Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2108E89A508D11F1A6E4F8A6CE1D38B0.roa
File: 2108E89A508D11F1A6E4F8A6CE1D38B0.roa (raw, json)
Hash identifier: +ufn8e04dtEoj+vvfP9ayyHT0i/YHzVs9s+NOb1n16E=
Subject key identifier: AB:C6:5A:7F:43:6D:F6:CE:56:3C:16:7D:92:E6:D8:8F:34:68:B3:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CBD4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2108E89A508D11F1A6E4F8A6CE1D38B0.roa
Signing time: Fri 15 May 2026 18:37:30 +0000
ROA not before: Fri 15 May 2026 18:37:26 +0000
ROA not after: Mon 22 Jun 2026 18:37:26 +0000
asID: 40779
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117716 (0x1cbd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 18:37:26 2026 GMT
Not After : Jun 22 18:37:26 2026 GMT
Subject: CN=6a0767ea-6e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f5:ea:1e:4d:8e:d7:8e:0a:b2:a9:be:1f:ca:
20:94:ab:1a:aa:60:26:5c:b0:97:bb:9d:58:36:0c:
73:04:02:9d:d9:ba:40:3d:75:87:b1:3b:d4:7f:a6:
88:e7:5f:1c:0c:50:8b:e9:da:cb:62:ad:e5:59:d2:
60:0c:52:fb:b7:73:be:ef:a6:4d:eb:ad:27:15:70:
7e:d8:06:38:c8:d7:67:87:27:56:21:c6:68:a8:b2:
19:e4:0f:08:e9:c2:4c:cd:f7:a3:fc:cc:68:05:87:
77:74:61:3e:e1:af:42:4f:76:9e:00:5a:b1:95:b1:
74:80:a3:8d:92:a0:a7:b8:9f:f0:d7:33:4e:81:4b:
f6:51:e1:94:c5:72:cd:13:b6:a2:2a:b4:b5:da:60:
1b:bd:29:7e:46:eb:53:61:4d:2b:2e:b8:78:20:1b:
04:75:6d:0d:3d:a6:ef:ba:3d:a2:bd:59:29:fc:cd:
7e:a6:97:67:e6:b3:39:7d:99:e3:36:8c:45:03:23:
a4:d5:af:87:e8:64:26:d6:99:13:4b:31:8a:a5:6d:
cd:eb:19:7c:a0:52:7b:e8:dd:6d:c8:d6:e6:07:7e:
fb:90:0d:c2:24:9f:7d:b2:3e:1d:30:a3:86:a3:33:
7b:72:ca:ab:42:5f:49:f9:9f:e4:8e:c1:68:d2:77:
43:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C6:5A:7F:43:6D:F6:CE:56:3C:16:7D:92:E6:D8:8F:34:68:B3:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2108E89A508D11F1A6E4F8A6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
43:5f:2e:8a:f8:c4:96:d8:d6:bb:b3:85:1a:22:67:cf:05:09:
7b:79:e3:f8:cc:7d:78:03:f1:d1:bd:a7:1a:22:f9:53:e7:88:
3a:29:e9:a9:1c:1e:83:78:5c:e4:23:0c:e1:95:69:2f:5b:0d:
4e:d1:8a:cd:95:25:0e:4c:f7:45:32:ff:6e:80:76:06:8d:59:
bf:3d:b2:6d:42:97:ea:86:0d:8a:90:c0:16:20:33:7b:6c:60:
e9:30:97:82:93:32:e7:9f:71:48:cc:ac:e1:83:56:10:a7:1c:
2e:65:4b:21:2e:87:0d:19:cd:ed:dc:9d:b6:9e:e5:ec:1c:39:
59:b0:94:29:1a:33:fa:db:e1:d3:09:bf:e4:aa:44:56:86:6f:
01:c3:da:ff:47:b0:8c:d7:1c:96:e1:f9:b9:32:a1:31:65:76:
2d:1c:ba:2f:2d:61:fe:8c:33:22:90:d3:f1:06:1b:e6:0f:45:
19:d7:7d:c4:ba:11:ec:6b:09:d4:99:ea:dd:a1:89:08:d3:2c:
d2:3d:42:ac:33:41:0c:e7:ee:36:3e:c3:24:f3:29:2e:03:f7:
88:49:f7:bd:18:6a:d8:47:be:5f:0c:60:15:1d:03:e8:e4:bf:
a1:76:ca:24:da:13:d5:01:35:3f:01:3e:7f:7f:04:1e:3c:63:
ab:c6:3a:01
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcvUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTE1MTgzNzI2WhcNMjYwNjIyMTgzNzI2WjAYMRYw
FAYDVQQDEw02YTA3NjdlYS02ZTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs/XqHk2O144Ksqm+H8oglKsaqmAmXLCXu51YNgxzBAKd2bpAPXWHsTvU
f6aI518cDFCL6drLYq3lWdJgDFL7t3O+76ZN660nFXB+2AY4yNdnhydWIcZoqLIZ
5A8I6cJMzfej/MxoBYd3dGE+4a9CT3aeAFqxlbF0gKONkqCnuJ/w1zNOgUv2UeGU
xXLNE7aiKrS12mAbvSl+RutTYU0rLrh4IBsEdW0NPabvuj2ivVkp/M1+ppdn5rM5
fZnjNoxFAyOk1a+H6GQm1pkTSzGKpW3N6xl8oFJ76N1tyNbmB377kA3CJJ99sj4d
MKOGozN7csqrQl9J+Z/kjsFo0ndDOQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKvG
Wn9DbfbOVjwWfZLm2I80aLPNMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMTA4RTg5QTUwOEQxMUYxQTZFNEY4QTZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEml7gMA0GCSqGSIb3DQEB
CwUAA4IBAQBDXy6K+MSW2Na7s4UaImfPBQl7eeP4zH14A/HRvacaIvlT54g6Kemp
HB6DeFzkIwzhlWkvWw1O0YrNlSUOTPdFMv9ugHYGjVm/PbJtQpfqhg2KkMAWIDN7
bGDpMJeCkzLnn3FIzKzhg1YQpxwuZUshLocNGc3t3J22nuXsHDlZsJQpGjP62+HT
Cb/kqkRWhm8Bw9r/R7CM1xyW4fm5MqExZXYtHLovLWH+jDMikNPxBhvmD0UZ133E
uhHsawnUmerdoYkI0yzSPUKsM0EM5+42PsMk8ykuA/eISfe9GGrYR75fDGAVHQPo
5L+hdsok2hPVATU/AT5/fwQePGOrxjoB
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:56 2026 by rpki-client