d3:69:3a:37:ed:79:d9:a4:07:8b:04:
d4:31:3f:b9:06:8b:96:4f:aa:86:a7:77:80:31:28:f1:f6:0f:
88:f3:79:1c:da:56:4e:8b:39:ca:73:a5:c6:c3:0e:50:fd:5a:
b7:9c:16:da:d8:55:ea:36:ea:d0:e6:fb:5f:21:c0:c2:0b:85:
ef:c2:a8:5f:f0:d8:5e:95:f6:7b:a4:6a:cc:94:5a:5c:6e:94:
02:4a:25:87:11:f4:e6:6f:ec:5d:7d:9a:d4:a9:ec:a6:f4:4c:
4c:7c:09:39:01:58:d4:1d:85:44:e6:57:12:83:b0:d0:55:85:
b2:2b:cd:e8:70:85:63:3e:32:26:46:5e:4a:81:e6:7e:5a:8d:
49:f1:c6:8e:02:5e:cc:d7:33:ca:3c:cf:0e:70:16:f1:2f:51:
65:23:c0:b4:43:93:4a:67:b7:9e:ab:a0:5b:0f:08:b9:e6:58:
e8:05:e6:32
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcsTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTExMDgwNjA2WhcNMjYwNjIxMDgwNjA2WjAYMRYw
FAYDVQQDEw02YTAxOGRmMi1lM2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxEwRFYmJw8wtACXoJPOd8QIJUVE9BSM48KS3s4nRygevPdGojP7ecen4
LdmfF3WdrRRwQT9z60Erm7XdjAQg/M/jySyn3Uo/Zn+N8VxuRPUuoiGBfotLnKUB
TVjNhGSz5+EGY7CgsLNo8s1ATaMCf1csYcx5IDC1AXjmTDRgoxPIB7syjMqAUUAv
6RXC6zlfuokJx+pyMKtzUPV/BFITHxBn7+APd1vj0xS2QHRBW/R2QPkMuDf9nJDI
TWoGgf22wHeCqEShaD1UfzFl87K6K2exiD+ZgjJLUPOKvHV04B7/q0n1G2cdVBca
zR0c9fweWJP2s43wIPE5t6dp1afnmQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOE7
sQdRF1pHVSQ8vdlI2iqNVH3hMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NTI1QjNBQTREMTAxMUYxOEFCQkRDRkRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmt5wMA0GCSqGSIb3DQEB
CwUAA4IBAQCLSewRY09oVjdYvQR8MegGWAqV2CQyB9qPRITv5t56d/gIbSufGmpf
OV+Fn1g7FUP6RGXRBsBVyMsnCAQ8Kg9ZB83zPbMdJByTobPU8SyG02k6N+152aQH
iwTUMT+5BouWT6qGp3eAMSjx9g+I83kc2lZOiznKc6XGww5Q/Vq3nBba2FXqNurQ
5vtfIcDCC4Xvwqhf8NhelfZ7pGrMlFpcbpQCSiWHEfTmb+xdfZrUqeym9ExMfAk5
AVjUHYVE5lcSg7DQVYWyK83ocIVjPjImRl5KgeZ+Wo1J8caOAl7M1zPKPM8OcBbx
L1FlI8C0Q5NKZ7eeq6BbDwi55ljoBeYy
-----END CERTIFICATE-----
Generated at Wed May 13 04:09:03 2026 by rpki-client