Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/191909E6455511F18A8BBCF3CE1D38B0.roa
File: 191909E6455511F18A8BBCF3CE1D38B0.roa (raw, json)
Hash identifier: a/7xcLMOzQj+c1yAHsT3O1whsH7DtPZw1SO/5X7ruwc=
Subject key identifier: 06:97:92:A6:9C:B9:66:CF:4D:B5:F5:AD:69:C7:E4:83:D3:31:2D:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C87F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/191909E6455511F18A8BBCF3CE1D38B0.roa
Signing time: Fri 01 May 2026 11:58:42 +0000
ROA not before: Fri 01 May 2026 11:58:38 +0000
ROA not after: Sat 06 Jun 2026 11:58:38 +0000
asID: 208285
IP address blocks: 154.193.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116863 (0x1c87f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 11:58:38 2026 GMT
Not After : Jun 6 11:58:38 2026 GMT
Subject: CN=69f49572-e99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8e:c5:7d:22:96:f6:61:38:0f:f2:ed:f0:80:
5f:72:2a:9f:09:f9:f6:dd:14:a7:0c:3f:8e:39:78:
38:97:ec:b5:82:df:7f:89:07:0b:7f:32:0d:c0:9d:
2b:66:6c:58:b4:6a:cb:66:72:c9:3b:18:18:ae:9a:
f5:2d:d4:df:ea:1f:4a:4f:8e:93:1d:7a:d4:b8:43:
df:cf:ef:1f:8a:9b:b0:1c:d8:b4:ec:c8:50:07:46:
40:d0:e9:bb:87:66:98:5b:b7:17:45:fe:d9:8e:c4:
7b:67:e4:18:1e:43:5f:b5:99:eb:7a:09:db:63:d7:
74:5a:dc:a4:a2:73:37:1e:4c:2b:6b:79:3a:6b:f6:
37:1d:66:f1:a1:90:f3:c2:2a:89:b0:07:f8:eb:06:
fa:49:42:e7:3a:dc:e3:3a:0d:04:50:90:e1:cf:cb:
51:10:cb:f2:7c:7d:5e:6d:53:b0:c6:16:ec:83:ae:
fe:78:fd:14:b1:e1:5b:9a:54:4c:9b:2c:d4:29:07:
bc:1d:d3:93:73:4b:a8:5a:7f:32:7d:09:36:72:0b:
68:42:a2:b3:82:86:cf:97:05:85:47:cc:ef:bb:e6:
47:c3:dc:d9:29:fc:50:9f:4e:2a:17:db:97:17:ba:
2a:6e:70:db:a7:60:ad:fb:2e:26:6a:a8:4f:46:92:
56:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:97:92:A6:9C:B9:66:CF:4D:B5:F5:AD:69:C7:E4:83:D3:31:2D:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/191909E6455511F18A8BBCF3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.159.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:4e:2a:f8:c9:e4:eb:aa:62:15:cd:23:ad:ae:e3:d4:3e:ff:
b5:c6:8c:55:36:c2:45:5f:c8:a2:7c:a6:8b:28:e2:6b:9c:22:
d7:29:49:b0:4f:a4:1b:5d:56:83:06:44:38:23:31:55:4c:58:
36:53:67:c2:95:37:f7:85:ab:51:46:bc:7c:52:70:77:29:12:
7b:9a:9b:25:ef:a4:09:8c:8a:4a:eb:47:ad:e1:73:6c:e8:0a:
3b:5a:ab:c5:7a:11:1c:2f:33:61:90:6d:84:3c:45:5d:7a:00:
8c:f1:cb:3c:4c:e4:69:b9:4d:d6:ca:d9:c5:4d:80:c9:43:68:
79:64:3a:5e:7c:6b:e7:0e:31:21:08:b6:02:5e:63:00:88:8a:
9d:90:35:c2:65:80:1f:7e:13:b0:e9:af:4a:22:21:2c:2d:f9:
3a:6b:29:03:2f:a8:bf:c9:26:7a:bd:3d:c0:c8:97:5e:b0:cc:
0c:1d:2d:b5:70:78:da:74:39:62:6f:a3:a5:7b:7c:34:b1:88:
c6:6f:95:45:e1:5c:f4:72:f7:f7:fa:10:a8:c1:f0:a0:56:e1:
61:c5:68:cf:57:f7:1f:92:d4:22:c4:32:0f:6f:10:1f:ac:a6:
c8:5b:2b:9f:f2:72:a4:18:db:d8:dc:39:81:6a:75:a7:bb:ac:
b5:ff:26:6d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAch/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTAxMTE1ODM4WhcNMjYwNjA2MTE1ODM4WjAYMRYw
FAYDVQQDEw02OWY0OTU3Mi1lOTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAto7FfSKW9mE4D/Lt8IBfciqfCfn23RSnDD+OOXg4l+y1gt9/iQcLfzIN
wJ0rZmxYtGrLZnLJOxgYrpr1LdTf6h9KT46THXrUuEPfz+8fipuwHNi07MhQB0ZA
0Om7h2aYW7cXRf7ZjsR7Z+QYHkNftZnregnbY9d0WtykonM3Hkwra3k6a/Y3HWbx
oZDzwiqJsAf46wb6SULnOtzjOg0EUJDhz8tREMvyfH1ebVOwxhbsg67+eP0UseFb
mlRMmyzUKQe8HdOTc0uoWn8yfQk2cgtoQqKzgobPlwWFR8zvu+ZHw9zZKfxQn04q
F9uXF7oqbnDbp2Ct+y4maqhPRpJWiQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAaX
kqacuWbPTbX1rWnH5IPTMS0eMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xOTE5MDlFNjQ1NTUxMUYxOEE4QkJDRjNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsGfMA0GCSqGSIb3DQEB
CwUAA4IBAQA8Tir4yeTrqmIVzSOtruPUPv+1xoxVNsJFX8iifKaLKOJrnCLXKUmw
T6QbXVaDBkQ4IzFVTFg2U2fClTf3hatRRrx8UnB3KRJ7mpsl76QJjIpK60et4XNs
6Ao7WqvFehEcLzNhkG2EPEVdegCM8cs8TORpuU3WytnFTYDJQ2h5ZDpefGvnDjEh
CLYCXmMAiIqdkDXCZYAffhOw6a9KIiEsLfk6aykDL6i/ySZ6vT3AyJdesMwMHS21
cHjadDlib6Ole3w0sYjGb5VF4Vz0cvf3+hCowfCgVuFhxWjPV/cfktQixDIPbxAf
rKbIWyuf8nKkGNvY3DmBanWnu6y1/yZt
-----END CERTIFICATE-----
Generated at Sat May 9 11:00:44 2026 by rpki-client