Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/469E9A4A279E11F190C726C3DAE4EC9C.roa
File: 469E9A4A279E11F190C726C3DAE4EC9C.roa (raw, json)
Hash identifier: 5+Zq6LPmdtooBsXVDax1MIkNShbwPzgQqL1sVMKSM/8=
Subject key identifier: 18:90:22:1B:3F:27:64:5D:33:A4:7D:95:F5:AE:CF:18:26:7E:82:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C0B3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/469E9A4A279E11F190C726C3DAE4EC9C.roa
Signing time: Tue 24 Mar 2026 16:26:57 +0000
ROA not before: Tue 24 Mar 2026 16:26:52 +0000
ROA not after: Fri 01 May 2026 16:26:52 +0000
asID: 62240
IP address blocks: 154.194.72.0/24 maxlen: 24
154.194.78.0/24 maxlen: 24
154.194.94.0/24 maxlen: 24
154.194.95.0/24 maxlen: 24
154.194.96.0/24 maxlen: 24
154.194.97.0/24 maxlen: 24
154.194.103.0/24 maxlen: 24
154.196.20.0/24 maxlen: 24
154.196.21.0/24 maxlen: 24
154.196.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114867 (0x1c0b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 16:26:52 2026 GMT
Not After : May 1 16:26:52 2026 GMT
Subject: CN=69c2bb51-a93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5a:0a:bb:46:ba:ed:3a:a7:2d:e7:e9:55:eb:
ee:48:96:e7:f4:24:d0:6c:b2:83:18:6b:0f:f1:33:
4b:c8:b6:d0:93:1e:63:59:f4:54:ac:66:7a:be:48:
d1:f1:06:09:59:fa:d4:32:9d:98:ef:92:e1:b3:99:
fd:1c:09:85:2f:63:9a:d1:ee:a1:bc:17:d8:cf:8e:
ac:18:1f:68:80:42:ae:5b:cf:72:3e:31:69:c5:b3:
24:5d:2b:42:eb:ea:f2:84:c3:b0:23:7d:46:96:ce:
77:43:20:58:e9:5d:a7:d4:e4:d7:95:2a:ab:92:12:
ce:ea:15:f0:a4:38:3d:04:8a:21:22:89:b6:8f:7b:
8a:34:48:59:3a:1b:48:78:b5:ad:f1:18:e2:65:35:
aa:d7:0f:ab:cb:79:e5:4f:fe:11:35:30:85:7d:01:
a4:c4:95:08:27:55:99:25:fd:9f:2d:d3:ce:c3:08:
59:57:6c:5a:5c:28:56:12:43:5f:51:d1:4d:b2:6b:
93:09:30:31:fd:bc:14:c6:49:1f:1b:9c:ca:54:7b:
16:02:f4:33:bf:a4:aa:40:aa:fe:7e:7d:56:c0:a7:
8a:6e:c2:17:3d:99:63:06:48:93:6f:8f:b8:48:48:
3f:50:b0:c4:bf:6c:a8:fc:17:42:33:fd:d4:80:01:
e3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:90:22:1B:3F:27:64:5D:33:A4:7D:95:F5:AE:CF:18:26:7E:82:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/469E9A4A279E11F190C726C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.72.0/24
154.194.78.0/24
154.194.94.0-154.194.97.255
154.194.103.0/24
154.196.20.0/23
154.196.23.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e2:f7:e0:c5:13:42:53:31:e1:06:f9:bb:5b:63:cb:14:49:
24:6f:c2:e0:ab:05:ee:c2:58:63:cf:3a:d5:b0:ca:51:de:67:
e7:9d:83:53:07:26:61:ad:e8:63:db:84:df:d8:77:93:aa:5d:
b1:2b:8e:f2:5e:6f:1d:87:20:45:8d:46:19:1a:74:0c:3f:b2:
41:1c:cb:b3:5b:10:16:b6:53:70:af:b0:ed:60:b9:9b:9f:61:
15:6d:66:e8:55:90:18:86:17:72:5d:e4:64:a5:4e:d7:11:6a:
b4:57:31:bd:3d:f5:13:a2:93:b2:4f:b1:86:7c:6d:37:58:cc:
d2:8b:b0:97:56:74:be:94:dd:9e:fe:6a:38:ed:96:a1:92:9a:
ce:8c:20:b5:28:1b:a8:b7:6f:97:63:2c:49:99:3e:eb:ad:54:
bb:cc:db:c3:06:2e:b8:2f:e3:63:02:b2:c4:3b:6c:f7:8d:b5:
27:09:e6:7a:18:ab:12:d7:1f:92:58:fb:32:ba:58:c7:69:ed:
2c:4d:50:d7:02:3c:7c:d6:98:9c:16:a5:e2:50:d6:aa:ce:e8:
ef:cb:22:c8:41:43:32:6a:b2:a6:a7:93:83:e1:6b:fd:7d:b5:
a8:ad:b5:d3:a6:9c:c0:d8:fa:4b:94:09:77:8a:0c:1c:52:15:
09:ca:9b:4f
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgIDAcCzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzI0MTYyNjUyWhcNMjYwNTAxMTYyNjUyWjAYMRYw
FAYDVQQDEw02OWMyYmI1MS1hOTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuloKu0a67TqnLefpVevuSJbn9CTQbLKDGGsP8TNLyLbQkx5jWfRUrGZ6
vkjR8QYJWfrUMp2Y75Lhs5n9HAmFL2Oa0e6hvBfYz46sGB9ogEKuW89yPjFpxbMk
XStC6+ryhMOwI31Gls53QyBY6V2n1OTXlSqrkhLO6hXwpDg9BIohIom2j3uKNEhZ
OhtIeLWt8RjiZTWq1w+ry3nlT/4RNTCFfQGkxJUIJ1WZJf2fLdPOwwhZV2xaXChW
EkNfUdFNsmuTCTAx/bwUxkkfG5zKVHsWAvQzv6SqQKr+fn1WwKeKbsIXPZljBkiT
b4+4SEg/ULDEv2yo/BdCM/3UgAHjqwIDAQABo4ICyzCCAscwHQYDVR0OBBYEFBiQ
Ihs/J2RdM6R9lfWuzxgmfoKvMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NjlFOUE0QTI3OUUxMUYxOTBDNzI2QzNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAmsJIAwQAmsJOMAwDBAGa
wl4DBAGawmADBACawmcDBAGaxBQDBACaxBcwDQYJKoZIhvcNAQELBQADggEBAGLi
9+DFE0JTMeEG+btbY8sUSSRvwuCrBe7CWGPPOtWwylHeZ+edg1MHJmGt6GPbhN/Y
d5OqXbErjvJebx2HIEWNRhkadAw/skEcy7NbEBa2U3CvsO1guZufYRVtZuhVkBiG
F3Jd5GSlTtcRarRXMb099ROik7JPsYZ8bTdYzNKLsJdWdL6U3Z7+ajjtlqGSms6M
ILUoG6i3b5djLEmZPuutVLvM28MGLrgv42MCssQ7bPeNtScJ5noYqxLXH5JY+zK6
WMdp7SxNUNcCPHzWmJwWpeJQ1qrO6O/LIshBQzJqsqank4Pha/19taittdOmnMDY
+kuUCXeKDBxSFQnKm08=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:50:09 2026 by rpki-client