Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39D89C546EA011F1926140C5CE1D38B0.roa
File: 39D89C546EA011F1926140C5CE1D38B0.roa (raw, json)
Hash identifier: SNkzaNTzRMD7L+5y7uqKnIP/rerXbILNRQU/GTsyzvk=
Subject key identifier: 2E:83:7E:78:7A:56:0A:63:DF:DA:4E:72:15:86:69:B1:D8:93:60:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D463
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39D89C546EA011F1926140C5CE1D38B0.roa
Signing time: Tue 23 Jun 2026 01:09:47 +0000
ROA not before: Tue 23 Jun 2026 01:09:42 +0000
ROA not after: Wed 01 Jul 2026 01:09:42 +0000
asID: 17497
IP address blocks: 154.81.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119907 (0x1d463)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 01:09:42 2026 GMT
Not After : Jul 1 01:09:42 2026 GMT
Subject: CN=6a39dcdb-fbd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ef:6f:a9:f6:55:10:97:44:92:c2:71:6d:9f:
39:d8:fa:89:6e:54:d7:02:f8:7a:8e:39:5d:33:02:
8d:06:77:3e:e5:bc:56:ce:98:37:96:d1:60:68:f1:
32:32:2c:8f:7b:b0:f6:69:f9:da:37:4c:3d:ef:ec:
7e:10:af:06:94:b1:a2:cc:28:dc:e5:2b:66:99:f1:
25:b0:c1:75:f1:e3:db:7a:ef:41:11:8f:09:ba:11:
f6:fe:de:95:08:c8:b5:f3:15:ec:73:11:7a:5a:45:
84:99:5e:9c:4a:a5:6a:8d:7a:c3:12:bb:fe:d9:12:
ff:4d:88:42:82:4f:de:f0:2d:9b:26:52:ee:5a:c5:
90:a3:44:d3:82:75:c8:3b:80:1d:54:f8:3f:e8:7e:
ce:51:a9:bf:e9:62:0d:a4:75:77:f6:84:af:a3:0b:
8d:62:16:24:78:3c:da:09:0b:80:fd:3b:8b:ab:eb:
ee:ab:13:ff:f8:7d:e3:e3:1f:da:2b:ec:d8:1b:6b:
79:f3:1d:25:1a:80:89:9a:6b:5d:17:47:d8:35:cc:
79:6e:07:f0:a0:10:91:71:aa:0a:70:82:7d:a6:dd:
78:81:7e:1b:0d:67:79:a3:01:9d:c7:bd:81:ed:b7:
7d:e7:9f:ed:74:38:bf:18:58:36:87:67:b7:56:bb:
e1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:83:7E:78:7A:56:0A:63:DF:DA:4E:72:15:86:69:B1:D8:93:60:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39D89C546EA011F1926140C5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.159.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:9f:f8:f9:f4:05:e1:18:fe:ab:78:e7:37:d1:bf:ca:75:fd:
82:3e:32:4c:6b:d7:99:97:48:83:02:1d:38:a9:9b:12:91:4d:
86:a6:e0:33:a1:2a:f6:4d:1f:28:ac:b4:f4:5a:42:57:b7:a5:
c5:dc:34:7c:e2:f1:40:c4:27:2d:fd:7b:ab:4b:b6:6d:48:e8:
3f:f1:69:55:e6:96:2b:a9:bc:d2:4b:f7:a9:53:2c:3c:0c:e7:
74:15:fd:e0:cd:30:3e:00:05:ca:ff:c3:04:dd:ec:09:ec:74:
85:5b:32:a9:a4:bd:8c:1b:ee:a9:42:be:dc:de:0d:80:e3:80:
ed:4a:6f:8a:fb:ec:a9:5f:38:32:d6:3d:ee:6f:b4:8a:ba:13:
b0:3a:74:c2:1b:9f:e3:ab:9e:97:ab:0d:88:a1:a1:50:8f:b2:
7d:07:30:1a:d9:09:f5:3d:ce:1f:32:3b:09:43:78:04:0a:44:
c7:5f:da:07:1e:7c:34:6e:33:11:b3:0b:20:05:b5:1e:42:0c:
41:73:d5:01:9f:c3:3c:46:d0:ae:7c:73:22:d1:be:f4:47:f6:
f5:65:e9:83:25:4d:d6:e6:1c:31:9e:8d:8d:fb:cf:d9:27:a4:
b4:e2:ba:8e:11:12:6d:ec:59:38:55:e4:4c:72:1f:e0:f7:16:
90:dd:36:b7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdRjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjIzMDEwOTQyWhcNMjYwNzAxMDEwOTQyWjAYMRYw
FAYDVQQDEw02YTM5ZGNkYi1mYmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAue9vqfZVEJdEksJxbZ852PqJblTXAvh6jjldMwKNBnc+5bxWzpg3ltFg
aPEyMiyPe7D2afnaN0w97+x+EK8GlLGizCjc5StmmfElsMF18ePbeu9BEY8JuhH2
/t6VCMi18xXscxF6WkWEmV6cSqVqjXrDErv+2RL/TYhCgk/e8C2bJlLuWsWQo0TT
gnXIO4AdVPg/6H7OUam/6WINpHV39oSvowuNYhYkeDzaCQuA/TuLq+vuqxP/+H3j
4x/aK+zYG2t58x0lGoCJmmtdF0fYNcx5bgfwoBCRcaoKcIJ9pt14gX4bDWd5owGd
x72B7bd955/tdDi/GFg2h2e3VrvhQwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFC6D
fnh6Vgpj39pOchWGabHYk2DaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zOUQ4OUM1NDZFQTAxMUYxOTI2MTQwQzVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlGfMA0GCSqGSIb3DQEB
CwUAA4IBAQCln/j59AXhGP6reOc30b/Kdf2CPjJMa9eZl0iDAh04qZsSkU2GpuAz
oSr2TR8orLT0WkJXt6XF3DR84vFAxCct/XurS7ZtSOg/8WlV5pYrqbzSS/epUyw8
DOd0Ff3gzTA+AAXK/8ME3ewJ7HSFWzKppL2MG+6pQr7c3g2A44DtSm+K++ypXzgy
1j3ub7SKuhOwOnTCG5/jq56Xqw2IoaFQj7J9BzAa2Qn1Pc4fMjsJQ3gECkTHX9oH
Hnw0bjMRswsgBbUeQgxBc9UBn8M8RtCufHMi0b70R/b1ZemDJU3W5hwxno2N+8/Z
J6S04rqOERJt7Fk4VeRMch/g9xaQ3Ta3
-----END CERTIFICATE-----
Generated at Tue Jun 23 21:54:01 2026 by rpki-client