Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/434E66C054C311F19016BBC6CE1D38B0.roa
File: 434E66C054C311F19016BBC6CE1D38B0.roa (raw, json)
Hash identifier: mUD+wLCWfqyYDHcvPoY8JuaPtu4wSLAYsqtLZ+xxj1c=
Subject key identifier: 7C:A0:0B:AF:17:1C:F9:D3:1D:51:96:22:10:1E:9D:23:1B:05:C9:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CD20
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/434E66C054C311F19016BBC6CE1D38B0.roa
Signing time: Thu 21 May 2026 03:15:05 +0000
ROA not before: Thu 21 May 2026 03:15:00 +0000
ROA not after: Wed 01 Jul 2026 03:15:00 +0000
asID: 136501
IP address blocks: 154.92.192.0/24 maxlen: 24
154.92.193.0/24 maxlen: 24
154.92.194.0/24 maxlen: 24
154.92.195.0/24 maxlen: 24
154.92.196.0/24 maxlen: 24
154.92.197.0/24 maxlen: 24
154.92.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118048 (0x1cd20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 03:15:00 2026 GMT
Not After : Jul 1 03:15:00 2026 GMT
Subject: CN=6a0e78b9-72ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f3:85:f5:1b:b6:29:da:ef:4d:67:25:99:92:
52:78:de:7d:b2:e7:62:f0:1e:b0:6c:23:f1:98:92:
e1:1a:5b:ef:e0:df:7c:90:7e:5b:f8:37:c0:7b:27:
b1:1e:0b:95:9e:b4:96:ab:37:83:8e:80:fa:5d:73:
75:bf:ff:3e:46:29:5b:8b:f5:0d:38:aa:8e:f9:a2:
92:6c:f2:2a:75:b2:c8:8a:37:c0:97:b6:ab:a1:f9:
50:f0:1f:49:6b:4c:d4:d1:01:dd:f2:18:da:e5:e1:
f2:14:53:c0:3b:82:1c:bb:ff:a6:ac:5f:66:7c:6c:
53:9d:77:ce:d2:0a:f9:9e:8a:13:d7:e4:23:95:08:
d1:ce:ff:0a:e1:5f:57:9d:57:24:6a:30:9c:06:3d:
ce:7c:8e:e0:e1:2c:ff:1f:03:39:cd:22:80:c2:51:
45:72:6b:33:92:14:1a:fd:38:9e:ab:ff:5f:be:be:
12:53:88:4b:44:c0:87:29:0b:d3:41:66:98:fd:ef:
45:ba:e5:bb:26:6a:f2:c4:42:62:9b:3f:49:59:7a:
e6:db:9c:6d:49:74:a5:6d:1d:1f:c2:35:c5:cd:28:
da:95:3a:4a:2d:e2:0c:db:1b:15:92:2f:54:bb:0b:
8d:0d:b3:e9:d7:d0:69:a9:4c:c6:dd:7b:2b:5f:d9:
3e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A0:0B:AF:17:1C:F9:D3:1D:51:96:22:10:1E:9D:23:1B:05:C9:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/434E66C054C311F19016BBC6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.192.0-154.92.198.255
Signature Algorithm: sha256WithRSAEncryption
bb:90:02:7e:5c:22:cb:f7:39:94:c4:e9:e5:a6:a4:a6:66:d7:
78:c0:a2:d5:fe:ca:f2:60:e4:66:3c:7a:bf:41:60:b0:64:2e:
8f:bf:47:e1:c7:9f:db:4a:3c:f4:74:2c:0e:67:0d:fb:56:2d:
4f:8f:bf:58:1f:36:81:b6:94:4f:b2:24:8a:40:d5:cd:75:7b:
b4:9f:5b:4f:f5:3a:89:d8:d5:3a:49:25:76:fb:f0:77:92:b3:
15:d7:2a:c4:4c:a2:ac:1e:d4:1f:e1:c7:61:b8:50:b0:d3:6e:
32:c5:15:a9:80:7f:8b:8b:0b:12:25:e2:ce:83:81:d6:99:80:
dd:65:84:36:e3:28:b7:ff:c0:ad:d7:e6:2d:ac:92:19:8c:95:
c1:c3:37:81:55:c7:c1:fd:90:6f:02:34:ac:db:b6:f3:c0:74:
a1:eb:4d:1b:e2:b2:5c:2a:00:d2:97:47:45:9e:fd:08:8a:73:
36:81:9b:fa:c8:25:fc:a3:77:37:0e:a6:5d:a7:ed:af:89:ab:
a5:95:e3:84:ca:2e:80:cc:0a:d1:d9:fa:7f:fb:21:bc:d5:18:
1c:a2:ee:5d:b0:c8:d8:73:65:ac:d2:4f:0b:69:29:0c:89:fd:
1e:84:07:62:f0:7a:ff:ed:04:1d:c4:69:cc:6f:51:19:83:3d:
a8:95:d4:be
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAc0gMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTIxMDMxNTAwWhcNMjYwNzAxMDMxNTAwWjAYMRYw
FAYDVQQDEw02YTBlNzhiOS03MmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1POF9Ru2KdrvTWclmZJSeN59sudi8B6wbCPxmJLhGlvv4N98kH5b+DfA
eyexHguVnrSWqzeDjoD6XXN1v/8+Rilbi/UNOKqO+aKSbPIqdbLIijfAl7aroflQ
8B9Ja0zU0QHd8hja5eHyFFPAO4Icu/+mrF9mfGxTnXfO0gr5nooT1+QjlQjRzv8K
4V9XnVckajCcBj3OfI7g4Sz/HwM5zSKAwlFFcmszkhQa/Tieq/9fvr4SU4hLRMCH
KQvTQWaY/e9FuuW7JmryxEJimz9JWXrm25xtSXSlbR0fwjXFzSjalTpKLeIM2xsV
ki9UuwuNDbPp19BpqUzG3XsrX9k+jwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFHyg
C68XHPnTHVGWIhAenSMbBcl1MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MzRFNjZDMDU0QzMxMUYxOTAxNkJCQzZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAaaXMADBACaXMYwDQYJ
KoZIhvcNAQELBQADggEBALuQAn5cIsv3OZTE6eWmpKZm13jAotX+yvJg5GY8er9B
YLBkLo+/R+HHn9tKPPR0LA5nDftWLU+Pv1gfNoG2lE+yJIpA1c11e7SfW0/1OonY
1TpJJXb78HeSsxXXKsRMoqwe1B/hx2G4ULDTbjLFFamAf4uLCxIl4s6DgdaZgN1l
hDbjKLf/wK3X5i2skhmMlcHDN4FVx8H9kG8CNKzbtvPAdKHrTRvislwqANKXR0We
/QiKczaBm/rIJfyjdzcOpl2n7a+Jq6WV44TKLoDMCtHZ+n/7IbzVGByi7l2wyNhz
ZazSTwtpKQyJ/R6EB2Lwev/tBB3EacxvURmDPaiV1L4=
-----END CERTIFICATE-----
Generated at Fri Jun 12 00:26:08 2026 by rpki-client