Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CE6DB4E582411F1AC00F8EBCE1D38B0.roa
File: 0CE6DB4E582411F1AC00F8EBCE1D38B0.roa (raw, json)
Hash identifier: efpczlR7ptkvUTonqUeKTCf5adHX0UfW/vLapKYanUc=
Subject key identifier: 13:D5:1E:19:FE:85:D2:51:62:8C:86:58:0C:18:8D:54:80:6B:35:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CF6A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CE6DB4E582411F1AC00F8EBCE1D38B0.roa
Signing time: Mon 25 May 2026 10:25:29 +0000
ROA not before: Mon 25 May 2026 10:25:21 +0000
ROA not after: Tue 09 Jun 2026 10:25:21 +0000
asID: 154177
IP address blocks: 154.90.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118634 (0x1cf6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 25 10:25:21 2026 GMT
Not After : Jun 9 10:25:21 2026 GMT
Subject: CN=6a142399-d198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a4:26:28:29:6d:fa:f4:be:7a:34:52:aa:d2:
9f:8c:ba:53:74:34:ec:5c:06:70:6e:c5:2d:15:28:
5d:08:53:ad:69:53:90:ba:b3:09:a8:d2:36:ba:4c:
fa:63:49:67:d8:d2:34:64:1f:f2:1c:a3:9f:63:ee:
7a:05:6d:39:13:fe:11:23:92:99:b9:02:64:54:91:
33:95:9b:87:57:67:77:6f:e7:0a:61:20:cf:8d:a5:
a5:d0:03:31:8d:ca:36:0e:d4:38:4d:f3:1a:79:d3:
1c:2e:5d:d4:97:fb:0e:4a:6e:4b:16:cd:71:fd:cd:
04:19:bf:e3:4d:79:d4:80:5c:90:ba:ec:ca:c8:a6:
7c:1c:23:86:84:02:aa:83:b6:99:3b:ff:23:4c:8a:
9c:47:2b:0a:b3:9f:8c:6a:be:28:0c:f8:e2:ed:00:
8c:24:7c:80:8b:57:66:d7:f7:bf:09:7c:86:35:81:
a9:80:0b:ca:00:87:e1:3a:ae:db:3b:e0:ec:5b:32:
93:8a:17:21:75:93:0f:74:95:ac:6b:cb:a0:d4:87:
90:ae:63:b6:11:29:64:5e:82:6f:6f:c8:47:d3:90:
16:63:00:a8:ce:4e:a1:61:d2:79:a8:69:dc:5c:0c:
a2:33:d3:18:16:84:bf:28:f7:cd:f6:d9:cf:10:5d:
0a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D5:1E:19:FE:85:D2:51:62:8C:86:58:0C:18:8D:54:80:6B:35:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CE6DB4E582411F1AC00F8EBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.44.0/24
Signature Algorithm: sha256WithRSAEncryption
67:5f:d3:ca:3b:dd:a1:00:91:41:a7:6c:28:18:b0:90:c8:a2:
36:6a:fb:79:16:03:fa:75:88:1b:d1:3f:cf:3b:99:54:ce:ea:
96:73:0c:78:11:c7:9c:db:58:8b:32:43:91:d6:f4:98:45:c1:
e2:7e:37:72:c0:30:ba:c5:0e:ed:14:e3:62:1a:f9:0d:0a:7b:
2f:63:2e:34:d2:b4:6e:a9:ff:be:46:87:7f:4b:c6:c2:e2:df:
fb:d0:9d:0d:bc:62:66:e4:a9:15:9c:ea:e5:0e:f3:2f:f0:23:
22:40:87:bb:77:06:32:b8:75:ac:7f:47:29:80:c7:b2:b3:3c:
40:7f:17:3d:f9:6a:7f:fa:ae:0e:02:6d:04:9c:02:00:cb:d2:
30:29:ee:c9:09:34:59:f7:c3:25:f6:20:96:51:34:b5:cd:e8:
66:34:1b:7b:45:07:95:69:8c:0f:59:38:ac:72:a6:6e:c9:bf:
62:70:73:96:fc:b4:9c:6e:d3:7a:16:1e:ed:be:0f:ee:f2:c1:
a3:43:ce:d5:c9:27:ab:39:7f:3c:59:e4:38:42:a6:1e:56:f0:
ba:1b:42:49:03:21:1e:b3:92:46:a5:6a:22:2e:d6:4a:82:1c:
4a:b4:8c:db:1c:b7:66:6e:6b:6d:5c:39:54:42:0a:a7:2b:28:
39:89:36:46
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAc9qMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTI1MTAyNTIxWhcNMjYwNjA5MTAyNTIxWjAYMRYw
FAYDVQQDEw02YTE0MjM5OS1kMTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsqQmKClt+vS+ejRSqtKfjLpTdDTsXAZwbsUtFShdCFOtaVOQurMJqNI2
ukz6Y0ln2NI0ZB/yHKOfY+56BW05E/4RI5KZuQJkVJEzlZuHV2d3b+cKYSDPjaWl
0AMxjco2DtQ4TfMaedMcLl3Ul/sOSm5LFs1x/c0EGb/jTXnUgFyQuuzKyKZ8HCOG
hAKqg7aZO/8jTIqcRysKs5+Mar4oDPji7QCMJHyAi1dm1/e/CXyGNYGpgAvKAIfh
Oq7bO+DsWzKTihchdZMPdJWsa8ug1IeQrmO2ESlkXoJvb8hH05AWYwCozk6hYdJ5
qGncXAyiM9MYFoS/KPfN9tnPEF0KCQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBPV
Hhn+hdJRYoyGWAwYjVSAazWyMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wQ0U2REI0RTU4MjQxMUYxQUMwMEY4RUJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlosMA0GCSqGSIb3DQEB
CwUAA4IBAQBnX9PKO92hAJFBp2woGLCQyKI2avt5FgP6dYgb0T/PO5lUzuqWcwx4
Ecec21iLMkOR1vSYRcHifjdywDC6xQ7tFONiGvkNCnsvYy400rRuqf++Rod/S8bC
4t/70J0NvGJm5KkVnOrlDvMv8CMiQIe7dwYyuHWsf0cpgMeyszxAfxc9+Wp/+q4O
Am0EnAIAy9IwKe7JCTRZ98Ml9iCWUTS1zehmNBt7RQeVaYwPWTiscqZuyb9icHOW
/LScbtN6Fh7tvg/u8sGjQ87VySerOX88WeQ4QqYeVvC6G0JJAyEes5JGpWoiLtZK
ghxKtIzbHLdmbmttXDlUQgqnKyg5iTZG
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:28 2026 by rpki-client