Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6100A2944F1111F18247A01DCF1D38B0.roa
File: 6100A2944F1111F18247A01DCF1D38B0.roa (raw, json)
Hash identifier: /hOwVIqwBmxmVpIIb0wEtrkn4gUCB9IDEtq/pwjUkI4=
Subject key identifier: 79:B0:0D:CC:B2:D1:D6:17:B6:C8:BA:5A:7A:5D:10:46:8A:27:E8:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CB89
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6100A2944F1111F18247A01DCF1D38B0.roa
Signing time: Wed 13 May 2026 21:19:09 +0000
ROA not before: Wed 13 May 2026 21:19:04 +0000
ROA not after: Tue 16 Jun 2026 21:19:04 +0000
asID: 22773
IP address blocks: 154.90.18.0/24 maxlen: 24
154.90.152.0/24 maxlen: 24
154.90.153.0/24 maxlen: 24
154.90.154.0/24 maxlen: 24
154.90.155.0/24 maxlen: 24
154.90.156.0/24 maxlen: 24
154.90.157.0/24 maxlen: 24
154.90.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 May 2026 08:26:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117641 (0x1cb89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 13 21:19:04 2026 GMT
Not After : Jun 16 21:19:04 2026 GMT
Subject: CN=6a04eacd-682c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b2:41:ce:13:cc:58:ed:ed:26:25:b4:9b:62:
92:cf:ac:35:f5:3e:d9:cf:fe:d0:88:ab:c0:b7:88:
70:99:c2:e6:66:a5:5b:7d:b5:73:e0:f1:f7:f7:da:
11:5e:22:b3:f2:1c:57:ee:c1:74:f3:50:f7:5a:8a:
80:a1:9e:ce:72:0f:a5:79:26:d9:26:8f:6b:26:5c:
39:62:35:9f:a6:b0:20:a0:b5:73:0a:ff:f2:68:18:
7c:61:96:c9:ee:d0:6d:9e:b5:93:c0:28:30:96:51:
04:a3:42:97:b9:d3:20:ef:5b:78:3f:2c:aa:60:19:
91:a5:ad:59:9f:93:47:b6:61:38:9a:79:0d:48:9d:
bb:f5:53:66:a6:c2:15:83:f5:87:d7:88:3d:29:9c:
55:15:e6:55:ae:26:a1:00:e4:2c:d2:d7:17:97:c5:
fc:79:d5:23:ca:13:80:94:87:01:1f:5f:13:72:31:
58:69:5d:31:07:ea:0a:19:b1:0a:5e:7c:fd:7c:bd:
b9:b8:73:9e:6a:4d:9a:fd:e2:22:0b:47:73:20:bb:
1e:de:99:67:39:c6:91:5a:87:53:d5:a2:b5:55:a1:
cf:49:5b:5c:3d:6c:f5:ef:45:16:4a:1e:ca:93:3f:
02:76:be:08:08:5b:0a:87:39:78:6a:e2:ea:92:d4:
9a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B0:0D:CC:B2:D1:D6:17:B6:C8:BA:5A:7A:5D:10:46:8A:27:E8:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6100A2944F1111F18247A01DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.18.0/24
154.90.152.0-154.90.158.255
Signature Algorithm: sha256WithRSAEncryption
71:5e:e8:5c:28:61:7f:99:8f:4e:21:c9:31:6b:20:70:28:df:
29:d8:33:f8:42:c5:13:24:50:5f:96:12:6a:97:e9:ae:87:57:
52:65:9a:22:b0:cf:b8:6f:9a:71:c5:8c:55:b8:6f:d2:b7:17:
cc:fd:de:ec:7d:07:1b:53:fd:cc:01:53:ce:2c:0d:39:70:44:
e1:0c:a7:e3:a0:b3:f6:37:f5:5c:cb:d7:28:70:ad:c2:73:98:
d0:29:6e:18:46:26:10:ce:de:f8:3a:08:f8:73:5b:18:fa:24:
ee:db:98:15:99:64:39:59:c2:51:c9:35:ba:89:10:80:13:2c:
36:c3:53:30:16:8a:eb:35:a7:fa:a9:5b:4a:3f:76:7d:d5:73:
82:99:40:37:f2:42:d9:c6:29:87:29:f6:f6:92:d1:08:1b:58:
98:bc:a8:74:78:40:89:c1:01:2d:71:1e:97:72:c1:ef:18:22:
0d:21:ef:cf:79:65:ef:d5:45:d7:2d:d2:2e:86:c0:18:e9:8a:
69:0c:26:1c:ee:cf:84:74:53:0e:89:17:46:6e:fd:00:c2:a2:
f3:7d:8a:6b:91:2f:a5:0b:66:5b:ce:da:a8:03:38:3f:69:35:
d0:49:29:b8:b6:ec:16:e8:99:3f:98:fc:d6:f9:a5:d5:12:fd:
67:7e:d7:30
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAcuJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTEzMjExOTA0WhcNMjYwNjE2MjExOTA0WjAYMRYw
FAYDVQQDEw02YTA0ZWFjZC02ODJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwbJBzhPMWO3tJiW0m2KSz6w19T7Zz/7QiKvAt4hwmcLmZqVbfbVz4PH3
99oRXiKz8hxX7sF081D3WoqAoZ7Ocg+leSbZJo9rJlw5YjWfprAgoLVzCv/yaBh8
YZbJ7tBtnrWTwCgwllEEo0KXudMg71t4PyyqYBmRpa1Zn5NHtmE4mnkNSJ279VNm
psIVg/WH14g9KZxVFeZVriahAOQs0tcXl8X8edUjyhOAlIcBH18TcjFYaV0xB+oK
GbEKXnz9fL25uHOeak2a/eIiC0dzILse3plnOcaRWodT1aK1VaHPSVtcPWz170UW
Sh7Kkz8Cdr4ICFsKhzl4auLqktSaNwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFHmw
Dcyy0dYXtsi6WnpdEEaKJ+i3MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MTAwQTI5NDRGMTExMUYxODI0N0EwMURDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAmloSMAwDBAOaWpgDBACa
Wp4wDQYJKoZIhvcNAQELBQADggEBAHFe6FwoYX+Zj04hyTFrIHAo3ynYM/hCxRMk
UF+WEmqX6a6HV1JlmiKwz7hvmnHFjFW4b9K3F8z93ux9BxtT/cwBU84sDTlwROEM
p+Ogs/Y39VzL1yhwrcJzmNApbhhGJhDO3vg6CPhzWxj6JO7bmBWZZDlZwlHJNbqJ
EIATLDbDUzAWius1p/qpW0o/dn3Vc4KZQDfyQtnGKYcp9vaS0QgbWJi8qHR4QInB
AS1xHpdywe8YIg0h7895Ze/VRdct0i6GwBjpimkMJhzuz4R0Uw6JF0Zu/QDCovN9
imuRL6ULZlvO2qgDOD9pNdBJKbi27BbomT+Y/Nb5pdUS/Wd+1zA=
-----END CERTIFICATE-----
Generated at Wed May 20 21:19:14 2026 by rpki-client