Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FBA7AB4618911F19A4DB60ACF1D38B0.roa
File: 6FBA7AB4618911F19A4DB60ACF1D38B0.roa (raw, json)
Hash identifier: np0+4TNWQTk0iHZfSQyhdll94qgr5q3XTRvC2y+YaQQ=
Subject key identifier: 12:90:9B:63:D1:2D:46:C6:67:46:75:D2:D6:C8:00:A2:07:04:2B:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D203
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FBA7AB4618911F19A4DB60ACF1D38B0.roa
Signing time: Sat 06 Jun 2026 09:23:54 +0000
ROA not before: Sat 06 Jun 2026 09:23:49 +0000
ROA not after: Mon 13 Jul 2026 09:23:49 +0000
asID: 4515
IP address blocks: 154.203.0.0/23 maxlen: 24
154.203.204.0/23 maxlen: 24
154.203.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Jun 2026 00:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119299 (0x1d203)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 09:23:49 2026 GMT
Not After : Jul 13 09:23:49 2026 GMT
Subject: CN=6a23e72a-50a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:fe:48:cd:02:94:5d:2f:3e:32:de:ed:32:
4b:54:96:e4:cb:6f:29:cf:4b:4e:86:45:a2:05:17:
4b:d8:a4:e1:a3:a0:a7:b6:fc:42:d7:9f:f4:91:c7:
38:90:61:09:a3:1c:0e:4d:c2:7c:6c:27:ce:8c:94:
00:ae:d4:5d:b5:c7:db:63:02:65:70:14:1d:78:96:
18:9d:11:a0:46:b2:7d:11:22:b6:8e:5a:fd:73:cb:
7c:b0:aa:d7:8e:87:cc:cf:99:66:13:fa:5b:4f:eb:
4a:78:33:13:bf:58:4f:49:25:91:c3:fa:d3:7c:6f:
32:aa:10:ae:93:4e:12:af:16:81:66:2e:5f:79:6a:
b8:49:22:57:db:88:9f:2b:70:ac:3e:75:d0:88:e7:
b4:90:e3:1a:35:83:00:f0:b7:f8:3e:a2:a9:b9:95:
ef:49:fc:25:f5:ad:d0:4f:2f:34:fc:57:fc:aa:bf:
57:f9:fd:eb:f0:f9:3d:f1:75:30:db:03:41:cf:3d:
91:77:12:8b:5c:eb:3b:ef:84:c4:26:3f:6e:c1:cb:
4a:a7:db:16:da:82:59:91:f0:8a:ca:fc:95:0b:a2:
c1:c4:97:4c:4a:7a:82:9c:da:3c:fd:46:62:97:a8:
e9:f8:7b:87:73:8b:86:f8:86:64:c2:81:3b:41:a4:
9e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:90:9B:63:D1:2D:46:C6:67:46:75:D2:D6:C8:00:A2:07:04:2B:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FBA7AB4618911F19A4DB60ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.0.0/23
154.203.204.0/23
154.203.244.0/23
Signature Algorithm: sha256WithRSAEncryption
28:6d:1d:71:e9:36:72:06:16:03:af:75:39:48:e8:5c:d9:19:
90:55:57:27:07:63:16:60:40:40:01:fb:f1:2a:4a:9f:f0:e8:
eb:5b:4c:70:e1:18:c5:e6:3d:f0:76:bc:a6:13:7d:b4:27:39:
1a:a1:0d:cb:74:18:dd:23:72:fc:19:01:92:6a:53:99:a6:7a:
50:f5:5e:01:83:81:b7:94:41:e7:b4:a6:31:15:32:09:c6:d3:
b7:7a:bd:b4:1b:09:02:d9:c0:6e:0f:19:1d:f3:b0:d4:5d:1f:
46:e2:b6:94:3c:4b:25:a6:d1:18:60:ac:78:0b:d4:b7:04:60:
64:6f:11:dd:64:09:56:52:10:6b:26:71:27:e6:d3:b4:4d:e8:
1f:6b:c3:84:52:a3:dc:39:79:da:59:4b:12:8d:f5:94:4e:28:
25:45:0d:67:52:fb:a3:d4:f7:99:d5:17:94:ad:f1:ba:4a:dc:
b3:67:c1:71:e3:98:39:30:75:7a:a4:08:a5:87:b9:74:d2:f7:
4e:5d:58:00:db:28:0a:d7:13:c0:a2:10:63:19:54:d2:c1:48:
9d:60:6d:dd:a5:05:4b:6f:90:06:ad:7d:94:02:f6:6f:11:3f:
02:5e:ad:c6:ee:6b:c4:1b:56:9c:98:a8:38:1d:b6:ed:f0:52:
fe:ce:69:db
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAdIDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjA2MDkyMzQ5WhcNMjYwNzEzMDkyMzQ5WjAYMRYw
FAYDVQQDEw02YTIzZTcyYS01MGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtQv+SM0ClF0vPjLe7TJLVJbky28pz0tOhkWiBRdL2KTho6CntvxC15/0
kcc4kGEJoxwOTcJ8bCfOjJQArtRdtcfbYwJlcBQdeJYYnRGgRrJ9ESK2jlr9c8t8
sKrXjofMz5lmE/pbT+tKeDMTv1hPSSWRw/rTfG8yqhCuk04SrxaBZi5feWq4SSJX
24ifK3CsPnXQiOe0kOMaNYMA8Lf4PqKpuZXvSfwl9a3QTy80/Ff8qr9X+f3r8Pk9
8XUw2wNBzz2RdxKLXOs774TEJj9uwctKp9sW2oJZkfCKyvyVC6LBxJdMSnqCnNo8
/UZil6jp+HuHc4uG+IZkwoE7QaSeJQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFBKQ
m2PRLUbGZ0Z10tbIAKIHBCvvMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82RkJBN0FCNDYxODkxMUYxOUE0REI2MEFDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBmssAAwQBmsvMAwQBmsv0
MA0GCSqGSIb3DQEBCwUAA4IBAQAobR1x6TZyBhYDr3U5SOhc2RmQVVcnB2MWYEBA
AfvxKkqf8OjrW0xw4RjF5j3wdrymE320JzkaoQ3LdBjdI3L8GQGSalOZpnpQ9V4B
g4G3lEHntKYxFTIJxtO3er20GwkC2cBuDxkd87DUXR9G4raUPEslptEYYKx4C9S3
BGBkbxHdZAlWUhBrJnEn5tO0Tegfa8OEUqPcOXnaWUsSjfWUTiglRQ1nUvuj1PeZ
1ReUrfG6StyzZ8Fx45g5MHV6pAilh7l00vdOXVgA2ygK1xPAohBjGVTSwUidYG3d
pQVLb5AGrX2UAvZvET8CXq3G7mvEG1acmKg4Hbbt8FL+zmnb
-----END CERTIFICATE-----
Generated at Sat Jun 6 13:32:34 2026 by rpki-client