Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B4111B0706611F19DC4E9A3CE1D38B0.roa
File: 5B4111B0706611F19DC4E9A3CE1D38B0.roa (raw, json)
Hash identifier: 46d+OD3uzqJIy4tLTVCkah9rJZMfqehCc8kWYGuvHbI=
Subject key identifier: 6E:32:F9:B3:34:2D:A0:80:B2:E1:02:25:46:BE:51:FD:49:63:0B:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D506
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B4111B0706611F19DC4E9A3CE1D38B0.roa
Signing time: Thu 25 Jun 2026 07:20:35 +0000
ROA not before: Thu 25 Jun 2026 07:20:30 +0000
ROA not after: Tue 28 Jul 2026 07:20:30 +0000
asID: 197574
IP address blocks: 154.83.129.0/24 maxlen: 24
154.83.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120070 (0x1d506)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 07:20:30 2026 GMT
Not After : Jul 28 07:20:30 2026 GMT
Subject: CN=6a3cd6c3-09d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:93:af:13:2d:79:3c:3a:ec:3f:4e:ad:1e:
f5:8b:44:37:07:ef:7a:3d:09:ed:4b:34:12:c9:7f:
3f:b5:ce:3b:50:8b:d7:c3:c5:d0:91:8e:43:26:18:
3c:e2:ec:61:3d:7f:24:a9:e6:96:5b:ae:52:b0:d0:
e9:9a:af:d8:56:be:cd:d4:09:e6:ce:6d:f6:14:7a:
9f:e8:2e:5a:47:a7:5f:68:30:bd:ba:75:24:5c:e3:
a3:eb:3e:33:96:df:15:85:4c:a6:d9:60:2e:bf:55:
85:17:61:cc:20:82:74:75:e4:28:6e:4c:d0:d1:a9:
de:58:07:72:bc:b3:cf:17:d4:20:45:d7:63:19:5d:
e0:a2:d6:73:22:73:8b:73:cd:4d:2e:34:a3:6b:8a:
d7:0e:fb:ea:d7:54:71:bf:ae:76:69:09:9b:c5:b7:
26:aa:5e:cf:76:a2:d2:f4:88:e1:9f:52:6d:71:20:
83:31:89:73:93:e1:af:1b:f6:5f:64:b4:c9:91:74:
5f:4d:71:c8:67:f7:b5:6a:e0:58:9c:ff:e7:a9:6a:
23:a1:e3:6f:08:9b:bb:c2:3d:c7:27:c8:f1:fc:92:
59:4d:45:58:82:12:27:9a:b1:7a:60:03:ef:ce:eb:
a9:6e:91:a8:83:e1:c8:fc:b1:e3:73:01:26:96:04:
cb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:32:F9:B3:34:2D:A0:80:B2:E1:02:25:46:BE:51:FD:49:63:0B:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B4111B0706611F19DC4E9A3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.129.0/24
154.83.208.0/24
Signature Algorithm: sha256WithRSAEncryption
48:49:57:9d:71:b7:48:d9:8b:74:d6:0b:7d:30:2f:15:e3:ce:
e9:31:96:0e:41:20:44:56:66:d6:13:d2:73:f1:eb:3f:fb:bd:
83:42:e5:e3:f8:95:4a:52:b1:7c:78:57:67:7a:19:0f:8f:d2:
33:f6:15:b9:f2:a2:e8:7b:30:32:2d:e7:bb:18:c8:cf:92:fc:
0d:58:40:56:9a:fe:b2:40:db:dd:52:f4:70:df:f6:a9:00:1b:
8f:e3:d4:ac:08:21:8b:3c:c0:d1:c4:79:7e:42:7a:9c:b3:45:
ce:f2:02:6c:74:7c:b4:f5:e2:02:8d:9f:7d:ed:11:e3:d3:4a:
5c:38:fb:a9:d4:67:41:46:ff:54:ab:0a:65:80:2e:55:0e:a9:
c6:98:45:d0:de:07:e5:a8:37:73:9e:df:07:3c:04:5f:9f:19:
e6:14:89:59:d4:da:98:a5:86:96:d8:5f:a3:ae:4d:14:2c:01:
e7:48:7f:d0:bc:82:6a:44:14:44:d9:fe:37:ae:07:9f:03:66:
50:5d:34:e7:21:00:8f:32:86:9b:fb:96:b1:b6:56:3d:28:a9:
63:c5:01:70:bd:5e:20:dc:bc:e1:86:1d:b9:d7:30:68:be:da:
a6:78:88:33:b5:f2:f2:dd:9b:2a:e8:bc:2a:1c:6b:de:8d:81:
73:a6:fd:b1
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAdUGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjI1MDcyMDMwWhcNMjYwNzI4MDcyMDMwWjAYMRYw
FAYDVQQDEw02YTNjZDZjMy0wOWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAui6TrxMteTw67D9OrR71i0Q3B+96PQntSzQSyX8/tc47UIvXw8XQkY5D
Jhg84uxhPX8kqeaWW65SsNDpmq/YVr7N1Anmzm32FHqf6C5aR6dfaDC9unUkXOOj
6z4zlt8VhUym2WAuv1WFF2HMIIJ0deQobkzQ0aneWAdyvLPPF9QgRddjGV3gotZz
InOLc81NLjSja4rXDvvq11Rxv652aQmbxbcmql7PdqLS9Ijhn1JtcSCDMYlzk+Gv
G/ZfZLTJkXRfTXHIZ/e1auBYnP/nqWojoeNvCJu7wj3HJ8jx/JJZTUVYghInmrF6
YAPvzuupbpGog+HI/LHjcwEmlgTLxwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFG4y
+bM0LaCAsuECJUa+Uf1JYwtcMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81QjQxMTFCMDcwNjYxMUYxOURDNEU5QTNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmlOBAwQAmlPQMA0GCSqG
SIb3DQEBCwUAA4IBAQBISVedcbdI2Yt01gt9MC8V487pMZYOQSBEVmbWE9Jz8es/
+72DQuXj+JVKUrF8eFdnehkPj9Iz9hW58qLoezAyLee7GMjPkvwNWEBWmv6yQNvd
UvRw3/apABuP49SsCCGLPMDRxHl+Qnqcs0XO8gJsdHy09eICjZ997RHj00pcOPup
1GdBRv9UqwplgC5VDqnGmEXQ3gflqDdznt8HPARfnxnmFIlZ1NqYpYaW2F+jrk0U
LAHnSH/QvIJqRBRE2f43rgefA2ZQXTTnIQCPMoab+5axtlY9KKljxQFwvV4g3Lzh
hh251zBovtqmeIgztfLy3Zsq6LwqHGvejYFzpv2x
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:23 2026 by rpki-client