Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/365868206A5911F19A235110CF1D38B0.roa
File: 365868206A5911F19A235110CF1D38B0.roa (raw, json)
Hash identifier: gRDa+Fl58sVb5nAPrKJzhamxgvXoY0FKwwBmmX9vFWM=
Subject key identifier: 92:C1:CE:86:B1:F0:1B:BA:04:02:27:A9:93:D9:5F:66:7F:5C:64:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D3D4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/365868206A5911F19A235110CF1D38B0.roa
Signing time: Wed 17 Jun 2026 14:31:22 +0000
ROA not before: Wed 17 Jun 2026 14:31:17 +0000
ROA not after: Sun 13 Sep 2026 14:31:17 +0000
asID: 139880
IP address blocks: 154.83.224.0/20 maxlen: 24
154.89.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119764 (0x1d3d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 17 14:31:17 2026 GMT
Not After : Sep 13 14:31:17 2026 GMT
Subject: CN=6a32afba-982c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:70:4d:a7:a9:e9:56:d2:e4:ce:12:83:29:2c:
65:73:09:22:43:c6:72:3d:e5:1f:f2:61:8e:41:81:
34:ed:f5:de:95:0a:2b:c4:a2:9d:7b:35:12:df:94:
75:4c:c3:f9:b0:f2:78:dd:50:43:ab:6d:d0:18:cd:
bc:c4:b4:19:04:85:c1:63:5e:d5:8c:6b:c5:41:36:
13:64:52:dd:48:f7:b8:8e:b8:90:3b:2d:96:23:ca:
72:bd:36:f0:cc:45:a4:1c:69:90:ab:ad:c0:e3:63:
b3:a7:4a:a4:ef:87:5d:e6:9f:53:07:c9:55:2b:2b:
1f:7a:cd:41:47:36:f5:98:07:bb:32:d8:95:c6:01:
fe:ca:4c:a8:b7:61:93:ef:b3:33:b2:37:40:41:38:
d1:64:b7:1a:0d:65:1e:81:52:42:23:18:5c:4b:c5:
b6:20:2e:0b:de:2f:68:97:9b:ad:84:78:2e:1a:5e:
0d:35:a6:7b:0d:1c:20:5c:05:7b:2a:62:08:48:10:
b0:9f:80:75:ac:5a:4c:f4:21:78:6e:03:36:0f:b8:
7d:97:b3:4a:97:a4:d3:c2:45:0a:04:25:f8:02:dc:
9b:32:b1:82:f6:33:09:3e:f9:1b:72:7e:ba:e0:f5:
40:78:44:12:61:d1:9a:4e:1b:3b:7c:d8:34:c9:34:
7e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C1:CE:86:B1:F0:1B:BA:04:02:27:A9:93:D9:5F:66:7F:5C:64:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/365868206A5911F19A235110CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.224.0/20
154.89.224.0/20
Signature Algorithm: sha256WithRSAEncryption
85:01:96:53:23:37:83:b6:fd:7f:69:62:41:ee:57:c9:c3:f7:
4b:3e:a5:2a:32:da:52:f5:ae:d0:ef:e0:6b:a1:f8:c0:ce:09:
7f:7d:5a:b2:98:a6:14:31:17:7c:07:11:b7:8c:cd:63:c0:47:
1c:29:4a:3a:7a:2b:4a:c4:90:fc:4f:fe:e7:1b:84:2c:41:7a:
b0:ce:b8:83:b8:dc:96:1c:1f:d8:40:eb:7c:41:ee:c0:75:9f:
f0:f7:1d:ee:6e:1d:d3:4f:39:01:d2:81:42:18:31:7a:82:05:
6a:dd:95:db:73:cb:7c:91:b4:3c:d1:ca:85:04:3a:48:65:2f:
29:f7:b9:b5:b6:7d:41:e7:04:b3:fe:2b:90:d6:85:44:8e:30:
ca:9b:ca:f8:7f:69:85:c3:d5:a9:96:8d:f4:e2:2d:78:1a:a8:
c2:42:07:c6:13:aa:e5:e4:25:1c:af:c8:f7:36:b7:47:8c:3d:
23:47:07:eb:67:6c:cb:9f:b7:05:d0:d0:cc:bc:59:07:a4:bc:
be:73:d7:c3:d9:51:f1:d8:d1:8f:07:22:d2:c7:2d:d1:8d:53:
44:1a:9d:c6:ba:e8:1c:54:16:c9:eb:79:b8:b2:25:ad:32:f6:
2d:2a:bd:f9:b0:ea:a8:2a:f0:11:e9:60:6c:92:5f:e5:c2:89:
47:bc:68:40
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAdPUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjE3MTQzMTE3WhcNMjYwOTEzMTQzMTE3WjAYMRYw
FAYDVQQDEw02YTMyYWZiYS05ODJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvXBNp6npVtLkzhKDKSxlcwkiQ8ZyPeUf8mGOQYE07fXelQorxKKdezUS
35R1TMP5sPJ43VBDq23QGM28xLQZBIXBY17VjGvFQTYTZFLdSPe4jriQOy2WI8py
vTbwzEWkHGmQq63A42Ozp0qk74dd5p9TB8lVKysfes1BRzb1mAe7MtiVxgH+ykyo
t2GT77MzsjdAQTjRZLcaDWUegVJCIxhcS8W2IC4L3i9ol5uthHguGl4NNaZ7DRwg
XAV7KmIISBCwn4B1rFpM9CF4bgM2D7h9l7NKl6TTwkUKBCX4AtybMrGC9jMJPvkb
cn664PVAeEQSYdGaThs7fNg0yTR+dwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFJLB
zoax8Bu6BAInqZPZX2Z/XGSxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNjU4NjgyMDZBNTkxMUYxOUEyMzUxMTBDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEmlPgAwQEmlngMA0GCSqG
SIb3DQEBCwUAA4IBAQCFAZZTIzeDtv1/aWJB7lfJw/dLPqUqMtpS9a7Q7+BrofjA
zgl/fVqymKYUMRd8BxG3jM1jwEccKUo6eitKxJD8T/7nG4QsQXqwzriDuNyWHB/Y
QOt8Qe7AdZ/w9x3ubh3TTzkB0oFCGDF6ggVq3ZXbc8t8kbQ80cqFBDpIZS8p97m1
tn1B5wSz/iuQ1oVEjjDKm8r4f2mFw9Wplo304i14GqjCQgfGE6rl5CUcr8j3NrdH
jD0jRwfrZ2zLn7cF0NDMvFkHpLy+c9fD2VHx2NGPByLSxy3RjVNEGp3GuugcVBbJ
63m4siWtMvYtKr35sOqoKvAR6WBskl/lwolHvGhA
-----END CERTIFICATE-----
Generated at Tue Jun 23 21:54:54 2026 by rpki-client