Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B39D543E449911F184F20DFDCE1D38B0.roa
File: B39D543E449911F184F20DFDCE1D38B0.roa (raw, json)
Hash identifier: szOBe1Ed89klIBPvu18PeJK9ZiUfUI4GgamCQTnfppw=
Subject key identifier: 93:DB:C2:A8:FF:14:5E:43:98:D4:C2:C4:9D:C5:EE:43:97:F8:C1:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C849
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B39D543E449911F184F20DFDCE1D38B0.roa
Signing time: Thu 30 Apr 2026 13:37:16 +0000
ROA not before: Thu 30 Apr 2026 13:37:11 +0000
ROA not after: Fri 05 Jun 2026 13:37:11 +0000
asID: 202656
IP address blocks: 154.219.244.0/24 maxlen: 24
154.219.248.0/24 maxlen: 24
154.221.50.0/24 maxlen: 24
154.221.51.0/24 maxlen: 24
154.222.200.0/24 maxlen: 24
154.222.201.0/24 maxlen: 24
154.222.202.0/24 maxlen: 24
154.222.203.0/24 maxlen: 24
154.222.204.0/24 maxlen: 24
154.222.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116809 (0x1c849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 13:37:11 2026 GMT
Not After : Jun 5 13:37:11 2026 GMT
Subject: CN=69f35b0c-47a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7c:03:9a:f9:eb:30:7c:9a:66:a3:c9:07:b7:
e6:01:b8:68:75:3b:b3:fb:7c:45:db:4c:44:a7:45:
92:a4:04:1f:a9:33:f8:05:9f:77:64:65:70:2e:fc:
2e:12:30:db:de:5d:81:da:07:50:aa:a1:29:3f:09:
8a:91:a7:58:37:2e:06:85:ef:5b:3f:38:fe:f5:e1:
15:a9:d9:2e:45:8c:e6:f4:d6:15:bc:c1:7c:7d:60:
0f:b4:91:12:b3:35:e2:42:b7:48:cf:6e:63:ea:f6:
46:0c:f0:2b:fc:d2:4d:d6:f7:5f:68:f0:81:6f:59:
91:4c:9d:15:d7:27:c0:04:60:a1:50:1f:74:7c:f0:
3b:00:b9:a7:33:26:e6:42:fd:b6:bf:cf:59:99:ad:
ae:e5:08:1b:dd:85:3a:80:ae:0e:89:d1:d0:d1:77:
4d:b3:d9:ba:a3:f0:ea:7b:b6:ac:b6:01:3a:95:fe:
3a:0b:6f:91:94:5a:5d:d3:fb:de:07:d9:39:7b:96:
68:ec:52:49:54:c1:0d:67:c4:25:e5:5a:6f:25:3d:
22:e5:4a:f7:63:8d:ee:ba:5b:c6:3e:3a:83:a2:c8:
cf:01:bf:46:fe:cd:0e:03:9e:5e:f6:3c:10:a6:49:
27:77:a8:12:36:4e:df:36:b0:57:5a:44:2f:cd:2d:
88:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DB:C2:A8:FF:14:5E:43:98:D4:C2:C4:9D:C5:EE:43:97:F8:C1:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B39D543E449911F184F20DFDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.244.0/24
154.219.248.0/24
154.221.50.0/23
154.222.200.0-154.222.205.255
Signature Algorithm: sha256WithRSAEncryption
7f:7f:28:2c:52:b3:2c:8b:20:e2:55:3e:fe:8b:c3:3d:2d:64:
df:88:69:03:c5:9b:46:3f:c7:29:87:da:27:cc:c3:75:1b:24:
77:fc:db:9c:85:65:44:80:d6:7b:40:25:c8:87:56:d5:d5:06:
ca:95:5e:90:f4:a4:da:42:bb:92:80:33:5e:61:36:f8:9a:5f:
f3:03:c4:25:64:c9:fd:cf:87:8f:4d:80:31:16:6b:9c:18:31:
24:3b:ee:b0:4c:f7:96:9e:92:e1:00:cb:a7:d7:34:92:72:75:
b8:7a:a1:03:41:01:1a:0e:9f:75:a8:bc:6d:fa:a4:a4:84:37:
ed:c6:3e:e2:50:06:75:93:04:a5:4d:00:43:a0:4c:2a:6d:c0:
a9:fc:fd:e7:7d:80:27:a8:5e:02:a2:95:9f:9b:6c:ec:35:23:
b7:58:14:90:31:f5:31:8b:39:c0:1e:6a:06:6b:19:69:b2:ef:
14:44:c5:3d:b4:6d:71:3a:79:45:55:73:fc:87:02:65:be:ec:
b1:e2:10:93:10:94:a4:29:0e:f9:68:98:dd:af:79:07:7e:cd:
fb:fb:68:e2:29:d6:05:e4:00:47:ef:66:5e:d7:aa:fc:b9:7a:
fc:bb:d2:86:7b:fd:27:55:10:a1:b3:2f:0f:16:f2:e6:f5:ea:
f5:22:c5:52
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIDAchJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDMwMTMzNzExWhcNMjYwNjA1MTMzNzExWjAYMRYw
FAYDVQQDEw02OWYzNWIwYy00N2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs3wDmvnrMHyaZqPJB7fmAbhodTuz+3xF20xEp0WSpAQfqTP4BZ93ZGVw
LvwuEjDb3l2B2gdQqqEpPwmKkadYNy4Ghe9bPzj+9eEVqdkuRYzm9NYVvMF8fWAP
tJESszXiQrdIz25j6vZGDPAr/NJN1vdfaPCBb1mRTJ0V1yfABGChUB90fPA7ALmn
MybmQv22v89Zma2u5Qgb3YU6gK4OidHQ0XdNs9m6o/Dqe7astgE6lf46C2+RlFpd
0/veB9k5e5Zo7FJJVMENZ8Ql5VpvJT0i5Ur3Y43uulvGPjqDosjPAb9G/s0OA55e
9jwQpkknd6gSNk7fNrBXWkQvzS2I3QIDAQABo4ICvzCCArswHQYDVR0OBBYEFJPb
wqj/FF5DmNTCxJ3F7kOX+MG4MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMzlENTQzRTQ0OTkxMUYxODRGMjBERkRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAmtv0AwQAmtv4AwQBmt0y
MAwDBAOa3sgDBAGa3swwDQYJKoZIhvcNAQELBQADggEBAH9/KCxSsyyLIOJVPv6L
wz0tZN+IaQPFm0Y/xymH2ifMw3UbJHf825yFZUSA1ntAJciHVtXVBsqVXpD0pNpC
u5KAM15hNviaX/MDxCVkyf3Ph49NgDEWa5wYMSQ77rBM95aekuEAy6fXNJJydbh6
oQNBARoOn3WovG36pKSEN+3GPuJQBnWTBKVNAEOgTCptwKn8/ed9gCeoXgKilZ+b
bOw1I7dYFJAx9TGLOcAeagZrGWmy7xRExT20bXE6eUVVc/yHAmW+7LHiEJMQlKQp
DvlomN2veQd+zfv7aOIp1gXkAEfvZl7Xqvy5evy70oZ7/SdVEKGzLw8W8ub16vUi
xVI=
-----END CERTIFICATE-----
Generated at Wed May 13 07:56:13 2026 by rpki-client