Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C92F970464011F1B85D7606CF1D38B0.roa
File: 0C92F970464011F1B85D7606CF1D38B0.roa (raw, json)
Hash identifier: blhLDCREWRiZ/oL6tzb06y2j1eoXBllZOVd4AzOrgQQ=
Subject key identifier: C6:93:56:CB:F6:FE:99:8D:F6:06:EA:3B:27:49:EB:D9:A9:47:55:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C93B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C92F970464011F1B85D7606CF1D38B0.roa
Signing time: Sat 02 May 2026 16:00:33 +0000
ROA not before: Sat 02 May 2026 16:00:28 +0000
ROA not after: Tue 09 Jun 2026 16:00:28 +0000
asID: 49581
IP address blocks: 154.86.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117051 (0x1c93b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 16:00:28 2026 GMT
Not After : Jun 9 16:00:28 2026 GMT
Subject: CN=69f61fa1-ce00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5d:50:f6:24:3b:d9:0b:e9:e3:a4:f6:b5:44:
ae:c7:4d:5b:d0:cb:2d:ba:ba:4b:46:ee:9d:a1:e6:
9a:de:c6:a8:5a:28:fc:df:e7:38:05:6a:f3:14:77:
f3:a3:e7:ae:ad:c9:86:6d:23:c0:82:e4:04:1a:0e:
8b:01:11:e8:8e:cb:4d:98:24:f8:0c:12:41:0b:c7:
d2:99:b7:1b:83:36:dd:8d:d7:42:b8:9f:51:49:f9:
04:8f:29:bc:ac:6a:91:52:01:f2:50:91:a2:92:d7:
fc:c4:b3:12:b6:0e:5d:f3:78:d7:89:74:e2:f2:19:
a5:b9:35:5c:ca:0b:e1:4b:7a:c5:45:bf:8b:d3:b0:
22:20:31:33:14:bb:61:bc:6d:51:b0:f8:16:c1:21:
2b:00:2c:fb:32:75:d6:fc:de:45:95:c6:14:60:e0:
23:22:5b:3c:e4:46:d2:0e:f4:97:8b:d2:eb:e6:e6:
d1:18:06:4c:b4:c4:a4:7d:d7:eb:0e:ba:0f:00:49:
24:85:77:25:5c:1b:89:f3:8e:71:d2:73:c7:9f:cb:
57:7d:fb:e4:f8:f4:9f:67:ab:8a:20:6b:2f:db:20:
06:61:67:52:7d:3b:e5:f6:58:9b:ec:23:fa:8f:2c:
bf:78:61:35:f0:f9:bf:e4:f7:9d:ce:0e:da:1c:1b:
41:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:93:56:CB:F6:FE:99:8D:F6:06:EA:3B:27:49:EB:D9:A9:47:55:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C92F970464011F1B85D7606CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.119.0/24
Signature Algorithm: sha256WithRSAEncryption
62:40:88:40:85:69:4e:cd:ed:1e:59:9b:87:0c:97:f7:e7:a8:
f6:2d:55:36:71:af:c4:bb:cf:f7:c9:62:7a:e1:a1:4c:9a:d6:
8c:d0:21:fa:80:3b:8b:93:7f:cf:5c:54:e5:8a:e7:7b:52:2c:
44:cc:7a:58:6f:7c:d7:41:c5:21:dd:6e:cc:2e:35:d8:c3:08:
83:7a:62:6c:53:8d:b0:4a:18:fa:0d:62:81:b0:b0:82:f9:00:
df:08:8b:af:0d:35:29:68:a2:0b:f1:03:a0:b3:b8:67:79:01:
bb:e2:b3:90:de:f9:bf:79:73:30:17:10:33:d9:e1:4e:b4:17:
2b:b1:d1:4b:6f:54:46:ff:95:1e:c6:e5:de:24:98:4b:de:b7:
95:1b:71:6c:7c:78:16:0e:ec:98:1a:c2:b1:9f:fd:4e:2d:ca:
08:c1:94:46:6a:c2:62:d2:07:dc:b2:22:ca:6b:a0:2a:79:2b:
f1:53:fd:41:4c:de:6e:b9:6f:77:26:78:5e:7a:6a:73:87:ff:
1e:aa:43:c2:04:41:31:9a:55:8d:75:9f:ef:0c:2e:88:15:91:
21:b4:ce:47:a8:58:0d:b6:af:da:e7:6c:8c:9b:6a:20:8b:0c:
1a:5c:eb:36:bb:32:ba:0b:49:a9:29:3d:6c:e9:08:90:f3:fd:
0c:f9:6f:c0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAck7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTAyMTYwMDI4WhcNMjYwNjA5MTYwMDI4WjAYMRYw
FAYDVQQDEw02OWY2MWZhMS1jZTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA011Q9iQ72Qvp46T2tUSux01b0MsturpLRu6doeaa3saoWij83+c4BWrz
FHfzo+eurcmGbSPAguQEGg6LARHojstNmCT4DBJBC8fSmbcbgzbdjddCuJ9RSfkE
jym8rGqRUgHyUJGiktf8xLMStg5d83jXiXTi8hmluTVcygvhS3rFRb+L07AiIDEz
FLthvG1RsPgWwSErACz7MnXW/N5FlcYUYOAjIls85EbSDvSXi9Lr5ubRGAZMtMSk
fdfrDroPAEkkhXclXBuJ845x0nPHn8tXffvk+PSfZ6uKIGsv2yAGYWdSfTvl9lib
7CP6jyy/eGE18Pm/5Pedzg7aHBtBeQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMaT
Vsv2/pmN9gbqOydJ69mpR1VEMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wQzkyRjk3MDQ2NDAxMUYxQjg1RDc2MDZDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlZ3MA0GCSqGSIb3DQEB
CwUAA4IBAQBiQIhAhWlOze0eWZuHDJf356j2LVU2ca/Eu8/3yWJ64aFMmtaM0CH6
gDuLk3/PXFTliud7UixEzHpYb3zXQcUh3W7MLjXYwwiDemJsU42wShj6DWKBsLCC
+QDfCIuvDTUpaKIL8QOgs7hneQG74rOQ3vm/eXMwFxAz2eFOtBcrsdFLb1RG/5Ue
xuXeJJhL3reVG3FsfHgWDuyYGsKxn/1OLcoIwZRGasJi0gfcsiLKa6AqeSvxU/1B
TN5uuW93Jnheempzh/8eqkPCBEExmlWNdZ/vDC6IFZEhtM5HqFgNtq/a52yMm2og
iwwaXOs2uzK6C0mpKT1s6QiQ8/0M+W/A
-----END CERTIFICATE-----
Generated at Sat May 9 11:02:04 2026 by rpki-client