Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/588C204068CD11F1A922D6A4CE1D38B0.roa
File: 588C204068CD11F1A922D6A4CE1D38B0.roa (raw, json)
Hash identifier: TmzOFO8Q54EX3aGJDn5eQ7zFu23r9xElIwjR6HXpjIc=
Subject key identifier: 7A:0D:64:0C:12:C1:25:68:5E:2E:C0:85:0D:6F:9F:1B:1B:2E:F0:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D2E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/588C204068CD11F1A922D6A4CE1D38B0.roa
Signing time: Mon 15 Jun 2026 15:17:39 +0000
ROA not before: Mon 15 Jun 2026 15:17:33 +0000
ROA not after: Wed 08 Jul 2026 15:17:33 +0000
asID: 397423
IP address blocks: 154.202.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119523 (0x1d2e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 15 15:17:33 2026 GMT
Not After : Jul 8 15:17:33 2026 GMT
Subject: CN=6a301793-62bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e9:a1:84:23:68:19:a2:d1:a9:56:25:e4:82:
d2:b1:b9:ce:49:44:44:86:ce:06:fc:cc:fa:a0:15:
d2:d0:36:7c:41:bc:53:56:71:84:3a:2c:6a:3a:07:
90:8a:35:c3:c0:e5:fb:dd:4e:95:ce:28:9b:e9:23:
1b:e7:91:3b:0e:b0:2d:63:5d:58:9c:6c:a4:d6:71:
4e:39:23:23:51:04:2d:90:59:30:81:0c:e0:9a:55:
ea:b1:5b:ef:2a:4f:5b:51:1d:8d:7d:10:47:cc:05:
20:df:fb:a9:4a:52:b1:bf:ae:91:46:24:40:84:2d:
d6:02:fa:c3:55:2a:6d:03:f4:27:8a:db:dc:22:26:
10:99:8f:82:64:81:eb:a5:cb:b7:73:42:59:b7:df:
81:bd:38:f6:c5:1e:8b:18:7e:9e:3c:a0:88:7c:79:
42:8a:80:36:7d:6d:4f:49:37:e0:c5:86:70:18:2b:
34:67:1c:a8:0d:85:03:c6:4f:5c:0c:c6:fa:ad:ab:
12:15:9e:29:b0:57:c0:0a:99:3b:7b:24:58:ce:03:
fe:7e:70:33:43:31:d6:14:b3:00:88:3c:a4:30:82:
6d:67:3a:82:af:5f:cd:7c:10:a9:f5:bb:bb:47:d5:
d9:c4:97:a1:15:99:f0:2d:35:f9:dd:30:98:7a:ee:
1b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0D:64:0C:12:C1:25:68:5E:2E:C0:85:0D:6F:9F:1B:1B:2E:F0:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/588C204068CD11F1A922D6A4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.3.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:e9:2d:2d:82:92:54:37:46:fe:7b:8b:ae:56:e5:d1:36:28:
b5:b4:16:5d:d3:8e:9f:13:86:3f:b9:b8:56:df:d7:ef:a3:d6:
2e:a7:9c:64:6d:c2:2a:49:f2:4b:73:ce:ad:ad:6b:95:cb:e9:
38:4c:c1:25:eb:4d:20:8e:63:05:80:cd:f6:93:e0:c8:32:84:
30:e9:ff:19:da:1d:99:fc:81:2c:b3:93:18:2f:c0:00:6b:14:
19:5b:df:c3:55:e3:ce:d9:9b:70:1c:dd:48:18:9b:db:04:30:
98:84:a8:25:f3:df:d2:d8:04:78:86:df:ae:64:50:f5:80:a3:
93:d7:5a:3e:21:ff:13:f4:46:b9:df:83:99:5c:09:1d:3d:37:
d0:26:fd:0b:ae:2e:f8:ea:93:b3:e7:62:6c:54:9e:ba:d2:a3:
7c:fc:08:e6:18:b6:5e:b3:ce:88:c6:a3:99:67:dc:ff:ec:b2:
35:6a:d1:49:61:2a:76:07:19:fe:d4:6d:a4:bb:db:fd:ed:74:
01:63:99:9a:9b:8d:f0:bd:35:85:ce:8e:38:a1:32:de:91:db:
01:6e:56:7e:4a:e4:72:68:34:e5:81:87:c8:75:6f:e1:1f:43:
05:ad:5c:46:c1:1f:56:b0:3d:55:9b:5a:c0:35:b9:9e:dc:6e:
79:59:a3:16
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdLjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjE1MTUxNzMzWhcNMjYwNzA4MTUxNzMzWjAYMRYw
FAYDVQQDEw02YTMwMTc5My02MmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtemhhCNoGaLRqVYl5ILSsbnOSUREhs4G/Mz6oBXS0DZ8QbxTVnGEOixq
OgeQijXDwOX73U6Vziib6SMb55E7DrAtY11YnGyk1nFOOSMjUQQtkFkwgQzgmlXq
sVvvKk9bUR2NfRBHzAUg3/upSlKxv66RRiRAhC3WAvrDVSptA/QnitvcIiYQmY+C
ZIHrpcu3c0JZt9+BvTj2xR6LGH6ePKCIfHlCioA2fW1PSTfgxYZwGCs0ZxyoDYUD
xk9cDMb6rasSFZ4psFfACpk7eyRYzgP+fnAzQzHWFLMAiDykMIJtZzqCr1/NfBCp
9bu7R9XZxJehFZnwLTX53TCYeu4bbwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHoN
ZAwSwSVoXi7AhQ1vnxsbLvBHMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81ODhDMjA0MDY4Q0QxMUYxQTkyMkQ2QTRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsoDMA0GCSqGSIb3DQEB
CwUAA4IBAQC26S0tgpJUN0b+e4uuVuXRNii1tBZd046fE4Y/ubhW39fvo9Yup5xk
bcIqSfJLc86trWuVy+k4TMEl600gjmMFgM32k+DIMoQw6f8Z2h2Z/IEss5MYL8AA
axQZW9/DVePO2ZtwHN1IGJvbBDCYhKgl89/S2AR4ht+uZFD1gKOT11o+If8T9Ea5
34OZXAkdPTfQJv0Lri746pOz52JsVJ660qN8/AjmGLZes86IxqOZZ9z/7LI1atFJ
YSp2Bxn+1G2ku9v97XQBY5mam43wvTWFzo44oTLekdsBblZ+SuRyaDTlgYfIdW/h
H0MFrVxGwR9WsD1Vm1rANbme3G55WaMW
-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:00 2026 by rpki-client