Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E0D540A555011F19DA225A6CE1D38B0.roa
File: 2E0D540A555011F19DA225A6CE1D38B0.roa (raw, json)
Hash identifier: R/DQE1/ljY01lO8tT4mYuZIxlThzem9qBuIICFM8UR8=
Subject key identifier: A6:2E:47:B2:A4:74:8E:58:F9:99:51:54:3D:A3:3F:3B:3D:B8:C3:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CDC9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E0D540A555011F19DA225A6CE1D38B0.roa
Signing time: Thu 21 May 2026 20:03:49 +0000
ROA not before: Thu 21 May 2026 20:03:44 +0000
ROA not after: Sat 22 May 2027 20:03:44 +0000
asID: 63199
IP address blocks: 154.222.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 08:36:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118217 (0x1cdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 20:03:44 2026 GMT
Not After : May 22 20:03:44 2027 GMT
Subject: CN=6a0f6525-117c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1e:dc:1b:68:53:4f:ee:24:b8:c3:a0:74:8b:
94:78:af:f2:25:be:10:a1:f2:85:0a:48:a4:20:ec:
58:f5:8e:59:a5:8e:b6:80:47:43:95:48:4b:af:56:
ad:3d:cd:47:d3:a6:a9:7d:f6:c5:bd:6a:b6:57:06:
1e:09:69:c0:96:b6:d0:3d:bf:0e:8e:aa:6f:48:52:
1e:90:d9:bf:23:bf:ad:99:04:d1:1e:f2:17:49:25:
0d:75:33:10:b2:40:ae:68:21:d6:3c:53:8b:64:06:
5d:d5:6d:96:00:f0:29:b1:e9:2a:ce:79:73:bf:5b:
c3:b4:df:6d:18:2b:f5:05:05:6a:4b:a9:76:96:23:
ff:44:9c:ed:5f:9b:41:b9:f3:7f:6e:0f:9e:3e:d8:
a1:31:35:8e:77:0c:d7:c3:c1:0f:e5:a7:a9:fc:8d:
bf:1d:36:2b:0c:b9:90:17:46:94:bb:a4:b9:de:09:
df:11:df:99:06:d4:68:3b:a3:92:27:62:96:3d:92:
c3:5f:75:81:4b:2d:2e:f5:ca:23:28:d1:66:1f:03:
97:13:93:bd:44:81:3e:09:82:8d:74:06:2d:02:bf:
69:1c:33:1f:c5:7e:e7:ae:0d:9b:8c:97:91:40:ed:
55:05:be:6c:d4:17:8d:ed:51:30:7a:b3:84:54:97:
e9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2E:47:B2:A4:74:8E:58:F9:99:51:54:3D:A3:3F:3B:3D:B8:C3:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E0D540A555011F19DA225A6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.38.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:1d:1d:87:e2:24:cc:5f:30:4f:11:08:f5:96:af:af:07:ab:
81:64:d4:03:dc:03:ec:8e:e0:14:59:d1:a8:4e:d0:ff:82:2c:
36:a4:e2:01:7c:e0:90:ad:d4:fb:72:c6:86:88:9e:58:cd:28:
0b:0b:40:f5:3e:0a:9b:de:5a:3e:08:43:a6:5b:f3:f3:cd:8b:
9d:ef:12:35:fc:dd:bc:09:b7:32:aa:1a:27:df:57:1d:e2:4a:
ce:94:77:c5:31:37:f7:81:6e:81:37:eb:0d:c5:f6:b7:5a:35:
cd:cf:ce:8b:dc:44:8c:ec:9d:1b:b0:2d:f2:55:b1:cd:f7:a1:
d8:b8:5c:a4:75:b8:18:45:d3:e3:06:bb:94:aa:f8:fc:c7:47:
57:15:ea:1d:fb:02:0d:f0:98:96:c4:cc:9d:8d:56:1c:c5:2f:
c7:5d:42:e5:61:62:43:cb:44:e2:05:81:c9:86:54:82:a0:a2:
85:b5:38:59:b6:c3:6e:f4:e6:69:aa:5a:1f:ca:03:fc:67:ed:
cc:49:be:62:f2:7b:0f:56:64:7d:0a:ae:4f:1a:60:1e:e9:d2:
9b:65:e0:8f:ec:af:b1:e1:b0:f9:37:95:7f:1c:b2:4c:d3:08:
7f:7d:42:92:22:bc:1a:c8:a9:ed:44:fb:2e:b1:0c:8f:8e:86:
67:bb:1f:21
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAc3JMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTIxMjAwMzQ0WhcNMjcwNTIyMjAwMzQ0WjAYMRYw
FAYDVQQDEw02YTBmNjUyNS0xMTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAox7cG2hTT+4kuMOgdIuUeK/yJb4QofKFCkikIOxY9Y5ZpY62gEdDlUhL
r1atPc1H06apffbFvWq2VwYeCWnAlrbQPb8OjqpvSFIekNm/I7+tmQTRHvIXSSUN
dTMQskCuaCHWPFOLZAZd1W2WAPApsekqznlzv1vDtN9tGCv1BQVqS6l2liP/RJzt
X5tBufN/bg+ePtihMTWOdwzXw8EP5aep/I2/HTYrDLmQF0aUu6S53gnfEd+ZBtRo
O6OSJ2KWPZLDX3WBSy0u9cojKNFmHwOXE5O9RIE+CYKNdAYtAr9pHDMfxX7nrg2b
jJeRQO1VBb5s1BeN7VEwerOEVJfpYQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKYu
R7KkdI5Y+ZlRVD2jPzs9uMN2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yRTBENTQwQTU1NTAxMUYxOURBMjI1QTZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt4mMA0GCSqGSIb3DQEB
CwUAA4IBAQCzHR2H4iTMXzBPEQj1lq+vB6uBZNQD3APsjuAUWdGoTtD/giw2pOIB
fOCQrdT7csaGiJ5YzSgLC0D1Pgqb3lo+CEOmW/PzzYud7xI1/N28Cbcyqhon31cd
4krOlHfFMTf3gW6BN+sNxfa3WjXNz86L3ESM7J0bsC3yVbHN96HYuFykdbgYRdPj
BruUqvj8x0dXFeod+wIN8JiWxMydjVYcxS/HXULlYWJDy0TiBYHJhlSCoKKFtThZ
tsNu9OZpqlofygP8Z+3MSb5i8nsPVmR9Cq5PGmAe6dKbZeCP7K+x4bD5N5V/HLJM
0wh/fUKSIrwayKntRPsusQyPjoZnux8h
-----END CERTIFICATE-----
Generated at Thu Jun 4 12:00:47 2026 by rpki-client