Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/650D05185F2811F19162DA11CF1D38B0.roa
File: 650D05185F2811F19162DA11CF1D38B0.roa (raw, json)
Hash identifier: bPzexpOdRZoX9fT9CnxhsUl5UPtlgJg23ggTIQ/a4hc=
Subject key identifier: EA:6E:9F:AC:2E:76:29:CE:18:71:AA:9E:B4:C4:A0:13:B6:85:5B:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D16D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/650D05185F2811F19162DA11CF1D38B0.roa
Signing time: Wed 03 Jun 2026 08:44:13 +0000
ROA not before: Wed 03 Jun 2026 08:44:08 +0000
ROA not after: Wed 05 Aug 2026 08:44:08 +0000
asID: 9294
IP address blocks: 154.195.64.0/19 maxlen: 24
154.203.96.0/19 maxlen: 24
154.205.64.0/18 maxlen: 24
154.206.192.0/19 maxlen: 24
154.218.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119149 (0x1d16d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 3 08:44:08 2026 GMT
Not After : Aug 5 08:44:08 2026 GMT
Subject: CN=6a1fe95d-03c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e1:84:05:d9:60:ab:14:ff:dd:89:64:2d:95:
9c:44:a6:cc:4c:c8:cf:1f:81:67:eb:57:6b:2a:8e:
ce:de:89:3d:4f:6c:7a:aa:0c:6c:d9:f7:dc:1c:a4:
a9:f6:b0:81:05:30:ce:b4:9b:74:80:5a:6b:da:d7:
4c:f4:aa:71:97:41:a5:11:12:95:aa:50:df:e6:06:
8d:8b:1d:ff:c0:4d:8c:cb:91:a6:7b:47:ec:5e:57:
a9:e8:4f:94:ca:b9:a2:16:ed:a2:22:38:af:7b:b5:
89:94:aa:d5:f0:45:1a:d6:1d:fa:d8:02:49:c5:2e:
8f:6a:3d:16:57:78:d0:ff:a4:86:37:15:ed:8c:28:
06:ef:a8:89:f8:14:4f:e9:19:6e:3e:3d:0c:50:93:
f2:39:43:14:0d:6f:21:68:fe:88:1f:b6:07:f5:ff:
da:aa:c0:c1:b1:1a:1f:56:8d:4f:ac:8a:e8:7f:91:
b2:3c:91:94:d8:31:f9:69:d3:a4:63:3c:62:26:71:
52:68:96:44:fa:aa:9a:0f:27:20:49:2b:e7:97:e9:
4a:05:e3:fb:57:e0:54:86:6a:b0:27:fc:4d:55:57:
22:63:b4:7d:a4:63:c5:39:55:85:24:3f:f6:c0:85:
57:52:38:3a:de:9b:2f:15:a8:c2:d4:c5:a2:7b:b7:
6e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6E:9F:AC:2E:76:29:CE:18:71:AA:9E:B4:C4:A0:13:B6:85:5B:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/650D05185F2811F19162DA11CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.64.0/19
154.203.96.0/19
154.205.64.0/18
154.206.192.0/19
154.218.32.0/19
Signature Algorithm: sha256WithRSAEncryption
39:15:41:d4:5a:59:20:13:d7:fe:3e:6d:30:1b:8f:42:68:8f:
65:0d:a9:5b:09:04:77:a6:03:e2:8d:2f:2a:f1:9b:c9:6a:7f:
14:46:03:59:af:0b:a7:75:f0:a0:27:95:59:c7:08:fd:3f:59:
25:a6:64:f0:c0:d4:85:47:90:b3:6d:3a:e1:13:f9:40:8f:fc:
92:77:cf:01:69:8e:e2:27:9c:ab:0e:3c:70:ef:7e:dd:0b:54:
bc:81:62:bd:11:97:fd:82:03:7d:2c:b2:1b:2a:74:14:2f:7c:
c1:88:73:ba:b9:d5:6c:c4:59:da:73:6f:41:e6:e6:a5:96:90:
0c:c3:08:64:e0:aa:06:f8:a1:e0:ac:fa:be:57:59:70:b5:51:
92:83:bf:3e:f6:0c:27:45:b1:43:cf:90:c2:d5:6a:ed:cb:a8:
41:91:08:e6:41:cd:c5:e7:74:49:31:5c:8c:1c:88:3a:23:37:
a7:bf:57:20:f8:12:b7:f1:b0:f8:31:e0:98:59:59:b2:eb:6b:
dd:7b:0f:03:73:0d:68:8f:17:42:b9:95:2d:f5:33:f7:ea:10:
d2:47:aa:92:05:85:63:cf:03:24:36:97:b0:5f:6a:7f:8a:a7:
7b:88:90:c4:b2:7e:7b:29:dc:af:fc:c0:26:d8:8f:53:8d:a8:
b3:57:4d:c5
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgIDAdFtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjAzMDg0NDA4WhcNMjYwODA1MDg0NDA4WjAYMRYw
FAYDVQQDEw02YTFmZTk1ZC0wM2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv+GEBdlgqxT/3YlkLZWcRKbMTMjPH4Fn61drKo7O3ok9T2x6qgxs2ffc
HKSp9rCBBTDOtJt0gFpr2tdM9Kpxl0GlERKVqlDf5gaNix3/wE2My5Gme0fsXlep
6E+UyrmiFu2iIjive7WJlKrV8EUa1h362AJJxS6Paj0WV3jQ/6SGNxXtjCgG76iJ
+BRP6RluPj0MUJPyOUMUDW8haP6IH7YH9f/aqsDBsRofVo1PrIrof5GyPJGU2DH5
adOkYzxiJnFSaJZE+qqaDycgSSvnl+lKBeP7V+BUhmqwJ/xNVVciY7R9pGPFOVWF
JD/2wIVXUjg63psvFajC1MWie7du2wIDAQABo4ICvTCCArkwHQYDVR0OBBYEFOpu
n6wudinOGHGqnrTEoBO2hVvrMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NTBEMDUxODVGMjgxMUYxOTE2MkRBMTFDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQFmsNAAwQFmstgAwQGms1A
AwQFms7AAwQFmtogMA0GCSqGSIb3DQEBCwUAA4IBAQA5FUHUWlkgE9f+Pm0wG49C
aI9lDalbCQR3pgPijS8q8ZvJan8URgNZrwundfCgJ5VZxwj9P1klpmTwwNSFR5Cz
bTrhE/lAj/ySd88BaY7iJ5yrDjxw737dC1S8gWK9EZf9ggN9LLIbKnQUL3zBiHO6
udVsxFnac29B5uallpAMwwhk4KoG+KHgrPq+V1lwtVGSg78+9gwnRbFDz5DC1Wrt
y6hBkQjmQc3F53RJMVyMHIg6Izenv1cg+BK38bD4MeCYWVmy62vdew8Dcw1ojxdC
uZUt9TP36hDSR6qSBYVjzwMkNpewX2p/iqd7iJDEsn57Kdyv/MAm2I9TjaizV03F
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:49:18 2026 by rpki-client