Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/138872365F1E11F1B64845D4CE1D38B0.roa
File: 138872365F1E11F1B64845D4CE1D38B0.roa (raw, json)
Hash identifier: zeqv8I+ndl1lrJYRZ7D/Z3wsyFrBh832x5D8V7qbQWk=
Subject key identifier: BD:C4:DF:DA:57:AB:FA:45:88:4A:55:8E:45:82:13:22:E0:9A:B9:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D16B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/138872365F1E11F1B64845D4CE1D38B0.roa
Signing time: Wed 03 Jun 2026 07:30:21 +0000
ROA not before: Wed 03 Jun 2026 07:30:16 +0000
ROA not after: Fri 10 Jul 2026 07:30:16 +0000
asID: 17497
IP address blocks: 154.193.16.0/20 maxlen: 24
154.193.16.0/24 maxlen: 24
154.193.17.0/24 maxlen: 24
154.193.18.0/24 maxlen: 24
154.193.19.0/24 maxlen: 24
154.193.20.0/24 maxlen: 24
154.193.21.0/24 maxlen: 24
154.193.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119147 (0x1d16b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 3 07:30:16 2026 GMT
Not After : Jul 10 07:30:16 2026 GMT
Subject: CN=6a1fd80d-e723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:af:7d:e6:e2:22:01:26:b6:5b:3c:59:98:50:
9e:d9:82:3f:70:68:48:e8:32:72:63:b9:a2:6d:90:
4a:27:96:05:a1:e3:c2:66:7a:59:d2:19:2c:d2:40:
c3:0d:14:6f:34:99:4e:2f:08:88:a1:6e:88:41:51:
26:66:d2:42:f1:21:62:1a:38:84:d0:92:85:5c:4e:
25:67:bc:c8:dd:c4:39:a3:6c:28:03:47:71:c2:2d:
30:5f:e7:40:9e:54:15:8f:5d:12:b5:b1:65:f8:b2:
84:3d:77:d2:86:99:94:cc:10:3e:9b:a6:ad:79:dd:
82:7f:8e:ae:df:89:38:dc:9b:e9:a5:75:45:0b:03:
f7:78:93:69:92:b3:02:0b:2d:30:98:9f:42:b3:b7:
74:d8:b2:59:a6:f2:5c:82:a3:ec:7e:0b:ed:f5:c2:
7e:49:8e:58:e9:dd:4a:2d:d4:28:97:74:2c:9b:61:
b0:66:53:60:af:49:7e:f0:a8:3a:7d:ee:f6:08:8e:
cd:4d:3d:de:ae:52:2e:3d:3d:93:b2:f2:79:c3:9f:
16:09:d1:eb:02:58:21:9e:bc:73:dd:32:a1:7d:c6:
34:d2:48:07:28:f8:49:c5:13:cf:cf:91:b5:fe:09:
0a:73:e1:13:be:57:db:cd:23:61:20:4d:f2:39:fb:
5d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C4:DF:DA:57:AB:FA:45:88:4A:55:8E:45:82:13:22:E0:9A:B9:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/138872365F1E11F1B64845D4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.16.0/20
Signature Algorithm: sha256WithRSAEncryption
a9:77:21:43:e0:8f:58:99:3c:ed:73:16:0e:9c:04:ca:8c:08:
99:d4:20:bb:82:a0:c2:b4:b5:e5:05:05:04:1a:0a:d2:bc:3a:
f1:2d:68:5f:9c:ea:08:6d:94:0d:6e:a8:e7:f2:d4:83:c4:3c:
33:c8:ec:52:4d:d0:21:2f:7c:9f:de:c8:10:40:b0:36:0f:ae:
cc:90:16:fa:a7:b7:97:7b:0b:7e:ed:44:ed:f7:b6:79:93:8a:
97:a6:5a:91:50:7e:dd:9a:3d:23:10:42:33:da:6b:17:00:6f:
e5:ec:58:58:64:f8:88:01:c2:2a:2c:f4:38:35:56:fb:b5:74:
34:e5:70:bb:55:c5:79:39:ff:57:bc:f8:b3:82:ea:c9:4b:26:
48:7a:7e:15:cb:2c:e1:e9:c0:94:78:fd:ee:3c:30:8b:f4:dc:
78:86:df:8f:fa:99:b1:ba:94:f3:b4:5f:af:dc:7a:c1:c5:d7:
ba:b3:77:3a:a0:cf:32:b4:16:f8:5a:63:ac:31:6a:f0:51:72:
fa:ef:de:6f:e5:04:0c:fb:17:3e:b7:d1:74:de:af:28:06:9d:
10:68:a1:c7:37:96:71:03:22:f2:e1:33:d2:14:61:a5:85:5b:
08:d7:ba:98:32:cb:b9:0f:65:49:c1:9e:88:84:21:09:fa:9b:
61:96:89:4e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdFrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjAzMDczMDE2WhcNMjYwNzEwMDczMDE2WjAYMRYw
FAYDVQQDEw02YTFmZDgwZC1lNzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsa995uIiASa2WzxZmFCe2YI/cGhI6DJyY7mibZBKJ5YFoePCZnpZ0hks
0kDDDRRvNJlOLwiIoW6IQVEmZtJC8SFiGjiE0JKFXE4lZ7zI3cQ5o2woA0dxwi0w
X+dAnlQVj10StbFl+LKEPXfShpmUzBA+m6ated2Cf46u34k43JvppXVFCwP3eJNp
krMCCy0wmJ9Cs7d02LJZpvJcgqPsfgvt9cJ+SY5Y6d1KLdQol3Qsm2GwZlNgr0l+
8Kg6fe72CI7NTT3erlIuPT2TsvJ5w58WCdHrAlghnrxz3TKhfcY00kgHKPhJxRPP
z5G1/gkKc+ETvlfbzSNhIE3yOftdBwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFL3E
39pXq/pFiEpVjkWCEyLgmrmSMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMzg4NzIzNjVGMUUxMUYxQjY0ODQ1RDRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmsEQMA0GCSqGSIb3DQEB
CwUAA4IBAQCpdyFD4I9YmTztcxYOnATKjAiZ1CC7gqDCtLXlBQUEGgrSvDrxLWhf
nOoIbZQNbqjn8tSDxDwzyOxSTdAhL3yf3sgQQLA2D67MkBb6p7eXewt+7UTt97Z5
k4qXplqRUH7dmj0jEEIz2msXAG/l7FhYZPiIAcIqLPQ4NVb7tXQ05XC7VcV5Of9X
vPizgurJSyZIen4Vyyzh6cCUeP3uPDCL9Nx4ht+P+pmxupTztF+v3HrBxde6s3c6
oM8ytBb4WmOsMWrwUXL6795v5QQM+xc+t9F03q8oBp0QaKHHN5ZxAyLy4TPSFGGl
hVsI17qYMsu5D2VJwZ6IhCEJ+pthlolO
-----END CERTIFICATE-----
Generated at Thu Jun 11 11:57:01 2026 by rpki-client