Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6267D330553F11F1BA749BC1CE1D38B0.roa
File: 6267D330553F11F1BA749BC1CE1D38B0.roa (raw, json)
Hash identifier: f58oiGytHFYhEGpVpA9ylTDwLk2sqF7RRNbOiQQnIbc=
Subject key identifier: CA:4B:FE:47:C4:9B:5A:A0:9D:6A:37:54:A0:7E:1F:0F:DA:F9:26:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CDA5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6267D330553F11F1BA749BC1CE1D38B0.roa
Signing time: Thu 21 May 2026 18:03:35 +0000
ROA not before: Thu 21 May 2026 18:03:30 +0000
ROA not after: Tue 25 Aug 2026 18:03:30 +0000
asID: 13335
IP address blocks: 154.194.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118181 (0x1cda5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 18:03:30 2026 GMT
Not After : Aug 25 18:03:30 2026 GMT
Subject: CN=6a0f48f7-1fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:27:52:e7:c6:f0:82:77:d9:b2:18:c5:0b:8d:
d8:6d:40:67:8a:1d:55:6e:39:38:3e:2e:68:99:32:
d5:ef:9b:99:9b:ac:f0:9d:14:2e:71:1b:e2:c3:04:
1e:44:e9:33:a9:51:0c:de:4b:60:f6:da:6e:bd:db:
7c:7d:6f:72:11:9a:14:d5:62:c1:a0:2f:f5:57:90:
52:1d:b7:36:d2:56:69:9b:bd:62:5a:0f:bf:2c:55:
a3:0a:28:db:50:ee:bc:86:51:8e:f0:65:37:51:6b:
84:52:43:59:65:1c:8c:f3:51:d9:7f:4b:05:32:93:
e2:b6:b3:e5:10:0b:12:38:40:a6:5a:d3:da:07:82:
96:f3:ca:8a:8d:78:da:31:af:d1:12:11:7a:0c:1f:
67:ed:a4:49:26:5c:c0:4e:5a:fb:fe:30:44:bb:0d:
fe:da:93:1d:41:f4:fb:3d:48:90:b7:27:c6:ed:84:
a6:6d:5a:73:be:2c:47:6c:93:40:0b:d2:84:60:2b:
be:17:53:98:22:17:c4:66:7c:3f:de:ad:0e:49:ee:
35:c2:17:c9:81:84:a2:2e:8d:63:e5:57:22:c9:1b:
48:8d:7a:e1:c9:ed:13:f9:51:b8:ce:ee:8c:cd:69:
77:ac:2d:bd:9f:5d:4f:c4:d7:9f:16:5e:a1:7c:ff:
d5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4B:FE:47:C4:9B:5A:A0:9D:6A:37:54:A0:7E:1F:0F:DA:F9:26:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6267D330553F11F1BA749BC1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.225.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:ea:b1:66:b4:4c:c9:c8:8a:8c:65:a1:04:c1:35:65:82:90:
5a:5a:55:34:fa:7c:fa:84:ca:d5:60:03:a5:cf:10:7f:b2:ce:
5e:4e:88:a9:6a:ad:ef:82:00:0e:d0:fe:bc:57:4f:7c:79:36:
7a:7a:87:42:03:ce:21:50:7b:7d:e7:de:ca:e6:95:68:92:9a:
00:c6:07:10:53:52:99:86:e0:62:64:65:e2:41:69:f3:07:b2:
f8:c8:c1:75:0e:90:f4:a4:43:64:c3:23:af:32:5a:97:17:39:
3b:1e:ee:87:03:06:cb:48:ed:8f:1f:eb:9f:16:59:d1:de:07:
57:58:ab:f4:3b:dc:df:96:bb:de:bf:b0:f3:26:28:ce:49:d0:
18:e8:c1:1f:b0:93:c4:ce:dc:c3:fe:2f:f0:24:1b:24:99:8e:
a7:91:dc:b2:f6:ca:45:75:15:7b:11:ec:6a:6c:24:1f:66:df:
80:4d:92:53:9f:50:d3:6b:cf:dc:ea:03:cf:10:f2:e5:3c:3d:
24:f0:44:7c:f5:e0:06:32:b1:2c:8c:db:c0:92:96:31:0a:1f:
df:9c:53:e1:d5:f6:98:e8:fe:36:ea:df:27:54:e9:aa:02:5a:
d3:bd:4d:37:41:49:27:47:da:b0:be:de:ba:56:ed:06:ff:de:
96:38:23:73
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAc2lMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTIxMTgwMzMwWhcNMjYwODI1MTgwMzMwWjAYMRYw
FAYDVQQDEw02YTBmNDhmNy0xZmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2SdS58bwgnfZshjFC43YbUBnih1Vbjk4Pi5omTLV75uZm6zwnRQucRvi
wwQeROkzqVEM3ktg9tpuvdt8fW9yEZoU1WLBoC/1V5BSHbc20lZpm71iWg+/LFWj
CijbUO68hlGO8GU3UWuEUkNZZRyM81HZf0sFMpPitrPlEAsSOECmWtPaB4KW88qK
jXjaMa/REhF6DB9n7aRJJlzATlr7/jBEuw3+2pMdQfT7PUiQtyfG7YSmbVpzvixH
bJNAC9KEYCu+F1OYIhfEZnw/3q0OSe41whfJgYSiLo1j5VciyRtIjXrhye0T+VG4
zu6MzWl3rC29n11PxNefFl6hfP/VCQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMpL
/kfEm1qgnWo3VKB+Hw/a+SY5MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MjY3RDMzMDU1M0YxMUYxQkE3NDlCQzFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsLhMA0GCSqGSIb3DQEB
CwUAA4IBAQDL6rFmtEzJyIqMZaEEwTVlgpBaWlU0+nz6hMrVYAOlzxB/ss5eToip
aq3vggAO0P68V098eTZ6eodCA84hUHt9597K5pVokpoAxgcQU1KZhuBiZGXiQWnz
B7L4yMF1DpD0pENkwyOvMlqXFzk7Hu6HAwbLSO2PH+ufFlnR3gdXWKv0O9zflrve
v7DzJijOSdAY6MEfsJPEztzD/i/wJBskmY6nkdyy9spFdRV7EexqbCQfZt+ATZJT
n1DTa8/c6gPPEPLlPD0k8ER89eAGMrEsjNvAkpYxCh/fnFPh1faY6P426t8nVOmq
AlrTvU03QUknR9qwvt66Vu0G/96WOCNz
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:42 2026 by rpki-client