Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F913F084AB111F194D32D14CF1D38B0.roa
File: 6F913F084AB111F194D32D14CF1D38B0.roa (raw, json)
Hash identifier: TIr5eMCUDKBiJjCBj2lwdsghvIeYA1e7BCr40uyoYuU=
Subject key identifier: 12:3A:A3:C4:BE:97:9F:8F:B5:1A:0C:9F:17:8A:E3:CD:F9:DB:58:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CA49
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F913F084AB111F194D32D14CF1D38B0.roa
Signing time: Fri 08 May 2026 07:42:17 +0000
ROA not before: Fri 08 May 2026 07:40:42 +0000
ROA not after: Sun 14 Jun 2026 07:40:42 +0000
asID: 199707
IP address blocks: 154.83.130.0/23 maxlen: 24
154.83.144.0/22 maxlen: 24
154.193.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117321 (0x1ca49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 07:40:42 2026 GMT
Not After : Jun 14 07:40:42 2026 GMT
Subject: CN=69fd93d9-2a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6b:dc:55:b1:2e:f4:66:30:85:87:4d:d1:9c:
66:44:57:f3:58:b7:34:bd:75:71:15:e8:5b:85:fe:
11:4a:02:bf:a0:8d:e8:7a:83:61:3d:b0:39:86:10:
ca:61:56:82:b7:a3:4b:4b:72:55:1b:b1:5f:22:71:
53:90:7f:54:c2:35:41:9d:bf:85:68:c0:db:a8:1b:
ad:8c:75:25:d5:1d:15:e6:37:01:1e:95:f2:ed:69:
f8:cb:9c:38:fc:c6:65:db:47:eb:af:6f:1f:57:a2:
d1:c5:8c:32:5d:67:58:96:f3:b2:3d:7c:89:63:6e:
63:11:fe:70:ac:1b:25:e3:6a:b2:5c:a6:fd:1c:3f:
92:1d:aa:d8:80:4c:a5:ac:4a:36:70:c9:3f:46:0e:
7b:d6:11:f1:db:31:1e:7a:2a:1f:2c:46:c0:9a:ea:
e2:33:e3:41:91:26:da:93:ee:99:a7:1b:62:ef:0e:
52:76:3e:72:c3:bd:f4:ec:ce:4c:44:5c:6d:fa:9f:
56:1d:89:ce:0e:5e:04:be:f2:93:45:18:32:0c:76:
ae:14:cf:ff:32:c2:ea:8f:f3:78:bc:f2:cc:46:95:
6e:a8:e8:16:0b:f6:9f:17:7c:a5:6b:b8:09:41:c7:
46:96:5a:29:2d:9b:2d:e9:67:d6:58:87:41:13:4a:
d1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3A:A3:C4:BE:97:9F:8F:B5:1A:0C:9F:17:8A:E3:CD:F9:DB:58:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F913F084AB111F194D32D14CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.130.0/23
154.83.144.0/22
154.193.152.0/22
Signature Algorithm: sha256WithRSAEncryption
74:a4:36:42:31:30:33:56:49:a5:9e:ed:57:a2:74:fb:49:59:
8e:87:d7:f9:10:7a:2e:93:a1:6f:1a:f7:7f:47:1d:af:ab:84:
b3:b4:0a:de:17:8f:95:eb:29:1e:82:85:62:26:d1:34:0b:83:
d2:c0:6d:d1:6c:a2:cf:56:00:16:07:fc:29:c5:e6:03:55:87:
16:e7:71:10:15:2a:63:52:1e:9e:d9:0d:4d:af:a4:c6:b9:02:
bb:50:c4:92:ef:66:a2:f0:19:a6:3d:1b:bf:e2:47:10:81:1c:
86:3a:18:1a:10:d6:c4:e0:74:41:08:19:cf:08:58:6b:50:07:
3d:ef:00:55:01:28:87:d3:11:40:9f:ec:cf:cf:74:2b:51:8d:
f5:96:fd:c5:d1:d1:cb:a9:20:81:a4:69:c0:35:69:04:6d:41:
66:c6:26:04:99:48:10:e7:d8:17:f9:84:23:35:04:5f:ae:c4:
0f:ba:d1:a7:6a:6c:19:3f:eb:1d:80:e7:9f:91:da:aa:d6:c8:
c1:55:79:b0:27:bd:49:34:c3:59:7b:9d:e7:8d:e9:2c:32:d4:
b7:7f:86:f7:68:97:37:41:0d:4c:74:3e:70:b6:26:1a:f6:bd:
d4:e6:8c:37:8a:22:0c:45:e1:fe:61:37:36:7a:b9:91:fe:c6:
d9:d6:ce:b1
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAcpJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTA4MDc0MDQyWhcNMjYwNjE0MDc0MDQyWjAYMRYw
FAYDVQQDEw02OWZkOTNkOS0yYTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1mvcVbEu9GYwhYdN0ZxmRFfzWLc0vXVxFehbhf4RSgK/oI3oeoNhPbA5
hhDKYVaCt6NLS3JVG7FfInFTkH9UwjVBnb+FaMDbqButjHUl1R0V5jcBHpXy7Wn4
y5w4/MZl20frr28fV6LRxYwyXWdYlvOyPXyJY25jEf5wrBsl42qyXKb9HD+SHarY
gEylrEo2cMk/Rg571hHx2zEeeiofLEbAmuriM+NBkSbak+6Zpxti7w5Sdj5yw730
7M5MRFxt+p9WHYnODl4EvvKTRRgyDHauFM//MsLqj/N4vPLMRpVuqOgWC/afF3yl
a7gJQcdGllopLZst6WfWWIdBE0rRRwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFBI6
o8S+l5+PtRoMnxeK483521i9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82RjkxM0YwODRBQjExMUYxOTREMzJEMTRDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBmlOCAwQCmlOQAwQCmsGY
MA0GCSqGSIb3DQEBCwUAA4IBAQB0pDZCMTAzVkmlnu1XonT7SVmOh9f5EHouk6Fv
Gvd/Rx2vq4SztAreF4+V6ykegoViJtE0C4PSwG3RbKLPVgAWB/wpxeYDVYcW53EQ
FSpjUh6e2Q1Nr6TGuQK7UMSS72ai8BmmPRu/4kcQgRyGOhgaENbE4HRBCBnPCFhr
UAc97wBVASiH0xFAn+zPz3QrUY31lv3F0dHLqSCBpGnANWkEbUFmxiYEmUgQ59gX
+YQjNQRfrsQPutGnamwZP+sdgOefkdqq1sjBVXmwJ71JNMNZe53njeksMtS3f4b3
aJc3QQ1MdD5wtiYa9r3U5ow3iiIMReH+YTc2ermR/sbZ1s6x
-----END CERTIFICATE-----
Generated at Sat May 9 11:00:22 2026 by rpki-client