Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5DF1054E694211F1B5C256F6CE1D38B0.roa
File: 5DF1054E694211F1B5C256F6CE1D38B0.roa (raw, json)
Hash identifier: UMuMkyBULs5wAu0qdro0h3V85vN5xBMYA+W7m1oXF9A=
Subject key identifier: A8:E2:51:79:BB:1D:44:F6:CD:3D:32:BE:54:44:15:B3:3A:18:92:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D312
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5DF1054E694211F1B5C256F6CE1D38B0.roa
Signing time: Tue 16 Jun 2026 05:15:19 +0000
ROA not before: Tue 16 Jun 2026 05:15:15 +0000
ROA not after: Tue 21 Jul 2026 05:15:15 +0000
asID: 59711
IP address blocks: 154.83.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119570 (0x1d312)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 05:15:15 2026 GMT
Not After : Jul 21 05:15:15 2026 GMT
Subject: CN=6a30dbe7-7ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9e:05:bc:31:b2:a3:d9:60:1d:7b:e5:11:83:
0c:e8:52:bd:2d:99:a7:96:19:ee:ea:eb:ee:94:9c:
cf:74:c3:91:1c:15:bb:f3:6d:ff:99:70:b3:c2:59:
19:70:c5:28:f9:7b:01:ab:4f:74:e6:f8:42:8e:c8:
82:b2:90:7a:a7:d1:7e:3c:da:65:5b:85:02:89:54:
8d:16:52:10:14:94:fe:47:6c:1e:ee:50:e3:bc:f0:
03:07:af:fa:4b:71:04:f5:5f:f0:e2:88:00:88:36:
3e:1c:d1:30:e2:92:12:f7:64:79:c4:17:b5:96:72:
ce:1b:27:82:6a:90:58:09:0c:0e:be:24:e4:ea:0a:
f6:de:8e:70:26:6e:cc:1b:45:73:b2:a2:39:83:3a:
f2:82:27:42:32:08:29:14:59:fe:d7:65:de:2b:15:
05:7e:48:13:d3:4f:2d:bc:8e:56:7f:53:c6:80:75:
85:b5:9e:3c:c6:93:d7:e6:42:a4:44:3c:b6:13:d8:
be:ed:15:f4:73:46:04:cd:9f:a5:81:43:05:b1:48:
ee:cc:5e:61:ad:e4:3d:bf:06:8c:9a:74:dc:ef:19:
3a:eb:db:41:a1:7a:07:2e:69:45:a0:ba:a8:55:2b:
83:a1:91:40:76:41:5a:91:3e:57:9a:c5:3a:61:7b:
56:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E2:51:79:BB:1D:44:F6:CD:3D:32:BE:54:44:15:B3:3A:18:92:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5DF1054E694211F1B5C256F6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.148.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:a9:b4:04:f8:ff:b1:a0:d1:4e:31:37:70:8f:cd:ca:4f:25:
9d:62:ef:40:64:f6:a8:7d:f0:9e:bb:6b:d6:48:9c:42:62:a7:
50:55:2e:c9:69:94:3b:6c:a2:d2:ff:9f:13:04:0d:48:6f:ba:
b6:3e:3f:17:2e:e2:20:78:ea:33:a7:ee:d7:6c:e9:cd:11:f0:
ee:c2:8b:9f:f6:e1:4a:1c:f9:e3:01:6d:22:32:a9:90:0b:1f:
67:27:97:39:fb:09:e0:fb:1b:10:25:34:b0:29:61:bd:22:84:
c3:c3:10:3c:8d:98:67:ce:73:17:15:df:29:cd:35:72:b5:3d:
3f:65:e8:92:5a:7d:c3:62:18:be:94:50:7e:cd:b2:fb:64:14:
9b:39:9a:29:34:f1:fe:cb:8f:63:72:1f:05:46:4d:68:5f:94:
b4:a1:2e:0d:e6:cb:8d:ba:d5:4b:35:99:40:dd:f4:47:77:4a:
79:ac:b9:4a:e7:d1:69:35:88:23:6f:36:54:b5:95:3e:32:d6:
61:76:05:c7:f5:3c:7c:64:ae:a9:f3:76:f4:bc:7c:2d:49:b0:
d8:8a:5f:cf:25:28:88:03:51:d6:f8:13:4c:ba:63:5f:63:69:
ab:12:83:41:27:e4:e7:56:a7:b0:7c:b2:03:f4:72:95:15:2b:
9f:d9:20:19
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdMSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjE2MDUxNTE1WhcNMjYwNzIxMDUxNTE1WjAYMRYw
FAYDVQQDEw02YTMwZGJlNy03ZWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmZ4FvDGyo9lgHXvlEYMM6FK9LZmnlhnu6uvulJzPdMORHBW7823/mXCz
wlkZcMUo+XsBq0905vhCjsiCspB6p9F+PNplW4UCiVSNFlIQFJT+R2we7lDjvPAD
B6/6S3EE9V/w4ogAiDY+HNEw4pIS92R5xBe1lnLOGyeCapBYCQwOviTk6gr23o5w
Jm7MG0VzsqI5gzrygidCMggpFFn+12XeKxUFfkgT008tvI5Wf1PGgHWFtZ48xpPX
5kKkRDy2E9i+7RX0c0YEzZ+lgUMFsUjuzF5hreQ9vwaMmnTc7xk669tBoXoHLmlF
oLqoVSuDoZFAdkFakT5XmsU6YXtWowIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKji
UXm7HUT2zT0yvlREFbM6GJIoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81REYxMDU0RTY5NDIxMUYxQjVDMjU2RjZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlOUMA0GCSqGSIb3DQEB
CwUAA4IBAQAOqbQE+P+xoNFOMTdwj83KTyWdYu9AZPaoffCeu2vWSJxCYqdQVS7J
aZQ7bKLS/58TBA1Ib7q2Pj8XLuIgeOozp+7XbOnNEfDuwouf9uFKHPnjAW0iMqmQ
Cx9nJ5c5+wng+xsQJTSwKWG9IoTDwxA8jZhnznMXFd8pzTVytT0/ZeiSWn3DYhi+
lFB+zbL7ZBSbOZopNPH+y49jch8FRk1oX5S0oS4N5suNutVLNZlA3fRHd0p5rLlK
59FpNYgjbzZUtZU+MtZhdgXH9Tx8ZK6p83b0vHwtSbDYil/PJSiIA1HW+BNMumNf
Y2mrEoNBJ+TnVqewfLID9HKVFSuf2SAZ
-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:54 2026 by rpki-client